Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 2 subscribers
  • Views 12123 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos for MS Sharepoint 2013 Unscannable file detected alert

FayeMüller

Hi,

we receive a lots of Email "Alert message from Sophos for Microsoft SharePoint On-access scan running on server "  with this error:

File name: ****.vdw
Location: /siti/use/_catalogs/wfpub/***** - *****/
Events: Unscannable file detected
Action: Continued
Last modified user: ****
Original author: *****
Date: 02.02.2016
Time: 18:07:42
Direction: Download

Incident information:

Event: Unscannable file detected
Rule name: On unscannable file

I tried to exclude .vdw file from scanning but this action doesn't work.
I think that this alert is sent when some SharePoint procedures starts (search, time service ...)

LOG:

02.02.2016 16:59:27    '****.vdw' at location '/siti/ddc/_catalogs/wfpub/*****/' is unscannable (reason: detected by SAVI. error: 0xa004021a)

Thanks for help me to block this "unnecessary" alert

Regards

FM



This thread was automatically locked due to age.
  • 0

    I'm having the exact same problem.  It's triggered by a workflow running that has "Show workflow visualization on status page" checked.  This is the default for all of the OOTB globally reusable workflows.  I see the use in having those sometimes though so ideally Sophos would either scan them or ignore them since they're system generated.

  • 0 in reply to NoahSouza

    Hi Noah,
    thank for you message,
    I told this possibility to the Sharepoint Team, but he said me that this option is not customizable.
    I hope that the sophos support can help me.

    Regards

    FM

Unfiltered HTML