Block executables in archives

[eyeSome]

Hey there, at the moment we got a lot of virus-mails with executables in archives. Is there any chance to block filetypes in archives in fortimail? We don' t want archives with executables inside. Regards, nickel

[romanr]

Hi, you need a content profile - that blocks executables and has scanning activated on archives in the " scans conditions" section. and apply this content profile on your policies, be it incoming or outgoing! br, Roman

[eyeSome]

Hey Roman, we have a content profile with file-filter for *.exe and archive scanning activated. But with some test-mails it shows, that exe-files will be blocked, but exe in zip-files not. Regards, nickel

[eyeSome]

Hey there, we now had some cases where users received an email with zipped attachment and " blocked" files in there. In these cases the content-filter removed the zip-file so it is doing, what we want it to do. Not sure, why we had some users who got exe-files in zip and where able to open them, but i think with this we should be fine. Regards, nickel