Policies - Configuring Attachment Management

An Attachment Management policy monitors attachments going in or out of your environment. Each policy uses a definition that applies the rules for handling attachment types. Attachments can be:

• Stripped from the message and substituted with a link (stripped and linked).
• Denied by size.
• Held for review.

These restrictions are applied to the true Multipurpose Internet Mail Extensions (MIME) type of an attachment. This means that attachments that are commonly renamed with malicious intent won't bypass the system (this does not apply to all file name extensions listed in the definition set). The strip-and-deny options can be overridden using the Large File Send functionality.

A default Attachment Management policy and definition, called Default Dangerous File Blocking, is created during the implementation process. They block a list of dangerous file types that should be prevented from being delivered. See the What is a Dangerous File Type? page for full details.

When an attachment is blocked:

• The message is delivered without the attachment.
• The attachment is held in a queue.
• If configured, the message contains a notification informing the recipient that an attachment was stripped.
• If the recipient feels the attachment is legitimate, they can contact their administrator to request its release.

To configure Attachment Management you must have at least one of the following records:

• • • Attachment Management Definition
    • Attachment Management Policy

See Also...

• • • Configuring Attachment Management Bypass Policies
    • Targeted Threat Protection – Attachment Protect