Encrypted 7zip files are incorrectly detected as Unscannable when using Symantec Mail Security for Microsoft Exchange.

Article:TECH211082  |  Created: 2013-09-30  |  Updated: 2014-07-07  |  Article URL http://www.symantec.com/docs/TECH211082
Article Type
Technical Solution


Issue



 

Sending an encrypted 7zip attachment through Symantec Mail Security for Microsoft Exchange (SMSMSE) results in an Unscannable verdict when an Encrypted verdict would be expected.

 


Error



 The following is observed in the Application Event Log:

Event Type: Warning
Event Source: Symantec Mail Security for Microsoft Exchange
Event ID: 218
Description:
Rule: Unscannable File Rule
The attachment "<attachment name>" was Quarantined for the following reason(s):
Scan Engine Error.  CSAPI DEC result: 0x2C. The DEC scanner resultID attribute is not set or is an invalid ID.

 

 


Cause



 

Symantec Mail Security for Microsoft Exchange was incorrectly handling the verdict information passed from the Antivirus Engine (CSAPI) which resulted in an Unscannable verdict.

 


Solution



 

This issue has been corrected as of SMSMSE 7.0.2.  Please upgrade to 7.0.2 or later to resolve incorrect verdicts for encrypted 7zip files.

 




Article URL http://www.symantec.com/docs/TECH211082


Terms of use for this information are found in Legal Notices