SWG logs events for files larger than the maximum file size to scan when transferring files via FTP

Products

• Web Gateway

Issue/Introduction

When a client browser downloads a file via HTTP protocol through Symantec Web Gateway (SWG) appliance, SWG honors the maximum file download size configured on Administration> Configuration> Modules. SWG does not report an event for files greater than the configured maximum file size. When a client browser downloads a file via FTP through SWG, SWG does not honor the file download size and records a File In Motion event in the Custom Reports.

Steps to Reproduce:
1.Place a file on a web server you control. This test file must be larger than the size in bytes configured on the Modules tab.
2. Configure the web server to permit both HTTP and FTP access to the file.
3. Try to download the test file in IE browser via HTTP.
4.Try to download the test file in IE browser via FTP.
3.Try to download the test file in Filezilla via FTP.
4.Go to Custom Reports.

Actual Results:
--- No event is generated for step1(HTTP). Reports are generated for step2 and step3(FTP)

Expected Results:
--- No event should be generated.
 

Resolution

Symantec is investigating.