Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 2 replies
  • Answers 1 answer
  • Subscribers 4 subscribers
  • Views 6209 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Virus in rar file not blocked

BramKortleven1

We got an issue this morning with 2 emails, containing a rar attachment, getting through the smtp antivirus filter (dual scan), showing up in the Outlook of our users, and there being blocked by the on-machine Sophos Antivirus for Mac.
Shouldn't the SMTP antivirus blocked the virus upon entering?

I can't seem to find any extra info on in-depth scanning of attached compressed files containing viruses, so I'm asking here: how can I block them? (only the ones that do contain malware, I don't want to block compressed files all the way)
We're running 9.401 since last night.



This thread was automatically locked due to age.
Parents
  • 0

    Hi Bram,

    Are the received RAR files encrypted/password protected ? Password protected files cannot be scanned and prevented, to quarantine such files you need to select the "Quarantine unscannable and encrypted content" option located under Email Protection> SMTP > AntiVirus.

    Please let us know if you have any further questions.

    Thanks

    Sachin Gurung

    Sachin Gurung
    Team Lead | Sophos Technical Support
    Knowledge Base  |  @SophosSupport  |  Video tutorials
    Remember to like a post.  If a post (on a question thread) solves your question use the 'This helped me' link.

Reply
  • 0

    Hi Bram,

    Are the received RAR files encrypted/password protected ? Password protected files cannot be scanned and prevented, to quarantine such files you need to select the "Quarantine unscannable and encrypted content" option located under Email Protection> SMTP > AntiVirus.

    Please let us know if you have any further questions.

    Thanks

    Sachin Gurung

    Sachin Gurung
    Team Lead | Sophos Technical Support
    Knowledge Base  |  @SophosSupport  |  Video tutorials
    Remember to like a post.  If a post (on a question thread) solves your question use the 'This helped me' link.

Children
No Data
Unfiltered HTML