?
Solved

Checking which file types are filtered in Forefront

Posted on 2010-01-05
3
Medium Priority
?
237 Views
Last Modified: 2012-06-27
Hi

We are running Forefront 10.1.0746 SP1 on our Exchange 2007 SP1 servers.

Recently, some users are saying that when they are sending certain attachments to other sites, some of the content is being stripped. For instance, if the Excel document contained VB, then the VB would be removed from the Excel file, although the actual Excel file would be allowed through (minus the VB).

We want to check whether the cause is on our side or the recipients. We are using Forefront, they use another product.

Our servers the mail would have taken on the way out is MailboxA > Hub TransportA > Internet

However when I go to Forefront Security Administrator on either MailboxA or Hub Transport A > Filtering > File > Transport Scan Job (in case of HT Server) or Realtime Scan Job (in case of Mailbox server)

Then under 'File Types', everything is greyed out and I cannot seem to scroll down to view all the file types to see which ones are set for filteting. I am a local admin both machines, so don't understand how this could be?

Secondly, does Forefront work such that if an attachment contains a file type that is blocked, Forefront will remove the offending part?

Thirdly, is any sort of action that Forefront takes logged anywhere? If so, where?

Many thanks in advance.
0
Comment
Question by:bruce_77
  • 2
3 Comments
 
LVL 31

Accepted Solution

by:
Justin Owens earned 2000 total points
ID: 26192585
Forefront can do diagnostic logging:

http://blogs.technet.com/fssnerds/archive/2008/10/08/how-to-use-the-forefront-server-security-management-console-diagnostic-tool.aspx

Easy test for if you or them is to send to an account you know won't partially strip, like Yahoo! or Gmail.

Justin
0
 
LVL 2

Author Comment

by:bruce_77
ID: 26274951
Thanks Justin.

Any idea why the ability to change the file types that are blocked (or even scroll down) is greyed out when I open the Forefront Console?
0
 
LVL 31

Assisted Solution

by:Justin Owens
Justin Owens earned 2000 total points
ID: 26284312
I would only be able to hazard a guess, as I am not a Forefront expert.  There is probably some policy set up somewhere (though I wouldn't know where) preventing changes.
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Eseutil Hard Recovery is part of exchange tool and ensures Exchange mailbox data recovery when mailbox gets corrupt due to some problem on Exchange server.
Mailbox Corruption is a nightmare every Exchange DBA wishes he never has. Recovering from it can be super-hectic if not entirely futile. And though techniques like the New-MailboxRepairRequest cmdlet have been designed to help with fixing minor corr…
In this video we show how to create a mailbox database in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Servers >> Data…
To show how to generate a certificate request in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Servers >> Certificates…
Suggested Courses
Course of the Month14 days, 13 hours left to enroll

839 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question