Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 7 replies
  • Subscribers 1 subscriber
  • Views 1604 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

V9: No more archive scanning in Web Protection?

UliSa
Hi,

to verify that everything is running right I try to download test virus files (e.g. eicar.org) regularly.

The last time I did it I was very surprised that only eicar.com was blocked by my UTM (V9.102-8), all other file types went through without any suggestions by the UTM!!! I tried different proxy modes (mainly standard is used, one VLAN uses Transparent) but everytime the files were not blocked. 

2013:06:30-13:00:24 vpn httpproxy[29749]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.91.1.30" dstip="188.40.238.250" user="" statuscode="200" cached="0" profile="REF_HttProLan (LAN)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="68" request="0xccf8b28" url="www.eicar.org/.../octet-stream" application="http"


I tried both Scan Engines, single and dual scan.

With an older ASG 8.310 this problem does not exist, everything's scanned and blocked.

Personal problem or bug?

Regards,
Uli


This thread was automatically locked due to age.
Parents
  • 0
    Just to get this complete here:

    After again having problems with updating (9.103 and 9.104) and a insanely fast filling /storage partition, I did a fresh install (9.103 ISO) and restored the latest configuration backup. And bang, everything's ok, all virus test files with archives are detected!

    Thanks again for all advices!
Reply
  • 0
    Just to get this complete here:

    After again having problems with updating (9.103 and 9.104) and a insanely fast filling /storage partition, I did a fresh install (9.103 ISO) and restored the latest configuration backup. And bang, everything's ok, all virus test files with archives are detected!

    Thanks again for all advices!
Children
No Data