Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Blocking EXE file within a ZIP file using the Attachment Blocking of WFBS and SMEX

    • Updated:
    • 15 Apr 2016
    • Product/Version:
    • ScanMail for Exchange 11.0
    • ScanMail for Exchange 12.0
    • Worry-Free Business Security Standard/Advanced 7.0
    • Worry-Free Business Security Standard/Advanced 8.0
    • Worry-Free Business Security Standard/Advanced 9.0
    • Platform:
    • Windows 2003 Enterprise
    • Windows 2003 Server R2
    • Windows 2003 Small Business Server
    • Windows 2003 Small Business Server R2
    • Windows 2003 Standard
    • Windows 2008 Enterprise
    • Windows 2008 Essential Business Server
    • Windows 2008 Server R2
    • Windows 2008 Small Business Server
    • Windows 2008 Standard
    • Windows 2011 Small Business Server Essentials
    • Windows 2011 Small Business Server Standard
    • Windows 2012 Enterprise
    • Windows 2012 Server Essentials
Summary

Detect and block the EXE file type inside a ZIP or compressed file using the Attachment Blocking feature available in Worry-Free Business Security (WFBS) and ScanMail for Exchange (SMEX).

Details
Public
 
Attachment Blocking skips a mail which is quarantined and detected as spam by the Anti-Spam feature of WFBS or SMEX.
For SMEX, you may enable the Attachment Blocking filter to prevent skipping the detected spam mails.
For WFBS 8.0, you need to request a hotfix first from Trend Micro Technical Support before enabling the Attachment Blocking filter.

Attachment Blocking is designed to pass unscannable or encrypted file attachments. The procedure below will only block EXE file in a ZIP or compressed file. You may refer to another article on how to block EXE file in an encrypted or password-protected ZIP file.

To block EXE file in a ZIP file, follow the procedure for your product below:

  1. Log in to WFBS Web Management console.
  2. Go to Security Settings > Select your Exchange Server > Configure.
  3. Under MSA Configuration, select Attachment Blocking.
  4. Tick the Enable real-time attachment blocking check box.
  5. Under Target tab, select Specific attachments.
  6. Select Attachment Types > Applications and executables > Executables (.exe; dll; .vxd).
  7. Tick the Block attachment types or names within ZIP files check box.

    Block attachment types within ZIP in WFBS

    Click image to enlarge.

  8. Go to Action tab and select your preferred action from the following:
    • Replace attachment with text/file
    • Quarantine entire message
    • Quarantine message part
    • Delete entire message

    Select an action for Attachment Blocking in WFBS

    Click image to enlarge.

  9. Click Save.
  1. Log in to SMEX Management console.
  2. Go to Attachment Blocking > Global Policy > Target tab.

    Attachment blocking

    Click image to enlarge.

  3. Select and expand Specific attachments.
  4. Select Attachment types > Applications and executable files > Executable (.exe; dll; .vxd).
  5. Tick the Block attachment types or names within compressed files check box.

    Configure Blocking Targets

    Click image to enlarge.

  6. Go to Action tab and select your preferred action from the following:
    • Replace attachment with text/file
    • Quarantine entire message
    • Quarantine message part
    • Delete entire message

    Configure Action Settings

    Click image to enlarge.

  7. Click Save. The screen returns to the Attachment Blocking main page.
  8. On the Attachment Blocking main page, tick the Enable attachment blocking check box.
     
    For SMEX with both Hub Transport and Mailbox Role, it is recommended to select the two (2) Enable attachment blocking check boxes. For SMEX with Mailbox Role only or with Hub Transport Role only, there will be only one (1) Enable attachment blocking check box for each server. We still recommend to select the Enable attachment blocking check box on both servers.

    Enable attachment blocking

    Click image to enlarge.

     
    For SMEX 12.0 or SMEX installed on Exchange 2013, due to design changes in Microsoft Exchange, there is only one (1) Enable attachment blocking check box for each server. It is still recommended to enable this option.

    ”SMEX12”

    Click image to enlarge.

  9. Click Save.
Premium
Internal
Rating:
Category:
Configure
Solution Id:
1099619
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.


Need More Help?

Create a technical support case if you need further support.