Misses catch of eicar test

Question

Dear Sophos team, 
 I am wondering why Sophos did not detect the eicar test in web site test after downloading the file test (eicar.com.txt) despite that I put the default navigator is selected under Sophos for checking the link!! 
 the test web site is:http://www.eicar.org/download/eicar.com.txt 
 
 Could you please tell us how you can solve that issue?? 
 Thanks in advance. 
 Lair_r

Jasmin · Accepted Answer

Hi Laid_r 
 Thank you for the nice gesture and appreciation for the products you are using. 
 I just tested the scenario on my testing phone. Intercept X for mobile many times will not give the prompt of the detection and for the action. If you'll visit the Intercept X for mobile, it has already detected it and you can perform the required action from there. Even if it goes undetected (happened 1 out of 10 times because I was continuously doing unzip of the file), the manual scan had detected it in the manual scan. 
 Even if you are not doing any manual scanning, the file will be detected whenever it'll be accessed by you or by any other application through Intercept X for mobile.

Jasmin · Answer

Hi Laid_r 
 If the zip files have been downloaded directly through https link, then Sophos Intercept X for mobile will not do the file scanning as the file data will be in the encrypted form. 
 However, Sophos Intercept X for mobile will block the website which is in the block list even if it has been accessed with its https link. 
 If you'll try to unzip those files, Sophos Intercept X for mobile will automatically detect the original file of Eicar.