Issue

• Configure additional ESET Remote Administrator (6.3 and later) Antispam policy settings in ESET Mail Security for Microsoft Exchange Server to protect against Filecoder (ransomware) malware

Click each image to open a new window for additional anti-ransomware best practices and additional policy configurations:

Solution

Using the default Antispam rules, incoming emails are already being filtered on the mail server itself. This ensures that the attachment containing the malicious dropper will not be delivered in the mailbox of the end user and the ransomware is not able to execute. To further help prevent ransomware malware on your Microsoft Exchange server, create the following policy rules in ESET Remote Administrator version 6.3 or later: