The EMPS_ATTACHMENT_SCAN license enables the Email Security - Server appliance to scan email attachments such as ZIP, EXE, PDF, DOC, DOCX, RAR, and 7-ZIP file types for suspicious or malicious files. This feature protects against spear phishing emails used in targeted attacks. The Email Security - Server appliance can scan attachments within an email message body and either allow or block access to the email.
After malware is identified, the appliance quarantines the malicious email that contains the malicious attachments for further analysis or deletion. For details about how to view the status of attachment scanning, see Viewing the status of analysis scanning options using the Web UI on or Viewing the status of analysis scanning options using the CLI on .
You can track the number of malicious attachments by using the What's Happening panel of the Email Security - Server Dashboard.