How to block emails containing virus attachments inside a zip file using policy

Sometimes users get emails containing virus attachments inside a zip file. There might be two reasons behind this problem-
First, you might have received these emails before the signature was created on our back-end server. Second, your device might be having some connectivity problems to our data center due to a firewall policy or some other network-related problems.

Steps to block emails containing Virus attachments inside a Zip file

NOTE: Below mentioned options will only be available if you have a valid Compliance Module license on SonicWall Email Security.

Step 1: Make sure that you have a valid Email DLP and Compliance Module License under Manage | License Management page. If you have Email DLP and Compliance module license then follow next step.

Step 2: Go to Manage | Policy & Compliance | Filters, inbound tab. Click on Add new filter as mentioned in below screenshot.

Step 3: Make sure to check "Enable this filter". Select "Attachment contents" with Matching "contains executables". Choose action "Strip all Attachments". Name the filter and save the changes.

Once you enable this filter it should be able to strip those virus attachments.

NOTE: If the navigation or the screenshot looks different from the one mentioned above, you may be in an older firmware version and would require a firmware upgrade. Please refer the link below to upgrade the firmware to latest version.

https://www.sonicwall.com/support/knowledge-base/how-do-i-upgrade-firmware-on-an-email-security-appliance/170504270079039/