A trusted partner of an organization recently experienced a new campaign that was leveraging JavaScript attachments to trick users into executing malware. As a result, they created a local policy to deny messages with JavaScript attachments. Which action should the administrator of the organization take to ensure encrypted communications are delivered to the intended partner recipient?

Question

Accepted Answer

D. Create a new encryption profile and deselect the 'Use-Script' envelope settings option. Creating a new encryption profile and deselecting the 'Use-Script' envelope settings option is the correct action to ensure encrypted messages are delivered. This setting controls whether the encrypted message uses a JavaScript-based viewer, and disabling it ensures the message envelope does not trigger the partner's policy against JavaScript attachments.

Answer

A. Insert the X-PostX-Use-Script' header with a value of false to the encrypted messages While related, `X-PostX-Use-Script` is an internal header, and controlling this functionality is primarily done via the encryption profile settings, not direct header manipulation for policy compliance.

Answer

B. Select JavaScript-free' option within the Cisco Secure Email Encryption Service Add-in

Answer

C. Create an outgoing content filter and add the Encrypt and Deliver Nov/ action with Use-Script

A trusted partner of an organization recently experienced a new campaign that was leveraging JavaScript attachments to trick users into executing malware. As a result, they created a local policy to…

Question

Options

How the community answered

Why each option

Topics

Community Discussion