Symantec Messaging Gateway may not detect all parts of a ZIP file split between multiple messages. The first and last parts will be correctly identified as a zip archive but messages containing the intermediate file parts are not identified as containing an archive file. Instead these messages are assigned the unscannable verdict.
This issue is specific to zip files constructed and split with PKZip. While the first and last file parts are detectable as zip archive parts, the intermediate file parts do not contain suffficient identifying information to correctly file type them. Since the file type for these archive parts cannot be reliably determined, they are considered unscannable and the message is assigned the unscannable verdict.
This is a known issue and is being reviewed by Symantec.
Imported Document ID: TECH176884
Subscribing will provide email updates when this Article is updated. Login is required.