Since upgrading Symantec Endpoint Protection (SEP) to 11.0.2010.25, some Outlook attachments appear to be stripped of content.

Article:TECH105253  |  Created: 2008-01-30  |  Updated: 2010-01-14  |  Article URL http://www.symantec.com/docs/TECH105253
Article Type
Technical Solution

Product(s)

Environment

Issue



After upgrading SEP clients to 11.0.2010.25, some Outlook attachments appear to be stripped of content or corrupt. If the attachment is saved to disk the file is 0 bytes in size instead of the expected size.

Symptoms
SEP client 10.0.2010.25 (MR2-MP1)

Email Tools are installed with the Outlook plug-in enabled.
Email attachments which are saved to disk are saved with a file size of 0 bytes.



Cause



This issue occurs when the Outlook Auto-Protect is configured to scan Selected Extensions instead of All Files. When saving or opening files with extensions that are not listed in the Selected Extensions list, instead of not scanning the files, the Outlook plug-in is stripping the content.

Solution



This problem is fixed in Symantec Endpoint Protection 11 Maintenance Release (MR) 3. For information on how to obtain the latest build of Symantec Endpoint Protection, read Obtaining an upgrade or update for Symantec Endpoint Protection.
http://service1.symantec.com/support/ent-security.nsf/docid/2007121216494948

Optional Workarounds:
  1. Add the affected file extension to the Selected Extension list.
  2. Change the Outlook Auto-Protect File Types configuration from 'Selected: Extensions' to 'All Files'.
  3. Disable or uninstall the Outlook plug-in from the SEP client.




Technical Information
To disable the Outlook plug-in follow the below steps:
To disable the plug-in from the Symantec Endpoint Protection Manager (SEPM):
      1. Open the AntiVirus policy in SEPM.
      2. Click on Microsoft Outlook Auto-Protect
      3. Unselect Enable Microsoft Outlook Auto-Protect
    • To disable the plug-in from within the Symantec Endpoint Protection (SEP) client interface:
      1. Open up the SEP client UI (User Interface).
      2. On the AV bar, click Options> Change Settings
      3. Click on Outlook Auto-Protect
      4. Unselect Enable Microsoft Outlook Auto-Protect
    • To disable the plug-in from Outlook:
      1. Open Outlook
      2. Click Tools> Options
      3. Select the Other tab
      4. Click Advanced Options
      5. Click Add-in Manager
      6. Unselect the Symantec AntiVirus Outlook Protection and click OK
    • To disable the plug-in from Outlook 2007:
      1. Open Outlook 2007
      2. Click Tools> Trust Center...
      3. Select the Add-ins tab
      4. On the Manage drop-down menu, select Exchange Client Extensions, then select Go...
      5. Unselect the Symantec AntiVirus Outlook Protection and click OK
      6. For best results, close and restart Outlook 2007.

To uninstall the Outlook plug-in follow the below steps:
    1. Click Start> Control Panel
    2. Double-click Add or Remove Programs
    3. Select Symantec Endpoint Protection
    4. Click Change
    5. When the installer appears, click Next
    6. Select Modify and click Next
    7. Open the AntiVirus Email Protection
    8. Click on the Outlook Scanner and select the This feature will not be available option
    9. Click Next and then Finish.


Supplemental Materials

SourceETrack
Value1317106, 1301175

Legacy ID



2008063012362648


Article URL http://www.symantec.com/docs/TECH105253


Terms of use for this information are found in Legal Notices