Need help analyzing WAF / reverse proxy log

Thanks!

It doesn't give me much more understanding, but this is what I see:

[avscan:error] [pid 24125:tid 120565068830464] [25125]nvirus daemon error found in request /Microsoft-Server-ActiveSync method="POST" statuscode="403" reason="Antivirus" extra="daemon error"

Thanks!

It doesn't give me much more understanding, but this is what I see:

[avscan:error] [pid 24125:tid 120565068830464] [25125]nvirus daemon error found in request /Microsoft-Server-ActiveSync method="POST" statuscode="403" reason="Antivirus" extra="daemon error"

Reason is the antivirus. Try to uncheck antivirus scanning. Regards

Thanks again :)

So I made an exception to path /Microsoft-Server-ActiveSync? comming for this source IP, skip antivirus. Still we get this:

Uhm...Is the antivirus correctly updated? Check the Patterns under Backup & Firmware.

Thanks

Yes I think it is:

Avira?

Yes also updated. I did try to switch to that at some point, but it made no difference. I will try to reboot the XG later today (not that I think that will do much, but better try :))

Ok. Please let us know.

The reboot actually may have helped :)

Not one reason="Antivirus" for any clients in 1½ hour. Even deleted the exception.

Thanks!

Well that lasted for aprox 72 hours.

Now this is starting again for same client + 2 others  :/

Actually what we see is that all these Daemon Errors are coming from Huawei devices. Is there something going on with Huawei native mail client perhaps?