Messaging Gateway

Running Brightmail Gateway v7.7.0-17

 

I often have legitimate messages flagged as "Unscannable," reason being "Malformed MIME". It's always messages with attachments, TIF files, PDFs, DOCs, etc. What do I need to do to remedy this? I don't want to allow all Malformed MIME messages through since the majority of them are SPAM.

Hello Winston,

 

There could be one of a couple potential issues here. If it is legitimately Malformed MIME encoding, there is most likely not much we can do but hope for an update in our decomposer that may be able to scan the mail. This would largely depend on whether the Malformation was common or not.

 

Otherwise you may be running into the issue outlined in the document below:

 

Title: 'Valid messages with attachments get unscannable verdict'

 

If this is the case, the document should be updated when there is a fix.

 

Thanks!

Title: 'Valid messages with attachments get unscannable verdict'

That document is not updated for SBG v8, and v8 still produce a lot of Unscannable verdicts.

You can find the release notes for Brightmail Gateway v8 at the following link:

http://www.symantec.com/business/support/documentation.jsp?language=english&view=manuals&pid=53991

We are still flagging valid malformity as malformed, however, you should see improvements in reporting and logging that can potentially point to why a message would be flagged as such.

As always, if you are having an issue with messages showing up as malformed, please give us a call and we will see what we can do.

I'll talk to the document owner and see if there is anything needed to be changed since the release.

Thanks!

Hi,

I'm using ver 8 and we're getting this from the logs. The only workaround I'm seeing so far is to add compliance policies and change the virus and spam settings. I'll be specific on this - specifying only specific senders and recipients from our domain.

Hi mon_raralio,
What  you mean by "to add compliance policies and change the virus and spam settings."?
Thanks

You can do any or all of the following (in no particular order):
- Add the domains of the email senders to your good recipients.
- Add a compliance policy to bypass the scanning of certain files.
- Add a dictionary based compliance policy using email domains as a filter.
- Enabling fastpass

What to expect:
Users would get their emails faster, including "spam" from friends.
This could be an entry point for malwares since it's bypassing SBG.