This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos AV engine broken?

We have 6 firewalls that I know of that will not allow web browsing since maybe 8 hours ago. The error reported is "The requested content could not be scanned for malware. It may be corrupted or encrypted."

/log/avd.log says:

Scanning file /tmp/0x1YOB0Ee (context=HTTP) ...
File /tmp/0x1YOB0Ee scan result : 0x0004021E
unable to sweep file [0x0004021e]

Switching scan engine to Avira gets around the problem.

Is anyone else seeing this?

Thanks

James



This thread was automatically locked due to age.
Parents
  • Same issue here. All AV scanning depended features were not working e.g. scaning http/https, email scanning, sandstorm, etc.

     

    1. Restarted AV service. service antivirus:restart -ds nosync (Issue not resolved)
    2. Reboot the appliance. (Issue not resolved)
    3. Change the Malware Protection engine from Sophos to Avira. (Issue resolved.)

    Sophos AV engine is broken and I've opened a support case. Lets see when the Sophos AV engine restores to normal operation.

     

    A lot of business critical traffic were blocked. Bad weekend :(

Reply
  • Same issue here. All AV scanning depended features were not working e.g. scaning http/https, email scanning, sandstorm, etc.

     

    1. Restarted AV service. service antivirus:restart -ds nosync (Issue not resolved)
    2. Reboot the appliance. (Issue not resolved)
    3. Change the Malware Protection engine from Sophos to Avira. (Issue resolved.)

    Sophos AV engine is broken and I've opened a support case. Lets see when the Sophos AV engine restores to normal operation.

     

    A lot of business critical traffic were blocked. Bad weekend :(

Children
No Data