Reducing the incidence of malformed MIME false positives

Article:HOWTO82510  |  Created: 2012-11-30  |  Updated: 2014-04-08  |  Article URL http://www.symantec.com/docs/HOWTO82510
Article Type
How To


Subject


Reducing the incidence of malformed MIME false positives

A message body or attachment might trigger the Unscannable File Rule and appear in the Event Log as Event ID 218. However, the MIME container in the email appears to be correct.

You can either reduce the sensitivity for malformed MIME identification or disable detection of malformed MIME containers to reduce the incidence of malformed MIME false positives.

To reduce malformed MIME identification sensitivity

  • Create or modify the following DWORD registry value:

    HKEY_LOCAL_MACHINE\Software\Wow6432Node\Symantec\SMSMSE\7.5\Server\DecMIMEIdentificationStrength

    The value can be a decimal between 1 and 5. The higher the number, the lower the sensitivity, which reduces the incidence of false positives.

To disable malformed MIME container detection

  • Create or modify the following DWORD registry value to decimal 0.

    HKEY_LOCAL_MACHINE\Software\Wow6432Node\Symantec\SMSMSE\7.5\Server\BlockMalformedContainers


Legacy ID



v8751337_v82634657


Article URL http://www.symantec.com/docs/HOWTO82510


Terms of use for this information are found in Legal Notices