Skip to main content
Attachment Airlock is an advanced security feature designed to enhance your email flow defenses against potentially malicious attachments. By quarantining suspicious attachments, Attachment Airlock ensures thorough scrutiny and safeguards your environment. Follow the steps below to activate this feature:
  1. In Expert Editor, navigate to activeguard/core/rule_sets/90_local/params/local.properties.
  2. Edit the file by inserting the following lines:
    This parameter activates the Attachment Airlock feature. If, for any reason, you wish to deactivate this feature in the future, simply change the parameter from ACTIVE to DISABLED.

​
Password Compatability

Attachment Airlock expects passwords to be UTF-8 encoded. If a file is encrypted with a password containing special characters (e.g., ç, ü, ñ) using older tools or systems that use legacy encodings like CP437 or ISO-8859-1, unlocking may fail due to encoding mismatches.

​
Using Attachment Airlock

With Attachment Airlock enabled, users can unlock password-protected attachments in a secure environment and have them analyzed by xorlab. When an email with a password-protected attachment is sent to an XSP user, and the password protection can’t be automatically cracked by xorlab, the user receives the following notification email: Airlock notification By clicking the Unlock safely link, you are redirected to the SSQ portal with the preview of the quarantined message (if the main SSQ page is opened instead, just click the Attachments tab and click the message): Airlock message preview To unlock the message, click Unlock and enter the password for the attachment: Enter the attachment password With the provided password, xorlab starts analyzing the attachment and informs you about it: Unlocking the attachment After a successful analysis, if the attachment is safe, the message is unlocked and delivered to your mailbox: Unlocked message