Sending an encrypted 7zip attachment through Symantec Mail Security for Microsoft Exchange (SMSMSE) results in an Unscannable verdict when an Encrypted verdict would be expected.
The following is observed in the Application Event Log:
Event Type: Warning
Event Source: Symantec Mail Security for Microsoft Exchange
Event ID: 218
Rule: Unscannable File Rule
The attachment "<attachment name>" was Quarantined for the following reason(s):
Scan Engine Error. CSAPI DEC result: 0x2C. The DEC scanner resultID attribute is not set or is an invalid ID.
Symantec Mail Security for Microsoft Exchange was incorrectly handling the verdict information passed from the Antivirus Engine (CSAPI) which resulted in an Unscannable verdict.
This issue has been corrected as of SMSMSE 7.0.2. Please upgrade to 7.0.2 or later to resolve incorrect verdicts for encrypted 7zip files.
Imported Document ID: TECH211082
Subscribing will provide email updates when this Article is updated. Login is required.