How to configure File Filtering to filter by file size and to filter compressed archive files (906012)

MORE INFORMATION

In Sybari Antigen for Microsoft Exchange, you can configure File Filtering to filter by file size. To do this, follow these steps:

1. Start the SybariClient (SybariClient.exe).
2. In Shuttle Navigator, click Filtering, and then click File.
3. Click the scan job that you want to configure.
4. In the File name section, click Add.
5. Type the file name extension, a comparison operator, and a size.
   
   For example, add the following filters:
   • *.bmp>=1.2MB: This filter will filter all .bmp files that are equal to or larger than 1.2 MB.
   • *.com>150KB: This filter will filter all .com files that are larger than 150 KB.
   • *.*>5MB: This filter will filter all files that are larger than 5 MB.
   Note Make sure that you do not add spaces between the file name extension and the operators or between the operators and the file size.

To filter a compressed archive file, you may have to create two filters. Consider the following scenario. You receive an e-mail message that has a .zip file attachment that is 3.7 MB. This .zip file contains a .dll file that is 1 MB and an .exe file that is 3.5 MB. You use the following filter:

Filter	Action
*.exe>3mb	Delete: remove contents

In this scenario, only the .exe file is removed.

Note Antigen examines the uncompressed file size of the .exe file.

Alternatively, you can add another filter to remove the .zip file. For example, you use the following filters:

Filter	Action
*.exe>3mb	Delete: remove contents
*.zip>3mb	Delete: remove contents

In this scenario, the .zip file is removed.

Note The .zip file is filtered even though the "*.exe>3mb" filter comes before the "*.zip>3mb" filter in the filter list. Antigen gives priority to .jar files and to .zip files.

Antigen does not use the MaxUnCompressedFileSize registry subkey or the MaxCompressedArchivedFileSize registry subkey when you configure File Filtering to filter by file size.