Content Analysis(CAS) error: "Maximum total uncompressed size exceeded"

Products

• Content Analysis Software
• ISG Content Analysis

Issue/Introduction

CAS logs show a similar error: "Maximum total uncompressed size exceeded,, File has been dropped.,,"

Environment

• Content Analysis

Cause

An uncompressed file size exceeds the specified or maximum appliance limit.

Resolution

Increase the file size limit.

Kaspersky, McAfee, Sophos, and Symantec antivirus (AV) services now support a maximum total uncompressed size of 8GB.

In the AV service options in the Management Console (Services > AV Scanning Behavior > (Antivirus option)), specify the limit in MB (the maximum is 8192 MB). In the CLI, use the following command:

(config)# services {kaspersky | mcafee | sophos | symantec} limits mtus <value_in_MB>

Please take into consideration, that the limit must be greater than or equal to the maximum file size specified in services policy mifs.
The default mifs value is 100 MB.
In the AV service options in the Management Console (Services > AV Scanning Behavior), specify the limit in MB (the maximum is 8192 MB). In the CLI, use the following command:

(config)# services policy mifs <file size>

https://techdocs.broadcom.com/us/en/symantec-security-software/web-and-network-security/content-analysis/3-1/cli-index/c_config_commands/services/services_symantec.html
https://techdocs.broadcom.com/us/en/symantec-security-software/web-and-network-security/content-analysis/3-1/cli-index/c_config_commands/services/services_policy.html

NOTE: The option is available from CAS version 3.1.5
https://techdocs.broadcom.com/us/en/symantec-security-software/web-and-network-security/content-analysis/3-1/new_features/rn-new-features-3150.html 

Additional Information

• Set AV Scanning Behavior Options