Ensure Zero-day protection is enabled for Email Protection and set to MTA mode

Kako se proverava

Metod provere: Ručni pregled

Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.

This configuration option is only applicable when the device is configured with 'MTA mode' and set 'Sophos' as primary malware scanning engine. Navigate to 'Protect > Email'. Verify the existing SMTP policy 'Malware protection > Scanning > Single anti-virus (this set the scan engine to Sophos ) is set and Selected antivirus action' to 'Drop'. Email attachment successfully verified by antivirus engine as malicious should be set to 'Drop'. (Full steps: CIS 4.3.)

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

This configuration option is only applicable when the device is configured with 'MTA mode' and set 'Sophos' as primary malware scanning engine. Navigate to 'Protect > Email'. Verify the existing SMTP policy and set 'Malware protection > Scanning > Single anti-virus( this set the scan engine to Sophos) is set and Selected antivirus action' to 'Drop'. Email attachment successfully verified by antivirus engine as malicious should be set to 'Drop'. 'Quarantine unscannable content' is checked to prevent files with multiple layers of compression and password protected archives files that cannot be scanned by antivirus engine should be 'quarantined'. Set 'Use zero-day protection' is checked