Quarantine emails with password protected attachments in Gmail

I'm not sure if this feature is not available or if I just missed a setting somewhere.  We've noticed an increasing trend of phishing / malware coming in as password protected attachments with the password in the body.  Like "oh here's the latest update report, I password protected it - the password is 0246" and it's an ecrypted zip holding a DOC file with malware in it.  Since it's password protected, the virus scanners can't look into it and Gmail just passes it along to the inbox.  We've trained our users to be suspicious of emails like that but that's certainly not 100% foolproof.

Is there a way to push emails with password protected attachments into an admin quarantine so we can review them and manually check for malware before passing or rejecting them?

Solved Solved
0 5 3,065
1 ACCEPTED SOLUTION

Hello!

Just set a attachment compliance rule on admin console:

Admin Console > Apps > Gmail > Compliance > Attachment compliance 

Here's the documentation: https://support.google.com/a/answer/2364580?hl=en

Just set like this :

Screenshot_119.png

 

Click in the step 2, you have to set the type of attachment.

Screenshot_120.png

After configure all that, just save it.

I tried to send a external e-mail with an rar file protect with password and got quarentined, as you can see:

Screenshot_121.png

Hope this helps you out!

View solution in original post

5 REPLIES 5
Top Labels in this Space
Top Solution Authors