Checking which file types are filtered in Forefront

Hi

We are running Forefront 10.1.0746 SP1 on our Exchange 2007 SP1 servers.

Recently, some users are saying that when they are sending certain attachments to other sites, some of the content is being stripped. For instance, if the Excel document contained VB, then the VB would be removed from the Excel file, although the actual Excel file would be allowed through (minus the VB).

We want to check whether the cause is on our side or the recipients. We are using Forefront, they use another product.

Our servers the mail would have taken on the way out is MailboxA > Hub TransportA > Internet

However when I go to Forefront Security Administrator on either MailboxA or Hub Transport A > Filtering > File > Transport Scan Job (in case of HT Server) or Realtime Scan Job (in case of Mailbox server)

Then under 'File Types', everything is greyed out and I cannot seem to scroll down to view all the file types to see which ones are set for filteting. I am a local admin both machines, so don't understand how this could be?

Secondly, does Forefront work such that if an attachment contains a file type that is blocked, Forefront will remove the offending part?

Thirdly, is any sort of action that Forefront takes logged anywhere? If so, where?

Many thanks in advance.
LVL 2
bruce_77Asked:
Who is Participating?
 
Justin OwensConnect With a Mentor ITIL Problem ManagerCommented:
Forefront can do diagnostic logging:

http://blogs.technet.com/fssnerds/archive/2008/10/08/how-to-use-the-forefront-server-security-management-console-diagnostic-tool.aspx

Easy test for if you or them is to send to an account you know won't partially strip, like Yahoo! or Gmail.

Justin
0
 
bruce_77Author Commented:
Thanks Justin.

Any idea why the ability to change the file types that are blocked (or even scroll down) is greyed out when I open the Forefront Console?
0
 
Justin OwensConnect With a Mentor ITIL Problem ManagerCommented:
I would only be able to hazard a guess, as I am not a Forefront expert.  There is probably some policy set up somewhere (though I wouldn't know where) preventing changes.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.