Encrypted 7zip files are incorrectly detected as Unscannable when using Symantec Mail Security for Microsoft Exchange.
|Article:TECH211082|||||Created: 2013-09-30|||||Updated: 2014-12-17|||||Article URL http://www.symantec.com/docs/TECH211082|
Sending an encrypted 7zip attachment through Symantec Mail Security for Microsoft Exchange (SMSMSE) results in an Unscannable verdict when an Encrypted verdict would be expected.
The following is observed in the Application Event Log:
Event Type: Warning
Event Source: Symantec Mail Security for Microsoft Exchange
Event ID: 218
Rule: Unscannable File Rule
The attachment "<attachment name>" was Quarantined for the following reason(s):
Scan Engine Error. CSAPI DEC result: 0x2C. The DEC scanner resultID attribute is not set or is an invalid ID.
Symantec Mail Security for Microsoft Exchange was incorrectly handling the verdict information passed from the Antivirus Engine (CSAPI) which resulted in an Unscannable verdict.
This issue has been corrected as of SMSMSE 7.0.2. Please upgrade to 7.0.2 or later to resolve incorrect verdicts for encrypted 7zip files.
Article URL http://www.symantec.com/docs/TECH211082