Antivirus and signatures
Enabled antivirus inspects supported message content for malware. Global scanner availability and policies govern the result; this page does not change those settings.
EMAIL SECURITY · PACKAGE 2
Email attachment protection for ZIP and Office files
A familiar filename does not establish that an attachment is safe. SecuraWall combines separate malware, filename and supported content checks so IT can review the recorded evidence and policy decision.
An everyday example
An invoice arrives in a ZIP archive. The attachment scanner can inspect supported members in memory and flag configured static script patterns. If content is encrypted, corrupt or exceeds limits, the incomplete-analysis policy determines the next step.
Illustrative scenario; this is not a live message or a detection-rate claim.
How it works
- Inspect supported contentEnabled antivirus and attachment checks evaluate supported decoded bytes and archive members within their own resource limits.
- Apply distinct rulesFilename extensions, static attachment signals and Office VBA findings have separate controls. A macro-capable extension does not prove that VBA is present.
- Review the outcomeConfigured rules may accept, quarantine or reject. Recorded scan decisions and later SMTP delivery outcomes are shown separately.
What your IT team can control
ZIP member inspection
The starter attachment pack checks three static script heuristics. Supported ZIP traversal is bounded to two levels, 32 entries, 16 MiB total expansion and a 100:1 declared expansion ratio.
Office and file types
Supported Office containers are inspected for actual VBA and suspicious static indicators. The file-type list also supports selected and custom filename extensions; matching actions apply to the whole message.
Coverage and responsibilities
- Unsupported, encrypted, corrupt or over-limit content may remain partially inspected. Raw byte inspection is not a malware-free verdict.
- Static rules do not execute files. Heuristics can match legitimate content, and changing a filename can change its extension match.
- Accept on an attachment category never overrides a rejection or quarantine decision selected by another check.
Choose the incoming security gateway
Email Security requires SecuraWall as the only published MX and a separate real receiving destination. Your mailboxes remain with your provider. Backup MX does not include these inspection or personal quarantine controls; the SMTP Relay add-on does not enable incoming protection.
Explore Email Security Compare pricing