Web Based Email and EXE's
Our school has web based email system which is run by our local authority (they setup, host all the email accounts)
All staff can access their email either through a web interface (home / school) or use POP/IMAP. Students can only use the web interface (school or Home).
I have just found out that the local authority does not filter out EXE files. So a student can send him/her self an EXE file from home and then login into their email at school and run them.
We have a software restriction policy set up (and it works) for stopping the students from running EXE’s from USB drives or on the network. We have SOPHOS on the network which is how I track it down
I must be missing something, how can I stop them from running exe’s from email attachments
Hope this makes sence
Any help would be great