Common

Document Mail Filter

The Document Mail Filter section looks like this:

Using this section, you can configure actions for office documents that are attached to e-mails, e. g. a .pdf format document.

The document formats that can be filtered include Microsoft Word 97-2003, Mi- crosoft Excel 95-2003, Microsoft PowerPoint 95-2003 and all known versions of Adobe Portable Document Format (PDF).

Furthermore, they include the following open document formats: Generic XML, Microsoft OpenXML, Oasis Open Document Format, and the Simple Object Access Protocol (SOAP), which is an XML-based communications protocol for applications.

These documents may contain “active” content. Word, Excel, PowerPoint and Microsoft Open XML support ActiveX controls and macros, while PDF and the Oasis Open Document Format support embedded JavaScript.

This active content may be hostile rather than friendly, so for full protection against files that are embedded in Microsoft Office, PDF or open format docu- ments, you should use the filter provided by the Document Inspector to inspect these documents and block malicious content from entering your corporate net- work.

If you want to use this filter, make sure the checkbox next to the section heading is marked. The checkbox is marked by default.

After specifying the appropriate settings, click on Apply Changes to make them effective.

Use the following items to configure actions for office documents:

•Encrypted document found

From the drop-down list provided here, select an action, e. g. Drop, Drop and Quarantine or Allow.

This action will be taken if the filter detects an office document attached to an e-mail that is potentially malicious.

3–23