Hello Everyone,
I have question regarding CAB (Common Attachment Blocking) in Exchange Online Protection.
Does it support blocking attached zip files in emails without also blocking attached pptx, docx, xlsx files?
In my test tenant if i add zip extension to CAB, all pptx,docx etc attached files are also blocked via malware filter, as they are being considered at "zipped" files.
If i use a mail flow instead of CAB and block only *.zip files pptx,docx etc are not blocked however doing so removes the ability to detect renamed zip files. For e.g. if i rename abc.zip to abc.txt it will not be blocked if configured via mail flow rules.
What i need is ability to detect renamed zip files while also allowing pptx,docx etc files to go through normally as attachments. Is that a supported scenario?
