locked
How to block macros, scripts and password protected office documents with Forefront Online Protection for Exchange RRS feed

  • Question

  • Hello,

     

    We use Forefront Online Protection for Exchange and I have  problems to implement some rules.

     

    How can I intercept emails with renamed scripts as attachment  (e.g.  misleading extension)?

    How can I intercept Office documents containing macros  ?

    How can I intercept password protected Office documents ?

    How to enforce the use of white lists and prevent sending mails to non members ?

    Thanks for your help


    Willy1willy
    Tuesday, March 1, 2011 2:45 PM

Answers

  • How can I intercept emails with renamed scripts as attachment  (e.g.  misleading extension)?

    FOPE already has a set of predefined extensions which will be blocked by default.

    *.{*
    *.ade
    *.adp
    *.app
    *.bas
    *.bat
    *.cer
    *.chm
    *.cmd
    *.com
    *.cpl
    *.crt
    *.csh
    *.der
    *.exe
    *.fxp
    *.hlp
    *.ht
    *.hta
    *.inf
    *.ins
    *.isp
    *.js
    *.jse
    *.ksh
    *.lnk
    *.mda
    *.mdb
    *.mde
    *.mdt
    *.mdw
    *.mdz
    *.msc
    *.msh
    *.msi
    *.msp
    *.mst
    *.ops
    *.pcd
    *.pif
    *.prf
    *.prg
    *.pwl 
    *.reg
    *.scf
    *.scr
    *.sct
    *.shb
    *.shs
    *.url
    *.vb
    *.vbe
    *.vbs
    *.wsc
    *.wsf
    *.wsh
    *.xsl
    *.zi

    How can I intercept Office documents containing macros  ?

    You can try with rules at FOPE.

    How can I intercept password protected Office documents ?

    You can try with rules at FOPE.

    How to enforce the use of white lists and prevent sending mails to non members ?

     You need to check this from FOPE team. You should be having read access to FOPE. I don't think you will be able to do this. Create a ticket with support and check if they can do it for you from FOPE.

     

    Thank you

    Nav


    Regards, Kris - BPOS Expert
    Wednesday, March 2, 2011 2:59 AM
  • Willy as i mentioned before, you will have only read access to FOPE. Best thing you can do is, create a ticket with support and ask them to create a rule from the FOPE.
    Regards, Kris - BPOS Expert
    Wednesday, March 2, 2011 10:04 PM

All replies

  • How can I intercept emails with renamed scripts as attachment  (e.g.  misleading extension)?

    FOPE already has a set of predefined extensions which will be blocked by default.

    *.{*
    *.ade
    *.adp
    *.app
    *.bas
    *.bat
    *.cer
    *.chm
    *.cmd
    *.com
    *.cpl
    *.crt
    *.csh
    *.der
    *.exe
    *.fxp
    *.hlp
    *.ht
    *.hta
    *.inf
    *.ins
    *.isp
    *.js
    *.jse
    *.ksh
    *.lnk
    *.mda
    *.mdb
    *.mde
    *.mdt
    *.mdw
    *.mdz
    *.msc
    *.msh
    *.msi
    *.msp
    *.mst
    *.ops
    *.pcd
    *.pif
    *.prf
    *.prg
    *.pwl 
    *.reg
    *.scf
    *.scr
    *.sct
    *.shb
    *.shs
    *.url
    *.vb
    *.vbe
    *.vbs
    *.wsc
    *.wsf
    *.wsh
    *.xsl
    *.zi

    How can I intercept Office documents containing macros  ?

    You can try with rules at FOPE.

    How can I intercept password protected Office documents ?

    You can try with rules at FOPE.

    How to enforce the use of white lists and prevent sending mails to non members ?

     You need to check this from FOPE team. You should be having read access to FOPE. I don't think you will be able to do this. Create a ticket with support and check if they can do it for you from FOPE.

     

    Thank you

    Nav


    Regards, Kris - BPOS Expert
    Wednesday, March 2, 2011 2:59 AM
  • Thanks for your answer.

    You said :" you can try with rules at FOPE".

    Could you tell me how can I do that with FOPE ?

    For me, impossible to block a Macro and password protected office documents with FOPE

    thanks


    Willy1willy
    Wednesday, March 2, 2011 3:08 PM
  • Willy as i mentioned before, you will have only read access to FOPE. Best thing you can do is, create a ticket with support and ask them to create a rule from the FOPE.
    Regards, Kris - BPOS Expert
    Wednesday, March 2, 2011 10:04 PM
  • Kris,

     

    Thanks for your answer

     

    In FOPE,  I can create rules myself.  I can add rules in Administration | Policy Rules  tab 

    May be I must contact support for specific rules ?

    Thanks for your help


    Willy1willy
    Thursday, March 3, 2011 9:44 AM
  • Not needed Willy. If are able to create rules, then thats cool. Go ahead.
    Regards, Kris - BPOS Expert
    Friday, March 4, 2011 2:48 AM