This article applies to:
- Trustwave MailMarshal (SEG)
- Trustwave ECM/MailMarshal Exchange
Symptoms:
- Email with Microsoft Word attachments is blocked.
- A rule to 'Block Unknown Attachments' is enabled.
Causes:
MailMarshal unpacks Microsoft Word documents to attempt to identify embedded items such as pictures. It is possible for the embedded binary data to get corrupted and thus become classified by MailMarshal as binary unknown.Reply:
Ensure you are using the latest version of MailMarshal SMTP with up to date Automatic Updates. Current versions have improved detection in Microsoft Word documents.
The 'Block Unknown Attachments' rule in all current versions of MailMarshal and ECM excludes files unpacked from Word documents and several other parent document types.
For installations upgraded from a much older originally installed version, these exclusions may not be present.
The rule should include a clayse as follows - you can add this exception if it is not present.
And where attachment parent is not of type: 'DOC' or 'Word2' or 'DOC6' or 'DOCIRM' or 'DOCX' or 'MCW' or 'DOCcrypt' or 'XLS' or 'XLSX' or 'XLSB' or 'PPT' or 'PPS' or 'PPTX' or 'PPSX' or 'PDF'
- This article was previously published as:
- NETIQKB29662
- Marshal KB365
