Skip to main content
JoseRT
New Member
September 26, 2019
Question

Emails with .rar attachments are quarantined

  • September 26, 2019
  • 1 reply
  • 3901 views
Hi. 

All emails that enter the Forti with an attached .rar file put them in quarantine. I don't know what I can do to avoid this problem. I have put the accounts
from which they send me an email with .rar files on the "Safe List" and still the Forti puts them in quarantine. Who could help me?

Best Regards

    1 reply

    abelio
    SuperUser
    SuperUser
    September 26, 2019

    Hi

    logs have the answer

     

    identify quarantined email doing a cross search in your history logs and you could identify exactly policy and cause of that quarantine action

    JoseRT
    JoseRTAuthor
    New Member
    September 27, 2019

    Hi Abel

     

    Thanks for answering. Yes, the reason if I know it, what I don't know is how to fix it without allowing all the .rar files in all emails:

     

    756 2019-09-26 13:50:53.112 Attachment Filter Quarantine   Regards José
    abelio
    SuperUser
    SuperUser
    September 27, 2019

    Hi

    There's nothing to 'fix' actually, because it's a matter of configuration, not a bug.

     

    If your general policy is blocking 'rar'  attachments and you prefer to preserve that configuration in general, you'll need to configure exceptions; another more specific policies with different content profiles to avoid this general rule.