Guest

Preview Tool

Cisco Bug: CSCvu33435 - message filter does not identify encrypted attachemts

Last Modified

Jun 17, 2020

Products (1)

  • Cisco Email Security Appliance

Known Affected Releases

12.5.1-031 13.5.0-143

Description (partial)

Symptom:
User i trying to catch password protected and encrypted file through a message filter. But its not catching encrypted files like .PP7M and .CRY

when test message filter it just matching password protected files (LAB tested a excel password protected file) matching correctly.

Conditions:
Password_Protected: if (attachment-protected) AND (recv-listener == "Inbound") {
                        log-entry("Password_Protected_File");
                        bcc ("customer_email@cisco.com", "$Subject");
                    }
I made some changes erasing listener condition but with the same results. (discarding a condition issue)
I add and additional condition specifying attachment file name to ensure the message filter is working. (tested ok, but enforcing file name).

Customer is receiving a .pp7m and in lab tested the same file and a .CRY file extension with the same results. not matching and let it pass through the filter.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.