You want to use Norton AntiVirus for Microsoft Exchange (NAVMSE) to block email attachments based on their file name or extension in VAPI or MAPI/VAPI combo mode.
Norton AntiVirus for Microsoft Exchange 2.0x through 2.1x, enable you to create a list of files to be handled as though they were infected. If a file name or extension matches one of the entries in the list, then it will be handled according the options set for infected files. The virus information reported for the attachment will be "UNAUTHORIZED FILE."
The following example will block three entries, files based on the extension (*.vbs), the file name (virus.txt) and the extension (*.jpg.exe).
: We strongly recommend that you back up the system registry before making any changes. Incorrect changes to the registry could result in permanent data loss or corrupted files. Modify only the keys that are specified.
Open the Registry Editor, and then navigate to the following registry key:
Specify the total number of file names and extensions to be excluded. In this example, a total of three entries, a file name and two extensions are to be blocked.
Right-click AttachmentNamesCount, and then click Modify.
Change the base to Decimal, type3in Value data window, and then click OK.
WARNING: Care should be taken here. The Registry Editor defaults to hexadecimal, but it is easy to assume decimal. A change from 9 to 10 in hexadecimal is a change from 9 to 16 in decimal. When modifying the AttachmentNamesCount value, make sure you select decimal.
Create a new String Value for each file name or extension in the list. Follow the naming convention of AttachmentNamesX, where X represents sequential integers. The following registry entries illustrate the correct sequence, AttachmentNamesX always starts with 0 and run sequentially: AttachmentNames0 AttachmentNames1 AttachmentNames2
To create a String Value for *.vbs, virus.txt and *.jpg.exe
In left pane, right-click Attachment, point to New, and then click String Value.
Type AttachmentNames0 as new String Value, and then press Enter.
Right-click AttachmentNames0, click Modify, type *.vbs as the Value data, and then click OK.
Repeat steps A through C to create a second String Value for AttachmentNames1 with a Value data of virus.txt.
Repeat steps A through C to create a third String Value for AttachmentNames2 with a Value data of .jpg.exe.
WARNING: If you remove an entry from the list, then be sure that the remaining entries are renumbered sequentially. Do not leave any gaps in the numbering.
To configure NAVMSE to search for the specified extension or file name within compressed files, set the Value data to 1. Setting the Value data to 0 will prevent NAVMSE from searching within compressed files. (Optional)
Right-click AllowsChecksWithinArchives, and then click Modify.
Type 1 in the Value data window to search for the specified compressed files.
Stop and then restart the NAV for Microsoft Exchange service, or run NaveUpdate.exe to have the new settings take effect. NaveUpdate.exe is found in the installed directory along with all the NAVMSE executables.
Note: If you test the blocked extensions by creating a file and naming it using a blocked extension, then make sure the file is not 0 KB.
The following are examples of how to setup blocked extensions including double extensions.
Note: File name comparisons are not case-sensitive.
The following registry keys and values are created after the first save of any option settings after installation:
If Norton AntiVirus for Exchange is uninstalled, and then reinstalled or updated, then the registry keys created to block files by extension will be lost. Suggest exporting the registry key prior to uninstall or reinstall. When the uninstall or reinstall is completed import the registry key back into the registry.
Imported Document Id
This is machine translated content
Login to Subscribe
Please login to set up your subscription.
Didn't find the article you were looking for? Try these resources.