Logging a hash value for attached files


This article applies to:

  • Trustwave SEG 8.X and above

Question:

  • How can I generate and log a hash value for attached files?

Procedure:

In SEG 8.0 and above you can enable MD5 hashing of attached files. The hash values are recorded in the Engine log.

  1. On the Array Manager, edit the Registry (10.0 and above: use Advanced Settings in the Management Console)
  2. Navigate to the SEG Engine key:
    • In version 8.X: HKEY_LOCAL_MACHINE\SOFTWARE\Trustwave\Secure Email Gateway\Default\Engine
    • 10.0 and above: value names have the prefix Engine. (Engine dot).
    • For full details of the location for each product version, see article Q10832.
  3. Add a value as follows:
    • Data Type: DWORD (Integer)
    • Value Name: HashUnpackAttachments
    • Value Data: 1 
  4. Commit configuration.
  • To disable hashing, set the value to 0 or delete the value.
  • For full details of the Registry location, see article Q10832.

Notes:

Calculation of the hash is processing intensive. Ensure adequate system resource.


Last Modified 4/1/2020.
https://support.trustwave.com/kb/KnowledgebaseArticle21081.aspx