You can help support this website by buying me a coffee!
2 minutes reading time
(463 words)
Configure Mimecast Attachment Protection Policy
How to create an Attachment Protection definition and policy in Mimecast. Apply the policy to a test group and monitor Attachment Protection logs
Table of Contents
1. Create profile group for testing
2. Create Administrator group for notifications
3. Create Attachment Protection Definition
4. Create Attachment Protection Policy
5. Monitoring Attachment Protections
2. Create Administrator group for notifications
3. Create Attachment Protection Definition
4. Create Attachment Protection Policy
5. Monitoring Attachment Protections
1. Create profile group for testing
Create a profile group for testing the Attachment Protection policy
Directories - Profile Groups
Click the + plus sign to add a sub group
Select the new group and rename it Attachment Protection Test
Add email addresses to the test group
Build - Add email addresses
Enter email addresses
Save and Exit
2. Create Administrator group for notifications
Administration - Directories - Profile Groups
Click the + plus sign to add a sub group
Select the new group and rename it Administrator Notifications
Add email addresses to the group
Build - Add email addresses
Enter email addresses
Save and Exit
3. Create Attachment Protection Definition
Gateway - Policies
Attachment Protection - Definitions
New Definition
Definition Narrative: Pre-emptive Sandbox
Tick Enable Inbound CheckAttachment Protection Delivery Options: Pre-emptive Sandbox
Sandbox Fallback Action: Hold for Administrator Review
Tick Release Forwarded Internal Attachment
Tick Enable Notifications
Administrator Group - select Administrator Notifications profile group
Internal Sender
Internal Recipient
Pre-Emptive Sandbox:
Analyse all vulnerable file types in the Pre-Emptive Sandbox, before delivering the mail and attachments to the user.
Analyse all vulnerable file types in the Pre-Emptive Sandbox, before delivering the mail and attachments to the user.
4. Create Attachment Protection Policy
Gateway - Polices - Attachment Protection
New Policy
Policy Narrative: Attachment Protection Pre-emptive Sandbox
Select Option: Select the Attachment Protection Definition
Applies from Everyone
Specifically: Applies to all Senders
Applies To: Address groups
Profile Group: Select the Attachment Protection test group
Enable the policy
5. Monitoring Attachment Protection
Attachment Protection service
Services - Attachment Protection
Check the number of Sandboxed attachments and file types
Attachment Protection logs
Monitoring - Attachment Protection
View By Scan Result
Check the definition being used and the scan result
References:
by Author
Email Security Cloud Gateway - TTP Attachment Protect - How It Works
https://community.mimecast.com/s/article/email-security-cloud-gateway-ttp-attachment-protect-how-it-works
Email Security Cloud Gateway - TTP Attachment Protect - Configuration
https://community.mimecast.com/s/article/email-security-cloud-gateway-ttp-attachment-protect-configuration
Email Security Cloud Gateway - TTP Attachment Protect - Your First Policy
https://community.mimecast.com/s/article/email-security-cloud-gateway-ttp-attachment-protect-your-first-policy
Comments