I’ve discovered that it is possible for a customer to attach an .exe file to a new ticket, and for that .exe file to be downloaded by a member of staff responding to the ticket..
Due to the possibility of a Zero Day being introduced to our network, we would like to either:
- Remove the attachment option from the portal
- Limit the attachment types to a small few (pdf, .doc, .jpg etc)
Has anyone got any advice on how to action the above?