How many of you block Zip file attachments via Email?

[maxrebo]

We recently setup a mail flow to block zip files coming in, cue the support calls saying external user cant email staff member due to mail flow rule,

My thinking was due to the amount of viruses in Zip file attachment it will be another security hole plugged?!.

 

I`m just wondering how many people do this and if its necessary?

 

Thanks

[Norphy]

Zip files get quarantined by our filter and when that happens, the user gets notified and asked to contact IT if they're expecting the mail. A member of IT then reviews the blocked email and releases it if they think that it's benign.

 

It's not perfect but it's the best compromise I could come up with.

[Domino]

We block encrypted ZIPs - as they're unscannable by the AV filters. We've ended up adding exceptions for expected transfers.

 

As we're sending the vast majority of our mail over TLS these days it seems unnecessary anyway