This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos AV engine broken?

We have 6 firewalls that I know of that will not allow web browsing since maybe 8 hours ago. The error reported is "The requested content could not be scanned for malware. It may be corrupted or encrypted."

/log/avd.log says:

Scanning file /tmp/0x1YOB0Ee (context=HTTP) ...
File /tmp/0x1YOB0Ee scan result : 0x0004021E
unable to sweep file [0x0004021e]

Switching scan engine to Avira gets around the problem.

Is anyone else seeing this?

Thanks

James



This thread was automatically locked due to age.
Parents
  • Yep, same here.

     

    Just finished band-aiding the issue for all our clients with XGs. Updated ~ 20 firewalls.

     

    Ended up killing HTTP malware filtering on HTTP. Seems like HTTPS / FTP filtering was fine. Specific symptom we saw was any HTTP traffic blocked with the "The requested content could not be scanned for malware. It may be corrupted or encrypted." error returned for users. As mentioned, HTTPS was fine.

     

    That's one way to encourage the adoption of HTTPS...

Reply
  • Yep, same here.

     

    Just finished band-aiding the issue for all our clients with XGs. Updated ~ 20 firewalls.

     

    Ended up killing HTTP malware filtering on HTTP. Seems like HTTPS / FTP filtering was fine. Specific symptom we saw was any HTTP traffic blocked with the "The requested content could not be scanned for malware. It may be corrupted or encrypted." error returned for users. As mentioned, HTTPS was fine.

     

    That's one way to encourage the adoption of HTTPS...

Children
No Data