ContentsHide

Email Attachments Scanning Overview

Access the Email Attachments page from the Monitor > Files > Email Attachments menu.

Benefits of Viewing Scanned Email Attachments

Allows you to view a compiled list of suspicious email attachments all in one place, including the file hash, threat level, filename, and malware type.
Allows you to filter the list of email attachments by individual categories.

Export Data—Click the Export button to download file scanning data to a CSV file. You are prompted to narrow the data download to a selected time-frame.

Figure 1: Email Attachments

The following information is available on this page.

Table 1: Email Attachments Scanning Data Fields
Field	Definition
Detection Engine	Displays color-coded icons representing the confidence levels of various detection engines in identifying threats. For more information about detection engines, see Table 2. The color codes signify the following threat severities: Red—High threat severity Orange—Moderate threat severity Green—Low threat severity Gray—No threats detected To view the threat severity score assigned by each detection engine, hover over the icons.
Signature ID / SHA-256 / ML Hit	If applicable, the Signature ID uniquely identifies the signature that is triggered for this detection; otherwise, the SHA-256 file hash is displayed. If a full file is uploaded to the Juniper ATP Cloud, a hash of the file is displayed in this column. If the file is blocked, and the transfer is interrupted on the SRX Series Firewall, a Signature ID is displayed. If the file is detected by the inline machine learning (ML)-based threat detection engine on the SRX Series Firewall, "N/A" is displayed in this column.
Threat Level	The threat score. Click the three vertical dots at the top of the column to filter the information in the page by threat level.
Date Scanned	The date and time the file was scanned.
Filename	The name of the file, including the extension
Recipient	The email address of the intended recipient
Sender	The email address of the sender
Malware Name	The type of malware found
Status	Indicates whether the file was blocked or permitted.
Category	The type of file Examples: PDF, executable, document

Help us to improve. Rate this article.

Feedback Received. Thank You!

Need more help?

Ask questions in TechWiki

Contact Customer Support

Check documentation in TechLibrary

Rating by you:

Email Attachments Scanning Overview

Help us to improve. Rate this article.

Related Documentation