Enable Blocking of Macro-enabled Microsoft Office Documents

*********************************
There is now a CONTENT FREEZE for Mercury while we switch to a new platform. It began on Friday, March 10 at 6pm and will end on Wednesday, March 15 at noon. No new content can be created during this time, but all material in the system as of the beginning of the freeze will be migrated to the new platform, including users and groups. Functionally the new site is identical to the old one. webteam@gatech.edu
*********************************

Event Details
  • Date/Time:
    • Thursday September 8, 2016
      12:00 am - 11:59 pm
  • Location: Atlanta, GA
  • Phone:
  • URL:
  • Email:
  • Fee(s):
    N/A
  • Extras:
Contact

https://emailtoolbox.gatech.edu/gethelp

Summaries

Summary Sentence: IronPort blocking Inbound Macro-enabled Microsoft Office Documents (.pptm and .docm)

Full Summary: No summary paragraph submitted.

The Cyber Security team is partnering with various teams around campus to address the risks of ransomware to our IT environment. The first and easiest solution for us to implement is to enable the IronPorts to start stripping .docm and .pptm attachments. Even today, Cyber Security has received another alert from our threat intelligence sources that have alerted us to another ransomware attack that is making the rounds and is being delivered via a .docm email attachment.

Working with the email team, we intend to enable this policy within the IronPorts on September 8th 2016 at 6 AM. From that point forward, anyone who is sent this type of file as an email attachment from an outside party will receive a message in the body of the original email message informing the recipient that the email attachment has been removed.

Please note, email users may still share macro-enabled files via the following means:

  1. Compress the attachment as a .zip file and then email the file
  2. Use Office365 OneDrive file sharing
  3. Soon Dropbox file sharing will be available

Please inform your users of this change as soon as possible. Should you have questions, you can either contact my team or the email team.

Additional Information

In Campus Calendar
No
Groups

OIT

Invited Audience
Faculty/Staff, Undergraduate students, Graduate students
Categories
Other/Miscellaneous
Keywords
ironport, oit, outlook, SAAS
Status
  • Created By: Alana DeAngelis
  • Workflow Status: Published
  • Created On: Aug 22, 2016 - 6:23am
  • Last Updated: Apr 13, 2017 - 5:15pm