Allow more granular control of which files and from/to who are allowed to pass through anti-virus scanning.
I would be great if we had more granular control over which attachments along with a combo of which senders/receivers/attachments, senders/attachments or receivers/attachments were allowed pass through the SecurityPlus AV engine.
Maybe if there was some way to do a basic gateway scan on the email and if it has unscanable attachments then pass it to the CF filter where you could set up the granular rules to by-pass the AV scan depending on file extension, receiver, sender, etc...
Pat
shared this idea
Hello Pat,
Thank you for sharing your suggestion with us. This can already be done by selecting the option for “do nothing (use content filter to handle” when viruses are detected. This allows you to create content filter rules that are used to handle messages that are infected. Creating rules gives you the ability to check for attachments/senders/receivers, etc. You’ll need to make sure that you uncheck the option to refuse messages that are infected and at a minimum create a content filter to handle infected emails.
Thanks,
Arron
-
Pat
commented
Thanks Arron, I must have been typing my clarification while you were posting your reply
-
Pat
commented
A few corrections, just so it seems somewhat coherent
It would be great if we had more granular control over which attachments along with a combo of which senders/receivers/attachments, senders/attachments or receivers/attachments were allowed by-pass the SecurityPlus AV engine.
Maybe if there was some way to do a basic gateway scan for obvious viruses on the email and if it has unscannable attachment(s) then pass it to the Content filter where you could set up the granular rules to by-pass the AV scan depending on file extension, receiver, sender, etc...
Examples:
1. Our wages system emails out password protected PDF payslips. What I'd like to do is, if the sender is payroll@localdomain.com and the file has a password protected PDF attached, then either skip the AV scan or do not append the "MDaemon couldn't scan the payslip.pdf file..."
For corporate policy reasons I'd still like to scan any other attachments this sender sends.2. A number of our suppliers send us password protected files, so what I'd like to do if the email is to person@localdomain.com or mailinglist@localdomain.com and is from supplier@domain.com (or a list of supplier emails) and it has an unscannable protected attachment then skip the AV scan or don't append the "MD cannot scan..."