32Guards DeepFile Analyzer

The 32Guards DeepFile Analyzer enhances NoSpamProxy with an in-depth, cloud-based analysis of file attachments. This feature is part of NoSpamProxy Protection ATP and helps to detect potentially harmful files. You enable the 32Guards DeepFile Analyzer in content filter actions. The 32Guards DeepFile Analyzer analyses email attachments and returns an analysis result which NoSpamProxy takes into account when processing the message. See Configuring the 32Guards DeepFile Analyzer.

Analysis procedure

When processing a message, NoSpamProxy checks the attachments it contains. The following rules apply to the analysis:

• Only supported file types are analysed.

• Unsupported file types will not be uploaded to the service. This can be seen in Message Tracking.

• Files exceeding the supported size limit will not be analysed.

• The result of the analysis is used for further processing of the message.

Supported file types

The list of supported file types is provided by 32Guards and regularly updated by NoSpamProxy.

Interaction with the sandbox

The 32Guards DeepFile Analyzer can be used alongside the sandbox. If both functions are enabled,

• both analyses are carried out in parallel and

• the more critical of the two results is used for further processing.

Requirements

The following requirements must be met in order to use the 32Guard DeepFile Analyzer:

• A valid licence for NoSpamProxy Protection ATP.

• Internet access from the NoSpamProxy system to the 32Guards services.

• A content filter action in which the 32Guards DeepFile Analyzer is enabled.