When reviewing mail items that have been quarantined after triggering a policy/rule based on True File Type, the rule that caused the mail to be quarantined is displayed within the summary. However, there doesn't appear to be any way to determine the "Attachment List""True File Type" item that was detected and triggered the rule. As such, you cannot determine which item to delete/disable if you don't want that particular File Type to be blocked.
↧