1. Block Executables: https://support.office.com/en-us/article/Blocked-attachments-in-Outlook-434752e1-02d3-4e90-9124-8b81e49a8519?CorrelationId=66e06c24-0d68-47c1-a503-5b4e30bc1c8a&ui=en-US&rs=en-US&ad=US&ocmsassetID=HA102749484#_Attachment_file_types
  2. Reject large files: 
    • Sender is located Outside the organization
    • The message size is greater than or equal to 40 MB
    • Reject the message with the explanation “A message you sent has been blocked due to its size being larger than 40MB. Please retry with a smaller file”
  3. Anti-spoof VIPs
    • Anti-spoof – VIPs
      If the message…
      ‘From’ header contains “‘Kim Connect’ or ‘Ya Mama'”
      and Is received from ‘Outside the organization’
      Do the following…
      Deliver the message to the hosted quarantine.
      and Stop processing more rules
      and Send the incident report to [email protected], include these message properties in the report: sender, recipients, subject, cc’d recipients, bcc’d recipients, severity, sender override information, matching rules, false positive reports, detected data classifications, matching content
      Except if…
      ‘From’ header contains ”[email protected]”
      or ‘Resent-From’ header matches the following patterns: ‘@dragoncoin.com’
      Rule comments
      Detect spoofing emails and add “SPAM” tag to them
  4. Outbound disclaimer
    • If the message…
      Is sent to ‘Outside the organization’
      and sender’s address domain portion belongs to any of these domains: ‘kimconnect.com’
      Do the following…
      Append the message with the disclaimer ‘<p>Providing the <b>BEST</b> in IT Consulting <b>QUALITY</b> since 2002 | www.KimConnect.com </p>’. If the disclaimer can’t be applied, attach the message to a new disclaimer message.
      Rule comments
      Appends an e-mail disclaimer to outbound messages that were configured in FOPE with an outbound email footer (FOPEPolicyMigration)
Categories: