Some PPSx and PPTx files are being detected as multimedia, but not all of them, why?
Symptoms Whenever you send a PPTx or PPSx file with embedded movies or sound files, the file is quarantined as violating the Multimedia file rule.
The multimedia file rule scans within containers, not just the top level file. In addition, it does not detect based on file extension, it's detections are based on true file typing. In other words, if you attempt to send an MP3 file by renaming the file to
.txt the file will still be detected as a multimedia file.
Disable the multimedia file rule and use the "Quarantine Triggered Attachment Names" content filtering rule with the "Sample Multimedia File Names" match list OR Edit the powerpoint file to no longer contain Multimedia content as defined in the references section of this document.
To multimedia file rule and enable a content filtering rule to replace it
In the Symantec Mail Security for Microsoft Exchange (SMSMSE) console, select Policies -> File Filtering Rules.
Select Multimedia File rule, click the status column, and change the dropdown to Disabled.
Navigate to Policies -> Content Filtering Rules.
Right click the Quarantine Triggered Attachment Names rule and select Edit.
In the "Content" field, remove the "Outbreak Triggered Attachment Names" match list from the rule.
Click the Add match list... button.
Select the Sample Multimedia File Names match list, and click Select.
Verify that the rule is applying at the level you would like (inbound, outbound, or internal messages) in the upper right hand corner of the rule, make changes as necessary and then click OK.
In the Content Filtering Rules menu, Select the Quarantine Triggered Attachment Names rule, click the status column, and change the dropdown to Enabled.
Click Deploy Changes.
SMSMSE will now detect Multimedia files only at the top file level, and only based upon file name, not true file typing. PPT files will not trigger against this rule regardless of their content.
References File types detected by the Multimedia file rule:
Amiga MED/OctaMED Tracker Module Sound File
AU Audio File, Audacity Audio Block
Audio Interchange File
*.AIFF, *.AIFC, *.AIF
Audio Video Interleave File
Impulse Tracker Music Module
MPEG AlbumWrap Wrapped Music File Archive
MPEG Movie Clip, MPEG-4 Audio Layer File
MultiTracker Music Module
Musical Instrument Digital Interface
QuickTime Video Clip
OGG Vorbis Codec Compressed WAV File
Scream Tracker Music Interface Kit Song/Module
ScreamTracker v3 Sound File
Shorten Audio Compression File
Windows Media File
Imported Document ID: TECH97196
Subscribing will provide email updates when this Article is updated. Login is required.