Your Symantec Protection Engine (hereafter "SPE") 7.5 is working with RPC or with ICAP FILEMOD.
You set the encrypted container policy to "Block" or "Log Only", and when you either save a password-protected PDF file on a Filer share or request to scan such a PDF with ICAP FILEMOD, you notice that the file is replaced with 0 byte file and not being blocked from access.
There is a hotfix available for this issue.
Download theattached hotfix to this document and follow the instructions in the Read Me file.
This issue is applicable only to SPE 126.96.36.199 build with RPC or with ICAP FILEMOD.
SPE 7.0.x is not affected.
Password protected PDF files are getting replaced with 0 byte files irrespective of encrypted container policy setting
Encrypted PDF files are being set to zero bytes.
SPE75_HF_01.zip (Linux, Solaris, and Windows) SHA1 hash: C62BF678CAD40E34CF2DC97C9BC6E2FEE618D9D5