Email Attachments

[msi_school]

Hi

 

We had had a number of staff send the wrong attachment with an email. I have been asked if there is any way to have a pop appear as you press send with the name of the attachment and a message such as are you sure you want to send this attachment? Yes/No

 

Does anybody know of such a package or have another method of helping to prevent staff attaching the wrong file?

 

Mike

[pantscat]

What email platform do you use?

 

Exchange and Office 365 would allow you to do this, in one way or another, with transport rules.

 

Ant

[msi_school]

We use Outlook as a client and Office 365 as the server, do you have a guide or instructions for setting this up?

 

Thanks

 

Mike

[Meldrew]

Personally I think it'll be a waste of time. People will quickly learn to just click the yes button without even looking, in the same way that they aren't checking the attachments properly before sending.

 

Meldrew.

[djm968]

Have a look at this.

 

https://docs.microsoft.com/en-gb/exchange/security-and-compliance/mail-flow-rules/inspect-message-attachments

[msi_school]

I dont think your wrong @Meldrew but I was told we have to have a look so I am having a look, we also have just published a list of Do's and don'ts Number one is do I need to send this info and number two is reread the document check the recipient and the attachment. I think this will be more useful but the boss disagrees.

 

Thanks @djm968

[msi_school]

I have been through the document @djm968 linked and it looks really helpful until you try to implement any restrictions. I can block sending but that is not really helpful, I can force encryption but it won't help if is being sent to the wrong person and I cant even trigger on non encrypted attachments.

 

Does anyone else have any ideas I am pulling my hair out.

 

Mike

[steve_forbes]

I have been through the document @djm968 linked and it looks really helpful until you try to implement any restrictions. I can block sending but that is not really helpful, I can force encryption but it won't help if is being sent to the wrong person and I cant even trigger on non encrypted attachments.

 

Does anyone else have any ideas I am pulling my hair out.

 

Mike

You could use Azure Information Protection to label documents based on their sensitivity and then use the DLP rules in Office 365 to block certain types of document from being sent externally or warn the user that they are doing something that they potentially don't want to do.

It does have a licence cost though.