Filtering on the Transport Scan Job


Applies to: Forefront Security for Exchange Server

It is recommended that you set up a filter list for the Transport Scan Job that contains the file types most likely to be infected.

Additional filtering capabilities can be obtained by using Exchange 2007 Transport Rules (see the Exchange 2007 help topics). One difference between FSE file filtering and Exchange file filtering is that Exchange filters only on the file name, while FSE attempts to detect and filter files that match the file type, when possible, even if the file name has been changed.


You should review this list periodically.

To configure a filter list of potentially dangerous file types

  1. Create a filter list for all files with the following extensions:

    Extension Type of file


    Archive file


    Microsoft Access Project Extension


    Microsoft Access Project


    ACT! Document template


    Executable application


    Active Server Page files


    Archive file


    Word files that always have macros


    Microsoft Visual Basic class module


    Batch files


    Binary file


    Batch to memory batch file


    Computer based training




    Compiled HTML Help file


    Microsoft Windows NT Command script


    Java class file


    Java class file


    Microsoft MS-DOS program


    Control Panel extension


    Security certificate


    Corel script file


    Cascading style sheet file


    DLL files


    Driver Files




    Outlook Express e-mail message


    Font file


    Help file


    HTML program


    HTML files


    Setup Information


    Internet Naming Service


    Internet Communication settings


    JScript file


    JScript file


    Jscript Encoded Script File


    Program Library Common Object File Format




    Access Database File


    MDE database


    Archived web page


    Archived web page


    Archived web page


    Microsoft Common Console document


    Microsoft Windows Installer package


    Math script object file


    Microsoft Windows Installer patch


    Microsoft Visual Test source files


    Relocatable object code


    Object linking and embedding control executable


    OrgViewer file


    Photo CD image, Microsoft Visual compiled script


    CGI program


    Shortcut to MS-DOS program


    Palm Pilot resource file


    Archive file


    Registration entries


    Screen saver


    Windows Script Component


    Shortcut into a document


    Shell Scrap Object


    AMI Pro macro


    Macromedia Files


    System device driver


    Archive file


    Internet shortcut


    VBScript file


    VBScript encoded script file


    VBScript file


    Virtual device driver


    Windows Script Component


    Windows Script file


    Windows Script Host Settings file


    CLSID Filter

  2. Filter these files in any container file.

  3. Ensure that Delete Corrupted Compressed Files is selected in General Options.

  4. Ensure that Delete Encrypted Compressed Files is selected in General Options.

  5. Enable the filter.

  6. Save the filter.