I currently run exchange 2003 with Symantec SMSE 4.6.
I have always used the default basic rule to "Repair attachment/message body".
In the past, it was possible to get real email with a bad attachment, now it appears that the most infected emails are garbage anyway
.
What I would really like to do is quarantine the message and never have the user receive it at all. The quarantine, would at least give me a chance to review and monitor activity.
I prefer that my users not see the volume of incoming garbage/viruses, however, I worry about losing something legitimate. How do other organizations handle this dilemma? thank you
I have always used the default basic rule to "Repair attachment/message body".
In the past, it was possible to get real email with a bad attachment, now it appears that the most infected emails are garbage anyway
.
What I would really like to do is quarantine the message and never have the user receive it at all. The quarantine, would at least give me a chance to review and monitor activity.
I prefer that my users not see the volume of incoming garbage/viruses, however, I worry about losing something legitimate. How do other organizations handle this dilemma? thank you