Encrypted 7zip files are incorrectly detected as Unscannable when using Symantec Mail Security for Microsoft Exchange.

Products

• Mail Security for Microsoft Exchange

Issue/Introduction

 

Sending an encrypted 7zip attachment through Symantec Mail Security for Microsoft Exchange (SMSMSE) results in an Unscannable verdict when an Encrypted verdict would be expected.

 

 The following is observed in the Application Event Log:

Event Type: Warning
Event Source: Symantec Mail Security for Microsoft Exchange
Event ID: 218
Description:
Rule: Unscannable File Rule
The attachment "<attachment name>" was Quarantined for the following reason(s):
Scan Engine Error.  CSAPI DEC result: 0x2C. The DEC scanner resultID attribute is not set or is an invalid ID.

 

 

Cause

 

Symantec Mail Security for Microsoft Exchange was incorrectly handling the verdict information passed from the Antivirus Engine (CSAPI) which resulted in an Unscannable verdict.

 

Resolution

 

This issue has been corrected as of SMSMSE 7.0.2.  Please upgrade to 7.0.2 or later to resolve incorrect verdicts for encrypted 7zip files.