Hmm, It looks like hitting the DELIVER button did send something to me, but it did not include the attachment with either of these options selected.
"Skip: Detect only" or "Delete: remove contents"... The file attachment from the message "Delete: Remove Contents", originally sent to you by joh...@user.com<mailto:joh...@user.com> has been forwarded to you from the Microsoft Forefront Server Security Quarantine area. This attachment may have been re-scanned by Microsoft Forefront Server Security and handled according to the appropriate scan job's settings. <<Copy of reports.mdb>> From: McCready, Rob [mailto:rob.mccrea...@dplinc.com] Sent: Tuesday, December 08, 2009 4:36 PM To: MS-Exchange Admin Issues Subject: RE: Forefront Quarantine Thanks Alex! I am getting closer. I now have Forefront setup with a File Filter to block certain attachments. The email still goes through, but the attached file is replaced with a .txt file with the following message.... FILE QUARANTINED Microsoft Forefront Security for Exchange Server removed a file since it was found to match a filter. File name: "Copy of reports.mdb" Filter name: "FILE FILTER= Custom stripped file extensions: *.mdb*" Sooo, the user is now aware a file was blocked for them. The problem is though, IF it's legitimate, I still can't release it. When I select the DELIVER button along with the Original Recipients option, nothing happens. The original email never hits my Inbox. Under Filtering, I have File Filter = Enabled Action = Delete: Remove Contents Quarantine Files is checked. Under my General Options Deliver from Quarantine Security: = Compatibility Mode I've tried changing the Action to Skip: detect only But all that does is send the original message through with no attachment and no indication a file was blocked. Hmm. From: Alex Fontana [mailto:afontana...@gmail.com] Sent: Monday, November 30, 2009 5:51 PM To: MS-Exchange Admin Issues Subject: Re: Forefront Quarantine Rob, you want to set the "Deliver from Quarantine Security" to "Compatability Mode", this is found in the General Options of the Forefront security admin console or during install. -alex On Mon, Nov 30, 2009 at 7:50 AM, McCready, Rob <rob.mccrea...@dplinc.com<mailto:rob.mccrea...@dplinc.com>> wrote: I have a File Filter setup in Forefront to block potentially harmful files (Exchange 2007). I currently have the box selected to "Quarantine Files". The problem is, when I want to release a legitimate business file that has been quarantined, and I select the DELIVER option, it just re-quarantines the file. How can I set it up so that the DELIVER option actually works without re-quarantining? Thanks. Rob
