PDF files getting blocked by Block EXE rule
We have one user sending mails from his Yahoo ID to internal domain. The issue is that there are some PDF files that are attached to these mails and they are getting stripped off.
In the Audit Logs it gives the message that it has been blocked by exe block policy. It says:
Message Part: header — content-type
Matching Text: application/x-download
I received this attachement from the user on a different ID and checked the same but there is nothing suspecious in it. Also I send a mail from my Gmail ID to the internal domain with the same PDF file and other PDF attachments. They are all getting delivered with out any issue.
I suspect that it could be that there are some extra attachments to the sender's mail causing this issue. May be a signature or some images or html files or so.
I am unable to find any more details about this issue. Could anyone help me get more information on this.