LibraCyber ESG performs filename and filetype compliance checking to protect you from dangerous attachments. It is possible to override these settings with filename and filetype custom lists. If an attachment matches a custom entry, LibraCyber ESG standard checks will be ignored.
Warning: compile with care as this could expose your organization to viruses, trojans, malware, and unsecure content.
Attachment Rules
In this section you can configured what action ESG will perform when analyzing an attachment matching the given extension or file type. An attachment could have different extension and file type as files are easily renameable (e.g. an executable file could have a .pdf extension).
Note: filename and filetype are separate checks, so if you want to allow executable *.exe files you will need at least to allow extension .exe and to allow filetype executable to make it pass both tests. If either test denies the attachment then it will be blocked.
File Name Rules
From this section you can configure desidered action (Allow or Deny) to perform when an attachment file name matches. In this table are displayed all the active rules. You can filter out the displayed rules by performing a Search and Export the results in common formats such as PDF and CSV. Some file extensions are not allowed by default in ESG. You can learn more from the Not allowed attachments knowledge base.
To add a new rule, you can click the New button and configure the rule follow this guidelines:
- The rule is applied to a configurable Sender/Recipient pair. You can use the default keyword in order to apply this policy for every sender or recipient respectively.
- To create a file extension policy, set the Type as File Extension and the Regex / Extension parameter to the extension you want.
- To create a file name policy, set the Type as Regular Expression and the Regex / Extension parameter to the PCRE regex matching the desidered file name.
Note: remember to click the Apply Settings button from the table toolbar in order to make any changes effective.
File Type Rules
From this section you can configure desidered action (Allow or Deny) to perform when an attachment file type matches. In this table are displayed all the active rules. You can filter out the displayed rules by performing a Search and Export the results in common formats such as PDF and CSV. Some file types are not allowed by default in ESG. You can learn more from the Not allowed attachments knowledge base.
To add a new rule, you can click the New button. In the dialog that appears you can configure the File Type the rule is about and the Sender/Recipient pair the rule will be applied to. You can use the default keyword in order to apply this policy for every sender or recipient respectively.
Note: remember to click the Apply Settings button from the table toolbar in order to make any changes effective.
Archive Scan Rules
From this section you can create archives attachments rules. All archives formats are supported by LibraCyber Email Security. As you can see there are two sections in this tab, as the encrypted archives are differently managed since ESG can't analyze their content.
Scan Archives
From the first section you can create rules applied on unencrypted archives.
In the table are displayed all the existent rules, you can filter out the displayed rules by performing a Search and Export the results in common formats such as PDF and CSV.
To create a rule you have to click on the New button. First of all you have to enter the Sender Address and the Recipient Address. You can use the default keyword in order to apply this policy for every sender or recipient respectively. For each sender/recipient pair you have to set the Action to perform. You can perform the Scan or Skip the analysis process.
Note: remember to click the Apply Settings button from the table toolbar in order to make any changes effective.
Password Protected Archives
From the second section you can create rules applied on encrypted archives.
In the table are displayed all the existent rules, you can filter out the displayed rules by performing a Search and Export the results in common formats such as PDF and CSV.
To create a rule you have to click on the New button. First of all you have to enter the Sender Address and the Recipient Address. You can use the default keyword in order to apply this policy for every sender or recipient respectively. For each sender/recipient pair you have to set the Action to perform. You can set Allow to accept this kind of archives or Deny to block them.
Encrypted archives are managed by all the rules defined, not only by the first matching one in the table.
- the archive is allowed only if all policies agreed to allow the archive
- if the only matching policy is the default one, this is applied
We suggest to deny by default all password protected archives and allow them only for trusted domain/recipient denying a subset of them if needed.
Note: remember to click the Apply Settings button from the table toolbar in order to make any changes effective.
Dangerous Attachment Rules
From this tab you can set ESG to block (or don't) outgoing and incoming messages with not allowed attachments. When you edit one of these settings, please click on the Save & Apply button.