Logging a hash value for attached files


This article applies to:

  • Trustwave SEG 8.X and above

Question:

  • How can I generate and log a hash value for attached files?

Procedure:

In SEG 8.0 and above you can enable MD5 hashing of attached files. The hash values are recorded in the Engine log.

  1. On the Array Manager, edit the Registry (10.X: use Advanced Settings in the Management Console)
  2. Navigate to the SEG Engine key:
    • In version 8.X: HKEY_LOCAL_MACHINE\SOFTWARE\Trustwave\Secure Email Gateway\Default\Engine
    • 10.X: value names have the prefix Engine. (Engine dot).
    • For full details of the location for each product version, see article Q10832.
  3. Add a value as follows:
    • Data Type: DWORD (Integer)
    • Value Name: HashUnpackAttachments
    • Value Data: 1 
  4. Commit configuration.
  • To disable hashing, set the value to 0 or delete the value.
  • For full details of the Registry location, see article Q10832.

Notes:

Calculation of the hash is processing intensive. Ensure adequate system resource.


Last Modified 4/1/2020.
https://support.trustwave.com/kb/KnowledgebaseArticle21081.aspx