Threat defense scanning for some message attachments fails with an error indicating that no file has been uploaded to CAS for scanning. This results in an Unscannable verdict. Depending on policy this may results in the message being quarntined or deleted.
Reviewing Message Audit Logs (MAL) shows that the attachment file name contains extended characters. For example:
Attachment Name 档案的验收与移交\r\n\r\n\r\n\r\n\r\n\r\n.xls
casoop: error parsing http post response:
The extended characters in the filename creates a mismatch between the filename that CAS is scanning and the filename SMG uses when querying CAS for scan status.
This is a known issue with SMG 10.6.4 and earlier but will be addressed with the SMG 10.6.5 release.
Subscribing will provide email updates when this Article is updated. Login is required.