cancel
Showing results for 
Search instead for 
Did you mean: 
KVKL
Level 8
Report Inappropriate Content
Message 1 of 4

MSME 8.5 blocked files are missing

Hi,

first i want to say sorry for my bad english,

We are using MSME 8.5.

We are blocking several filetypes like .exe, .bat, .doc and so on.

In earlier versions we could free the blocked files easily by downloading them from the MSME console.

old view

alt.JPG

Now we find instead the filename the isolated Email.

new view

neu.JPG

How can I change that?

Thanks

3 Replies
Reliable Contributor Aidan
Reliable Contributor
Report Inappropriate Content
Message 2 of 4

Re: MSME 8.5 blocked files are missing

This has not changed.  The difference is at what point the mail was scanned.

If the mail is scanned and detected at Transport Scanning then we get the full EML file - that's what we quarantine - the eml file can still be downloaded and viewed in all outlook versions since 2010 (honestly can't remember if Otlk2007 can view emls)  

If the item was scanned at Exchange VSAPI level - then Microsofts VSAPI gives scanner the actual file itself so that how it has the separated item to quarantine.

Your examples show a Transport Scan detection and a VSAPI Scan detection.

KVKL
Level 8
Report Inappropriate Content
Message 3 of 4

Re: MSME 8.5 blocked files are missing

Thank you for your reply.

Where can I manage which scanner scanns the mails? Which policy must be edited in the epo?

KVKL
Level 8
Report Inappropriate Content
Message 4 of 4

Re: MSME 8.5 blocked files are missing

I found the policy! Thank u to show me the right way!

More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator