^{Click the image to enlarge.}

1. Click on the High Risk Attachment policy you created and go to Scanning Criteria tab.
2. Select Advanced.
3. Change Condition to "All Match"
4. Tick on the Attachment is name or extension checkbox, then click on the name or extension hyperlink.

   

   ^{Click the image to enlarge.}

5. A new window will open which allows choose the attachment names to block and exclude from scanning. From the dropdown section, select Not the selected attachment names.
6. Tick the Attachments named box.
7. Type the following one by one and click on Add button to add entries to the list.
   • heic
   • heics

   

   ^{Click the image to enlarge.}

8. Click Save.
9. Go back to Scanning Criteria tab, tick the Attachment is true file type checkbox, and then click the true file type hyperlink.

   

   ^{Click the image to enlarge.}

10. A new window will open which allows settings for attachment true file type.

    

    ^{Click the image to enlarge.}

11. From the dropdown, choose Select attachment types.
12. Tick on the Media checkbox and select quicktime/mpeg-4.

    

    ^{Click the image to enlarge.}

13. Click Save.
14. Under the Actions tab, set policy's action to Quarantine.