Certain files are called unscannable when content filtering is enabled to scan Attachment Content or Any Part with Symantec Mail Security for Microsoft Exchange (SMSMSE). An application crash of the process SAVFMSESp.exe is logged to the application event log, along with an Event ID 218 calling the item being processed at the time Unscannable.
If a Debug log is obtained while reproducing the problem (See 'How to Obtain Debug Logs for Symantec Mail Security for Microsoft Exchange (SMSMSE)' for detailed instructions), the following is observed at the time of the crash:
[11052] SAVFMSECtrl(2B2C)[17B4] 2016-01-26 20:26:04 0834ms:
[11052] ..\..\..\src\Server\SAVFMSELINK\ctrlintf.cpp(1155) :
[11052] Debug Trace: HRESULT=0x6d
[11052]
[11052] SAVFMSECtrl(2B2C)[17B4] 2016-01-26 20:26:04 0834ms:
[11052] ..\..\..\src\Server\SAVFMSECTRL\Manager.cpp(568) :
[11052] Debug Trace: HRESULT=0xC0090086
[11052]
[11052] SAVFMSECtrl(2B2C)[17B4] 2016-01-26 20:26:04 0834ms:
[11052] ..\..\..\src\Server\SAVFMSELINK\ctrlintf.cpp(919) :
[11052] Inside NaveLinkInterface SendCommand
[11052]
[11052] SAVFMSECtrl(2B2C)[17B4] 2016-01-26 20:26:04 0834ms:
[11052] ..\..\..\src\Server\SAVFMSELINK\ctrlintf.cpp(943) :
[11052] Debug Trace: HRESULT=0xe8
A problem with the Verity content filtering engine causes crashes when processing certain attachment content.
A hotfix has been created to address this issue.
To apply the patch:
Workaround
Disable any content filtering rule(s) set to scan "Any Part" or "Attachment Content" or change the match type to a choice other than "Any Part" or "Attachment Content". Disable any File Type filering rules.