Suspicious files must always be handled with caution. Trend Micro recommends adding such files to
a password-protected archive file before transporting across the network.
Virtual Analyzer uses user-specified passwords to extract files from archive
files.
To use this feature, add and enable a basic file submission rule
with the following criteria:
If Virtual Analyzer is unable to extract encrypted files using any of the specified
passwords, Deep Discovery Inspector displays the
status “Unsupported file type” and removes the archive file from the queue.
|
Note
Passwords can only be used for the first encryption layer.
Decryption of SMTP attachments is not supported.
Deep Discovery Inspector stores archive file
passwords as unencrypted text.
|