2 minutes reading time (463 words)

Configure Mimecast Attachment Protection Policy

Guides

Tuesday, 17 October 2023

2942 Hits

How to create an Attachment Protection definition and policy in Mimecast. Apply the policy to a test group and monitor Attachment Protection logs

1. Create profile group for testing
2. Create Administrator group for notifications
3. Create Attachment Protection Definition
4. Create Attachment Protection Policy
5. Monitoring Attachment Protections

1. Create profile group for testing

Create a profile group for testing the Attachment Protection policy

Directories - Profile Groups

Click the + plus sign to add a sub group

Select the new group and rename it Attachment Protection Test

Add email addresses to the test group

Build - Add email addresses

Enter email addresses

Save and Exit

2. Create Administrator group for notifications

Administration - Directories - Profile Groups

Click the + plus sign to add a sub group

Select the new group and rename it Administrator Notifications

Add email addresses to the group

Build - Add email addresses

Enter email addresses

Save and Exit

3. Create Attachment Protection Definition

Gateway - Policies

Attachment Protection - Definitions

New Definition

Definition Narrative: Pre-emptive Sandbox

Tick Enable Inbound Check
Attachment Protection Delivery Options: Pre-emptive Sandbox
Sandbox Fallback Action: Hold for Administrator Review
Tick Release Forwarded Internal Attachment

Tick Enable Notifications
Administrator Group - select Administrator Notifications profile group
Internal Sender

Internal Recipient

Pre-Emptive Sandbox:
Analyse all vulnerable file types in the Pre-Emptive Sandbox, before delivering the mail and attachments to the user.

4. Create Attachment Protection Policy

Gateway - Polices - Attachment Protection

New Policy

Policy Narrative: Attachment Protection Pre-emptive Sandbox
Select Option: Select the Attachment Protection Definition

Applies from Everyone
Specifically: Applies to all Senders

Applies To: Address groups
Profile Group: Select the Attachment Protection test group

Enable the policy

5. Monitoring Attachment Protection

Attachment Protection service

Services - Attachment Protection

Check the number of Sandboxed attachments and file types

Attachment Protection logs

Monitoring - Attachment Protection

View By Scan Result

Check the definition being used and the scan result

References:

Email Security Cloud Gateway - TTP Attachment Protect - How It Works
https://community.mimecast.com/s/article/email-security-cloud-gateway-ttp-attachment-protect-how-it-works

Email Security Cloud Gateway - TTP Attachment Protect - Configuration
https://community.mimecast.com/s/article/email-security-cloud-gateway-ttp-attachment-protect-configuration

Email Security Cloud Gateway - TTP Attachment Protect - Your First Policy
https://community.mimecast.com/s/article/email-security-cloud-gateway-ttp-attachment-protect-your-first-policy

by Author