Please complete the details below then remove this line:
Domino/Notes Version: 12.0.2
Add-on Product (if appropriate, e.g. Verse / Traveler / Nomad / Domino REST API): HCL Verse
Its Version: Verse 3.2.7 (HCL Verse 2026. 6)
Operating System: Linux
Client (Notes, Nomad Web, Nomad Mobile, Android/iOS, browser version): HCL Notes
Problem/Query: Is it possible to prevent users to send mails with Office-File including Macros even when sent internally (to internal users)? I want the server to check mails sent internally with attachments to check if they include Office-Macros. May be The server checks just if there are attachments and do not deliver them until an external tool was been able to check the attachments.
Hi burghard.britzke,
Yes, this can be done to some extent directly on the Domino server using Server Mail Rules. You can create rules to block known macro enabled file extensions such as .docm, .xlsm, .pptm, etc. This is easy to implement, but of course it has limitations. For example, a ZIP file containing such a document would not be detected this way, and file extensions can also be manipulated.
If you want a proper content based inspection, the more professional approach would be to integrate an external content or malware scanner into the mail routing process. Domino would pass the attachments to the scanner, which can inspect the actual file content and return a verdict before the message is delivered. This would be the approach I would recommend evaluating if the requirement is to reliably detect Office files containing macros.
One additional option: I noticed that you are using both Verse and the Notes client. For the Notes client, MarvelClient also provides Attachment Blocking, which can block files based on file extensions as well as fingerprints. This can be applied not only to emails, but also to documents in general, using Target Databases to define where the blocking should apply. This would prevent the file from being added or sent in the first place. However, this functionality only works within the Notes client itself and not in Verse, so if both clients are in use, it would only be a partial solution.