Skip to main content
My preferencesSign out
Proofpoint, Inc.

Emails with ***UNCHECKED*** in Subject

Situation You have received an email with ***UNCHECKED*** in the Subject Line.
Solution

Email Subjects are prepended with this tag if the attachment is undecipherable.

For example: If the attachment is zipped & password protected.

 

***Unchecked*** Subject Tag

If you receive an email with a .zip attachment, the subject might be prepended with ***UNCHECKED*** in your Inbox:

unchecked_email (2).png

You will also be able to see this in the Detailed Email Log Entry in your Proofpoint Essentials Logs:

unchecked_log (2).png

Explanation

If the email contains a zip file which is password protected, then the Proofpoint Essentials engine will have no way to check the compressed attachment for malicious content. The ***UNCHECKED*** tag is prepended as a warning that the system was unable to analyze the attachment.  

Note: Just because an email has the ***UNCHECKED*** tag prepended does not necessarily mean it is spam. The email itself is still processed and analyzed against the system's spam definitions and other engines.  

Quarantine Password Protected Zip Files

If you do not want to receive emails with password protected .zip files, you can create a Custom Filter to quarantine them. To do so, create an Inbound Custom Filter with the logic below.

IF Attachment Type IS Undecipherable attachments*
DO Quarantine

filter_undec.png

*Undecipherable attachments can be found in the Other section of Choose Attachment Types

filter_type.PNG