I'm not sure if this feature is not available or if I just missed a setting somewhere. We've noticed an increasing trend of phishing / malware coming in as password protected attachments with the password in the body. Like "oh here's the latest update report, I password protected it - the password is 0246" and it's an ecrypted zip holding a DOC file with malware in it. Since it's password protected, the virus scanners can't look into it and Gmail just passes it along to the inbox. We've trained our users to be suspicious of emails like that but that's certainly not 100% foolproof.
Is there a way to push emails with password protected attachments into an admin quarantine so we can review them and manually check for malware before passing or rejecting them?
Solved! Go to Solution.
Hello!
Just set a attachment compliance rule on admin console:
Admin Console > Apps > Gmail > Compliance > Attachment compliance
Here's the documentation: https://support.google.com/a/answer/2364580?hl=en
Just set like this :
Click in the step 2, you have to set the type of attachment.
After configure all that, just save it.
I tried to send a external e-mail with an rar file protect with password and got quarentined, as you can see:
Hope this helps you out!