SEPM - Isolate ZIP attachments

Hi,

I am running the latest version of SEPM and have upgraded all my clients.   Given a recent attack that came in as an attachement on an email (zipped) that failed to be identified, I now want to know if its possible using SEPM to do a policy that will block a Zip file as an attachement on an email.

Its very very rare we actually use zipped attachements for anything, so blocking/deleting/other is not going to present any issues.

Any help in either creating a policy or sharing a policy would be most welcome.

Thanks