This article contains information on viewing and managing stripped or blocked email attachments in Mimecast, including their statuses, search options, and how administrators can release or review attachments based on policies.
To view attachments that have been removed from emails:
- Log in to the Mimecast Administration Console.
- Select the Email Security | Attachments menu item. A list of stripped attachments, together with details of the email they came in, is displayed:
The Ext column shows the file extension for the attachment. This is the actual MIME type of the attachment. Even if the attachment file type has been renamed, the actual file type will be displayed.
The Status column displays an icon showing the status of the attachment, as detailed below:
| Icon | Attachment Status | Description |
|---|---|---|
| Attachment Linked | The attachment has been removed from the original email due to a strip and link policy. This could either be done using an Attachment Link on Size policy or by selecting the link option in an Attachment Set. The end user will receive the original email with a system notification attachment. A HTTPS hyperlink is provided for the end user to download the attachment directly from Mimecast. | |
| Attachment Linked and available for sandbox | The attachment has been removed from the original email due to a strip and link policy and will be available for sandboxing. This could either be done using an Attachment Link on Size policy or by selecting the link option in an Attachment Set. The end user will receive the attachment in a safe file format. A HTTPS hyperlink is provided for the end user to download the attachment directly from Mimecast. | |
| Attachment Released | The attachment, or the original message with an attachment, has been released by an Administrator to the end user. | |
| Attachment Blocked | The attachment has been blocked due to an Attachment Management Policy or an Attachment Block on Size Policy. |
The search field allows an Administrator to filter the view by searching for the FROM, TO address, or filename. By default, Stripped Attachments displays one month's worth of attachments. The date range can also be changed by using the From and To calendar controls and clicking the reload button.
Additional information is provided when a message is selected, including the status of the message and the details of the attachment:
If the Released field only applies to Attachment Block on Size Policies or Attachment Management Policies where the Deny option has been enabled.
Attachment Protection Logs has a scan result labeled Not Verified. This status will apply to attachments that are currently pending submission by the end user through the decryption portal. With this update, administrators can now easily search for attachments in this state.
You can filter the messages displayed in the Attachment Protection Logs queue by using the Not Verified view option.
Comments
Please sign in to leave a comment.