> Source: [sk115582](https://support.checkpoint.com/results/sk/sk115582)

# sk115582 - Threat Emulation does not emulate email attachments with size greater than 15MB

| Property | Value |
|----------|-------|
| Solution ID | sk115582 |
| Date Created | 2017-01-25 |
| Last Modified | 2022-04-03 |
| Technical Level | General |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20 |
| OS | Gaia |

## Symptoms

- * Local or Cloud Threat Emulation can only emulate email attachment with size smaller than 15MB.

* SmartDashboard -\> Threat Emulation -\> Advanced -\> Engine Settings -\> Threat Emulation Settings -\> Emulation Limits view shows "Maximum files size" and "Maximum emulation time" properly configured, but Threat Emulation still cannot emulate any email attachment with size greater than 15MB.

* The "`/opt/postfix/usr/sbin/postqueue -c /opt/postfix/etc/postfix/ -p`" command on the Security Gateway shows that the email goes through, but the email attachment was not emulated.

* The "`tecli show em qu`" command on the Security Gateway does not show that the email attachment was emulated.

## Solution

This problem was fixed. The fix is included starting from:

* [Check Point R80.10](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk111841)

Check Point recommends to always upgrade to the most recent version ([Security Gateway](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doShowproductpage&productTab=downloads&product=435) / [VSX](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doShowproductpage&productTab=downloads&product=359) / [Security Management Server](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doShowproductpage&productTab=downloads&product=184) / [Multi-Domain Security Management Server](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doShowproductpage&productTab=downloads&product=166) / [SmartConsole](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doShowproductpage&productTab=downloads&product=191)).

<br />

If you cannot upgrade or install the hotfix, this workaround is available:

**Procedure:**

1. Close all SmartConsole windows.

2. Connect with [GuiDBedit Tool](https://supportcontent.checkpoint.com/solutions?id=sk13009) to the Security Management Server / Domain Management Server that manages this Threat Emulation Gateway.

3. Go to *Other* -\> *am_profiles.*

   There are few profiles:
   * *Recommended_Profile*
   * *Recommended_Profile_CloudEmu*
   * *Recommended_Profile_LocalEmu*
4. Search for the *max_file_size* property and modify its value to the required file size.

   The default value is 15000.

   **Notes:**
   * If you enabled only the Cloud Emulation, then modify the *max_file_size* property only in the *Recommended_Profile_CloudEmu* profile.
   * If you enabled only the Local Emulation, then modify the *max_file_size* property only in the *Recommended_Profile_LocalEmu* profile.
   * In any other case, modify the *max_file_size* property in all three profiles.
5. Click the *File* menu \> *Save All*.

6. Close the GuiDBedit Tool window.

7. Connect with SmartDashboard to the Management Server.

8. Install the Threat Prevention Policy on this Threat Emulation Gateway.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content