Microsoft Office documents detected as Executable File types in Messaging Gateway

Products

• Messaging Gateway

Issue/Introduction

Some Microsoft Office document components are detected as Executable files in Messaging Gateway. Message Audit Logs will typically show one of the following components in the Suspect Attachments section :

• olepres000
• dir
• .bin

 

Environment

• Product: Messaging Gateway
• Module: Malware scanning

Cause

Microsoft documents commonly contain OLE objects and binary content that are part of the file's internal structure. While these are not standard executables, Messaging Gateway's malware filtering is flagging them as restricted executable content due to their internal naming.

Resolution

To exempt Microsoft document internals from being detected as executable files

1. Go to Protocols > Settings > Content Scanning
2. Check "Only extract OLE Native content from structured storage"
3. Click "Save: