IronPort/PostX issue

[Davetoo]

Anybody have any experience with these secure encrypted emails through Exchange 2007? Somewhere along the line the inbound email is being stripped down and the javascript it contains is not working properly. The received email is supposed to have a javascript portion that will display an "Open" icon, but it never appears. Tested the same email to a Gmail account and it worked just fine. Forwarded the email from my Exchange server to Gmail and it wouldn't work either, so I have to assume part of the email is being stripped.

I've already turned off my GFI Mail Security scanners and it didn't make any difference.

I'm Certifiable, not cert-ified.
It just means my answers are from experience, not a book.

There are no more PDC's! There are DC's with FSMO roles!

 

[Davetoo]

It might be my Watchguard...I always forget about that darn thing sitting there! There are several image reference lines in the email that are in excess of 1500 characters which are being stripped...

I'm Certifiable, not cert-ified.
It just means my answers are from experience, not a book.

There are no more PDC's! There are DC's with FSMO roles!

 

[Davetoo]

This is not a Firewall or Barracuda issue...the email is fine going through both (I can see the file size on the Barracuda and it is correct). But as soon as the email hits the Exchange server, it's being stripped of it's secure information and my user cannot access the secure email link (because it's effectively gone).

Any ideas?

I'm Certifiable, not cert-ified.
It just means my answers are from experience, not a book.

There are no more PDC's! There are DC's with FSMO roles!

 

[Davetoo]

Ok, ran a message track on this email. It arrived at SMTP size 164074 TotalBytes.DELIVER to STOREDRIV and the size is now reduced to 23586 TotalBytes, so clearly something is occuring in Exchange to strip out the content I need in this email, but I don't know where.

I'm Certifiable, not cert-ified.
It just means my answers are from experience, not a book.

There are no more PDC's! There are DC's with FSMO roles!

 

[Davetoo]

Got it...well, at least I know what it is now...and a warning...even though you may stop the GFI services, they may start back up and you won't notice.

The problem was GFI Mail Security 10 (fully patched), saw the securedoc.html attachment as an email exploit type "Document.Open method Exploits (Possible intrusion attempt)","Local file reading/execution (Suspicious)".

Now I'm off to find a way around this for these emails.

I'm Certifiable, not cert-ified.
It just means my answers are from experience, not a book.

There are no more PDC's! There are DC's with FSMO roles!