Outlook progressbar for copied attachments

Hi Spheron,

Thanks for reaching out to the Sophos Community Forum. 

I'd like to ask if you've tried disabling some of the scanning components to narrow down which feature is causing this issue? I recommend proceeding with the steps in the following article. 
- https://support.sophos.com/support/s/article/KB-000036572?language=en_US

Hello Qoosh,

thanks for feedback... I have tested it. If i deactive the Realtime Scanning > Files, the above described error didn't occur.

So i take a look into the logfile:

C:\ProgramData\Sophos\Sophos File Scanner\Logs\SophosFileScanner.log


Here i can see  an error every time i tried to copy a file with strg+c / strg+v as attachment in a new mail in outlook:

2022-04-21T09:11:37.515Z [ 4792: 6664] E Failed to read the file header: -1610350039
2022-04-21T09:13:48.759Z [ 4792: 6668] E Failed to read the file header: -1610350039
2022-04-21T09:14:11.700Z [ 4792: 6632] E Failed to read the file header: -1610350039
2022-04-21T09:14:18.828Z [ 4792: 6648] E Failed to read the file header: -1610350039
2022-04-21T09:14:18.830Z [ 4792: 6652] E Failed to read the file header: -1610350039

For me it seems to do with the realtime scanning.

I will open a support case at sophos...

Greetings
Marco

Thank you for following up with us. This does seem like something our team will need to look into more closely. Opening a support case to investigate further would be the best course of action. 

Do you see any different results when attaching files from the local device?
If you wish to narrow down the issue further, I suggest doing the following.

- Clone your existing threat protection policy
- In the newly created policy, un-check the "Remote-files" option

Please note: The cloned policy will be set to "bypassed" under the "Policy Enforced" tab, so you’ll have to switch the flag before applying it to a test device. 

You can update us with your findings either here on the forums or in the support case.

We are experiencing the same issue, and a work around is to drag the attachment directly to the email instead of doing CTRL+C and CTRL+V, this way that progress bar doesn't appear.

Hello @all,

i have response from Sophos support: Problem is a known issue and will be fixed in the next release.

As workaround you have to options:

1) As Qoosh describes, you can deactivate the "Remote Files" Scanning under "Enable real-time scanning" in Central

2) You can set a folder exclusion in threat protection policy in the Central for 

    \\<SERVER>\PIPE\

     as example:  \\FileServer001\PIPE\

I used the second option and this worked for me. So, we have to wait for a updated relase which is fixing this bug.

Greetings
Marco 

Thanks for sharing your findings!