Re: Employees & their family / friends in collusion to bypass email fi

Hi,

Microsoft Forefront security for Exchange server (formerly Antigen) will do
this for you.

Leif

"DefenderD90" <DefenderD90@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:405E82E0-226E-46DE-A6F6-E1D635021E1B@xxxxxxxxxxxxxxxx
Currently, we have a barracuda that has about 40 manually typed extensions
in
the barracuda interface to filter movie formats by extension.


However, it seems individuals are getting their friends on the outside to
rename :

blah.mpeg to blah.qrx - meaning it is a fake extension.

This bypasses the filters.

I asked barracuda networks if its possible to do any kind of mime
filtering,
that analyzes the data, and not just the extension, through header/footer
analysis of the attachment(s), and they said it is not possible.

can any 3rd party mail clients take this task, and deliver with an answer?


That is our outside to inside filter.


However, it also seems once employees get this, they are circulating and
cc'ing everyone for example: a 7meg movie attachment, and sending it to 19
other employees....truely a waste of of the business email database space.

Is there a way for exchange '03 enterprise, or any 3rd party addons, to
monitor internal to internal deliverance of multimedia files, and if they
do
extension renaming or embedding in archived attachments, or a renamed
archived zip file to blah.jmz , true data analysis of content.

If it continues, it'll become an HR issue leading to termination, but I
need
professional opinions on this.





.

Relevant Pages

  • RE: URLScan and EXE
    ... Please record the tree structure with the key defined in this node, then create one .foo Key with the same to the .exe one. ... Close the regedit and then Windows OS loader will treat the .foo as one executable files, which will try to load it. ... "Can I change the file extension on the URL through an ISAPI filter after it passes through URLScan?" ...
    (microsoft.public.inetserver.iis.security)
  • Re: Employees & their family / friends in collusion to bypass email fi
    ... the barracuda interface to filter movie formats by extension. ... That is our outside to inside filter. ...
    (microsoft.public.exchange.admin)
  • ISA SMTP Filters not applying properly
    ... So for instance I was blocking SCR but was noticing a ... the extension for the unfiltered ... >I have recently setup the SMTP filtering extension on my ... >get the SMTP filter to filter out by file extension and ...
    (microsoft.public.isa)
  • Re: Advise on Filters please
    ... Plugged into the master ... them from the back of this new Master Socket front plate. ... ANY device that is plugged into a telephone socket - needs a filter. ... the exchange and the callerID + modem (as the extension ...
    (comp.sys.acorn.misc)