Configuring Attachment Filtering settings

To configure Attachment Filtering settings:

1. Open the Kaspersky Security for Microsoft Office 365 Management Console.
2. In the left part of the page, select the Protection section.
3. In the upper part of the page, select the Anti-Virus tab.
4. In the Attachment Filtering section, select the check boxes next to the filtering rules that you want to apply. The following options are available:
   • Detect files with the following formats

     Select this check box to configure filtering of attached files based on their format. The application recognizes the format of a file by its structure, that is, by the way it is stored or displayed on the screen. This allows you to filter attachments even if the extension of an attached file does not match the actual type of the file (for example, if the extension has been changed intentionally).

     The section contains a list of available file formats that are grouped according to the file types.

     Select the check boxes next to the file formats that you want to filter.

   • Detect files matching the following masks

     Select this check box to configure filtering of attached files based on their names and/or masks.

     To specify a file name or a file mask, enter it in the Specify a file mask entry field and click the button.

     To remove an entry from the list, click the button next to this entry.

     Examples of permitted file name masks:

     • *.txt – all files with the *.txt extension, for example, readme.txt or notes.txt
     • readme.??? – all files named readme with an extension of three characters, for example, readme.txt or readme.doc
     • test – all files named test without an extension
   • Detect Microsoft Office files containing macros

     Select this check box to enable filtering of attached Microsoft Office files that contain macros. The application determines whether a file contains a macro based on the file structure. This allows you to filter Microsoft Office files containing macros even if the extension of an attached file does not match the actual type of the file (for example, if the extension has been changed intentionally).

5. For each configured option, choose one of the actions that the application will perform on messages with filtered attachments:
   • Delete. The message is deleted from the user mailbox and moved to Backup.
   • Allow through. The message is delivered to recipients unchanged. If this action is selected, you can also mark messages containing filtered attachments by adding special tags to the message subject.
6. If you want to tag the subject of the message with filtered attachments, select the Tag the subject check box.

   This option is available for the Allow through action only.

7. If necessary, change the tag in the entry field under the Tag the subject check box.
8. Click Save.

If the same message matches two or more filtering criteria with different actions to be applied, the application will select the Delete action due its higher severity level.

Page top