This article applies to:
- Trustwave MailMarshal (SEG)
- Trustwave ECM/MailMarshal Exchange
Symptoms:
- Email with Microsoft Word attachments is blocked.
- A rule to 'Block Unknown Attachments' is enabled.
Causes:
MailMarshal unpacks Microsoft Word documents to attempt to identify embedded items such as pictures. It is possible for the embedded binary data to get corrupted and thus become classified by MailMarshal as binary unknown.
Reply:
Ensure you are using the latest version of MailMarshal SMTP with up to date Automatic Updates. Current versions have improved detection in Microsoft Word documents.
You can also update rules to not block binary unknown files, when the parent file is a Microsoft Word document. However this change should be made with caution due to the possibility of malicious files being embedded.
- This article was previously published as:
- NETIQKB29662
- Marshal KB365