[Dshield] RE: Swen Vs. ISA, Outlook & Norton
GuyBarnum at Armscole.com
Wed Sep 24 16:51:05 GMT 2003
I just tested a win 98 system and a win XP Pro system after installing the latest office service pack and security updates.
The win98 system would still trigger the swen .exe attachment and doesn't filter any dangerous file extension attachments.
Installing the same service packs and security patches on the xp pro machine, running the same version of office, fixed the problem. The default dangerous file extension attachments are stripped out of the email.
On the win98 system I had to go in to the registry and add the Level1Add string value (along with a few preceding registry keys) and manually add all of the recommended extensions to be filtered. This looks like it took care of the problem as I've sent myself a few .exe and .com files that have been stripped out.
See article: http://support.microsoft.com/default.aspx?scid=kb;EN-US;312834
To see the recommended list of file extensions to block if you also need to add these by hand see article: http://support.microsoft.com/?kbid=290497
and scroll down to "Attachment Behavior".
I'll see what happens when I receive the next swen carrying email.
gbarnum at armscole.com
From: Bob Fronk [mailto:bfronk at davishelliot.com]
Sent: Wednesday, September 24, 2003 10:36 AM
To: General DShield Discussion List
Subject: RE: [Dshield] RE: Swen Vs. ISA, Outlook & Norton
Make sure you have the latest OUTLOOK service packs and security
bfronk at davishelliot.com
More information about the list