One question - when the Sandblast TE removes a file out of a mail it attaches a Textfile with the content
"Attachment 'Filename' was removed by Check Point Threat Extraction."
Is there a possibility to change that text??
This text (string) is hardcoded in one of the binary files. I had asked the same exact question with TAC back in August. They called me and advised this messages cannot be edited or changed. (not even via a custom hotfix).
I suggest to look the the UserCheck messages first and edit the mail signatures for Threat Extraction as shown below. To edit the text of the attached text file I suggest opening a service request with your TAC as this might involve editing a configuration file.
*grml* Thx for your answer.. I hope, that this will changed in the future.. but thx for your answer!!
In fact, it has been changed recently
Currently you need to install a hotfix which the TAC should provide. It has been documented in the sk120415.
Retrieving data ...