Jon Scriven

London

IT Bod

We block most dangerous attachment types and have various layers of anti-virus software but still got hit. We don't block ZIP files because they are used so widely to distribute files and so the zip files didn't get blocked, the daily virus software update didn't include the pattern for this (we downloaded an emergency pattern but had already been hit by then) and the file icon and Email looked like an innocuous text file with information about a returned Email. Getting the balance between security and usability is difficult and every so often something slips through the net.