Antivirus Policy Switches

Find these on the Policy tab of the Antivirus Center. Harmful files are always blocked, whatever these say; the switches decide who is told and how cautious to be with two grey areas.

Tell the Person Involved

• What it does: tells the person whose file was stopped (the sender of an upload, the recipient of an email) with a notification and an email.
• On (recommended): people understand at once why a file didn't arrive.
• Off: files are still stopped, but quietly.
• Example: a loan officer uploads a borrower's file that turns out to be infected. They're told straight away and ask the borrower for a clean copy.

Tell Antivirus Watchers

• What it does: also tells everyone with the View Antivirus permission whenever a harmful file is stopped.
• On (recommended): your administrators hear about threats as they happen.
• Off: administrators see stopped files in the Antivirus Center but get no alerts.
• Example: your office manager is told the moment a phishing attachment is stopped in anyone's mailbox.

Weekly Protection Report

• What it does: emails Antivirus viewers a short weekly summary: how many files were checked and what was stopped.
• On (recommended): a calm, regular reminder that protection is working.
• Off: no weekly email; the Antivirus Center still shows everything.

Block Documents With Macros

• What it does: decides what happens to Word and Excel documents containing macros (hidden automatic actions).
• Off (default): they're allowed with a Caution badge, and people can open a safe copy without the macros.
• On: they're blocked outright.
• Example: if your team never needs macro spreadsheets from outside, turning this on removes a common way in for attackers. If lenders send you rate sheets with macros, leave it off.

Block Password-Protected Zip Files

• What it does: decides what happens to zip files and other archives locked with a password, which Antivirus can't look inside.
• Off (default): they're allowed with a Couldn't Check badge.
• On: they're blocked outright.
• Example: attackers often send "invoice.zip, password 1234" to slip past checks. If your team never receives password-protected zips, turn this on.