Mail Not Being Received When Webserver Firewall Profile set to Dual Scan

Question

Hi all, 
 We have a problem with our Exchange 2016 on-premise server, which has been setup to receive and deliver mail using the UTM Webserver protection for many years. Since Saturday, external mail isn't being received and gets stuck in the UTM with an "AV Scan pending" message in the UTM mail manager logs. We've been able to get this working by setting to single scan mode in the Firewall profile but when in dual scan, we get this in the logs: 
 
 2020:11:30-12:51:54 utm httpd[25534]: [avscan:error] [pid 25534:tid 3985615728] [client xxx.xxx.xxx.xxx:23012] [25534] virus daemon error found in request /owa/ 
 
 Any ideas gratefully received.

colly72 · Accepted Answer

OK, I finally stumbled across a similar post ( https://community.sophos.com/utm-firewall/f/hardware-installation-up2date-licensing/117101/need-help---19869-virus-daemon-error-found-in-request-after-license-update ) which suggested that switching the scanner from Sophos to Avira might work. I tried that, then switched on dual scanning mode in the Firewall profile, then switched back to Sophos as the scanning mode and left dual scanning on. This seems to have fixed the issue. 
 Any ideas what might suddenly cause such a problem, seemingly out of the blue?

Mail Not Being Received When Webserver Firewall Profile set to Dual Scan

Top Replies