Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 6 replies
  • Subscribers 1 subscriber
  • Views 10241 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Users receive "The file is being scanned for sensitive material. Please Wait"

kesm0724

Hello All,

Hopefully someone can assist with this.  A few of our clients at remote locations are getting a message I'm assuming related to the data control module when they open Outlook.

"The file is being scanned for sensitive material.  Please Wait"

First is there any way for this not to be presented?

Second we only monitor file transfers (Microsoft Office documents, presentations, adobe documents, etc) - log and allow transfer -  to Outlook so why is it actually scanning upon starting Outlook up?  I've tried uninstalling sophos and reinstalling but the same behavior comes back.  Again - this only occurs on a handful of clients. 

I do not have the policy configured to scan for any personally identifiable information....we only want to know if a file is being copied and to which application (outlook, IE, firefox, etc).  And we'd like for it to occur in the background without displaying this huge message on the users screen.  :)

:3150


This thread was automatically locked due to age.
Parents
  • 0

    Hi,

    I had a quick look into this with Process Monitor.  Almon.exe presents this dialog, so with that being filtered I found a query for:

    HKLM\SOFTWARE\Sophos\SAVService\DataControl\SplashScreen

    But it came up as not found, so I created the above key.

    This then revealed the following:

    HKLM\SOFTWARE\Sophos\SAVService\DataControl\SplashScreen\CursorStart
    HKLM\SOFTWARE\Sophos\SAVService\DataControl\SplashScreen\WindowStart
    HKLM\SOFTWARE\Sophos\SAVService\DataControl\SplashScreen\WindowDisplayLength

    You maybe want to try those in your testing.  I suspect setting WindowDisplayLength DWORD 0 might do it but haven't really performed any serious testing.

    I hope this turns out to be useful.  The only downside to trying to turn this off is that if it takes longer than a few seconds to scan the file, the user may think the window has hung without some indication something is happening.  If that is a concern, maybe WindowStart could be used to control how much time passes scanning before it gives the progress.

    The values seem to be in 10th of a second. I.e. 20 = 2 seconds

    Cheers,

    Jak

    :3153
Reply
  • 0

    Hi,

    I had a quick look into this with Process Monitor.  Almon.exe presents this dialog, so with that being filtered I found a query for:

    HKLM\SOFTWARE\Sophos\SAVService\DataControl\SplashScreen

    But it came up as not found, so I created the above key.

    This then revealed the following:

    HKLM\SOFTWARE\Sophos\SAVService\DataControl\SplashScreen\CursorStart
    HKLM\SOFTWARE\Sophos\SAVService\DataControl\SplashScreen\WindowStart
    HKLM\SOFTWARE\Sophos\SAVService\DataControl\SplashScreen\WindowDisplayLength

    You maybe want to try those in your testing.  I suspect setting WindowDisplayLength DWORD 0 might do it but haven't really performed any serious testing.

    I hope this turns out to be useful.  The only downside to trying to turn this off is that if it takes longer than a few seconds to scan the file, the user may think the window has hung without some indication something is happening.  If that is a concern, maybe WindowStart could be used to control how much time passes scanning before it gives the progress.

    The values seem to be in 10th of a second. I.e. 20 = 2 seconds

    Cheers,

    Jak

    :3153
Children
No Data
Unfiltered HTML