Quarantine emails with password protected attachments in Gmail

[MLWeiner]

I'm not sure if this feature is not available or if I just missed a setting somewhere.  We've noticed an increasing trend of phishing / malware coming in as password protected attachments with the password in the body.  Like "oh here's the latest update report, I password protected it - the password is 0246" and it's an ecrypted zip holding a DOC file with malware in it.  Since it's password protected, the virus scanners can't look into it and Gmail just passes it along to the inbox.  We've trained our users to be suspicious of emails like that but that's certainly not 100% foolproof.

Is there a way to push emails with password protected attachments into an admin quarantine so we can review them and manually check for malware before passing or rejecting them?

[icrew]

I'm not an expert on this, but:

https://support.google.com/a/answer/6104172 led me to https://support.google.com/a/answer/2364580, which in turn led me to https://support.google.com/mail/answer/6590. On that last page, it says "To protect you against potential viruses and harmful software, Gmail doesn't allow you to attach certain types of files, including: [...] Password protected archives whose content is an archive"

It sounds like that's not actually happening, though? If so, maybe it'd be something to talk to support about?

Or, if you feel like this is a new feature you're asking for, you might want to post it to the Feature Ideas section here (https://www.googlecloudcommunity.com/gc/Feature-Ideas/gh-p/workspace-ideas-group) so that it can be upvoted by others and possibly considered as a future feature enhancement.

If you are submitting a feature idea, be sure to explain the problem that you're trying to solve with the feature idea, not just the idea itself. For example, saying "when my users are trying to do 'A', they often get confused by the fact that the buttons to do 'X' and to do 'Y' look quite similar to each other, which leads to this unintended consequence" is far more likely to get fixed than a feature idea that just says "change the color of the button 'Y'".

Cheers,

Ian

[Jan-Carlos · Accepted solution]

Hello!

Just set a attachment compliance rule on admin console:

Admin Console > Apps > Gmail > Compliance > Attachment compliance 

Here's the documentation: https://support.google.com/a/answer/2364580?hl=en

Just set like this :

Click in the step 2, you have to set the type of attachment.

After configure all that, just save it.

I tried to send a external e-mail with an rar file protect with password and got quarentined, as you can see:

Hope this helps you out!

[sbirley]

I am searching for a solution on how does one allow for a user account to send password protected emails? The issue I am running into is a client is sending out password protected ZIP files to their clients and the email is getting blocked before it is sent.

[StephenHind]

@sbirley Gmail offers Confidential Mode for this.

[sbirley]

That would solve the problem if the message being sent was being done by a human being.

In the situation I have encountered, the client is using an ERP to send email notifications via a specific account (using an auth-password for authentication). The ERP sends an email notifying the client's employee that they have been paid. It attaches a summary (a Word/Excel document) that has been compressed and the document is password protected.