Quantcast
Channel: Symantec Connect - Security
Viewing all articles
Browse latest Browse all 5755

Email Incident in DLP shows an extra html attachment

$
0
0
I need a solution

Hi,

We have observed that Email incidents created by Network Monitor server shows attachment as attached-email-body.html however there is no such attachment in the email. When open this attachment, it's nothing but the entire email itself appears in html format. I have open a case with Support and they cameup with below explanation:

This is because the message is multipart/related, and while parsing, it is difficult to distinguish between a part that is an attachment and a part that represents the email body.  As a simplification, the email body is represented in the same way as we do with attachments.

When same email is being forwarded or replied and go throw Email Prever server, html attachment doesnt appear. This happen only when this email is being processed by Network Monitor (support has also confirm this behaviour).

Below is the screenshot from incident:

Due to this, there are addition matches detected which impact the incient severity.

Doesn't any one have ever face such issue? Appriciate any solution/work aoroud for this issues. 

Thanks in advance.

0

Viewing all articles
Browse latest Browse all 5755

Latest Images

Trending Articles



Latest Images

<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>