Antivirus Policy Switches
Find these on the Policy tab of the Antivirus Center. Harmful files are always blocked, whatever these say; the switches decide who is told and how cautious to be with two grey areas.
Tell the Person Involved
- What it does: tells the person whose file was stopped (the sender of an upload, the recipient of an email) with a notification and an email.
- On (recommended): people understand at once why a file didn't arrive.
- Off: files are still stopped, but quietly.
- Example: a loan officer uploads a borrower's file that turns out to be infected. They're told straight away and ask the borrower for a clean copy.
Tell Antivirus Watchers
- What it does: also tells everyone with the View Antivirus permission whenever a harmful file is stopped.
- On (recommended): your administrators hear about threats as they happen.
- Off: administrators see stopped files in the Antivirus Center but get no alerts.
- Example: your office manager is told the moment a phishing attachment is stopped in anyone's mailbox.
Weekly Protection Report
- What it does: emails Antivirus viewers a short weekly summary: how many files were checked and what was stopped.
- On (recommended): a calm, regular reminder that protection is working.
- Off: no weekly email; the Antivirus Center still shows everything.
Block Documents With Macros
- What it does: decides what happens to Word and Excel documents containing macros (hidden automatic actions).
- Off (default): they're allowed with a Caution badge, and people can open a safe copy without the macros.
- On: they're blocked outright.
- Example: if your team never needs macro spreadsheets from outside, turning this on removes a common way in for attackers. If lenders send you rate sheets with macros, leave it off.
Block Password-Protected Zip Files
- What it does: decides what happens to zip files and other archives locked with a password, which Antivirus can't look inside.
- Off (default): they're allowed with a Couldn't Check badge.
- On: they're blocked outright.
- Example: attackers often send "invoice.zip, password 1234" to slip past checks. If your team never receives password-protected zips, turn this on.
