I'm just learning Forefront, but with Antigen you could set the filter to skip or identify and the message would go through. Clicking the quarantine files box would put a copy of the email in the quarantine, even if you've chosen to deilver the message.
Sizes can be entered as file filters as *.*>40MB or whatever size you're looking for. That gives you the first part, but none of the logging or tracking. ________________________________ From: Michael Tellson [mailto:[EMAIL PROTECTED] Sent: Thursday, January 31, 2008 10:27 AM To: MS-Exchange Admin Issues Subject: Anyone using Forefront (Antigen) - Can this be done? I am trying to find a solution where internal mail can be scanned for a certain type of attachment over a given size, then if found, the attachment can be copied to a network folder (quarantine location) and have the original message delivered in tact (without removing the attachment or message). I also want the ability to track back from the attachment that is quarantined to the original message, either through some kind of log, or changing the name of the file, or metadata, etc. >From the documentation I have read on Forefront, it looks like this can be >done if the attachment is removed or if the entire message is quarantined, but >it is unclear if this is possible if the message is left as is. If Forefront won't do this are there any suggestions as to any other product that might? Michael Tellson Network Engineer, Colonial Savings, F.A. [EMAIL PROTECTED]<mailto:[EMAIL PROTECTED]> ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja ~
