Jump to content

embc mail filtering and encrypted documents

sparkeh
 Share

Recommended Posts

sparkeh

sparkeh

Posted
Posted

Does anyone else have trouble sending encrypted documents via embc mail? For me is gets quarantined and I have to manually release it.

Surely sending sensitive data in encrypted form is the right thing to do?!

Jobos

Jobos

Posted
Posted
We had problem with Teacher 2 Parents last week and had to send them our database which was encrypted. Of course the emails got quarantined so I was releasing them at 4:30pm on a Friday afternoon :frusty:
synaesthesia

synaesthesia

Posted
Posted
Certainly an issue across the board - catch 22 as it's the best way to make sure someone receives nasties via email too. We haven't bothered looking into it due to moving away from EMBC but I would imagine they'd be happy to set up a whitelist for you
GrumbleDook

GrumbleDook

Posted
Posted

As @synaesthesia it is catch 22. To virus scan emails you need to get into zipped files. If you can't then you either have to say you completely trust the inbound source or have someone verify that the outbound source is always 100% patched and with up-to-date AV with no chance of being hit by day zero exploits. The simplest and easiest thing is to quarantine the questionable file so that someone with authority and trustworthy access at the school goes and releases it. Some LAs will authorise the setting up a rule to 'trust' emails coming from and going to the LA but from chatting with a few of our schools that has not been something that is particularly popular ... for some reason there are schools that don't trust emails from *anyone* ;) ... and it has been frustrating when our HR and Pay teams are sending out encrypted files (via AVCO) and asking for them to be emailed back ... only for them to be blocked by EMBC (and rightly so). With the move to MM though, we had a good number of false positives whilst it was being tweaked and so we did agree to that rule bing put in place to allow emails to go back and forth safely between NCC and schools ... if schools were not taking on contracts themselves in a few months time I would have removed the rule as it is not a good thing to have ... IMHO ... not when we have a fair few schools where we cannot be sure that patching is taking place on a regular basis and there is little or no audit of the update of AV.

 

Then again ... that is why schools can take control of their own rulesets to deal with this how they want.

  • 2 weeks later...
cvl4

cvl4

Posted
Posted

Sparkeh

Hope you got it sorted since contacting support?

I have used Mail Marshal to successfully create rules to get around this problem for regular senders / receivers of encrypted documents so I know it is possible.

sparkeh

sparkeh

Posted
  • Author
Posted
Sparkeh

Hope you got it sorted since contacting support?

I have used Mail Marshal to successfully create rules to get around this problem for regular senders / receivers of encrypted documents so I know it is possible.

I have the instructions to fix this, just need a spare 5 mins to actually do it :S

GrumbleDook

GrumbleDook

Posted
Posted

Without sounding like a party pooper ... Rather than emailing it around it would be a good idea to either raise a support call to get a copy (that way EMBC, LAs and Capita know what sort of info people want / need) or ... you could go grab it from the technical library?

http://www.embc.uk.com/library/default.aspx?RootFolder=%2flibrary%2fDocuments%2f5%29%20Technical%20Library&FolderCTID=0x0120002EDA9F600A61BE4692BFF81EA5AFC1C2&View=%7bAA05090E%2dA801%2d4580%2d8A91%2d7C9CFAB216AF%7d

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share
Go to topic listing


×
×
  • Create New...