Web Based Email and EXE's

[ozydave]

Correct Forum?

Our school has web based email system which is run by our local authority (they setup, host all the email accounts)

All staff can access their email either through a web interface (home / school) or use POP/IMAP. Students can only use the web interface (school or Home).

I have just found out that the local authority does not filter out EXE files. So a student can send him/her self an EXE file from home and then login into their email at school and run them.

We have a software restriction policy set up (and it works) for stopping the students from running EXE’s from USB drives or on the network. We have SOPHOS on the network which is how I track it down

I must be missing something, how can I stop them from running exe’s from email attachments

Hope this makes sence

Any help would be great

Dave

[Geoff]

On your web filter, block the file extension and mime types.

[ozydave]

Our Web filter is supplied by the local authority and the only access I can get to it is to block a URL. There is a possibility to get more functions form it such as filtering but they will not give access until I go on a web filtering

Great but there are no courses planned in the near future

[Geoff]

Why don't you implement your own filter internally? A lot of us do this when the LEA/RBC provided filter is inadequate.