VSES ICAP Question

[NimrodMiz]

Hey,

I have a question regarding VSES which configured to scan with ICAP.
In the OAS policy it is configured to scan in archive, and in the storage policy is it configured to scan only on write.

the Q is when i am copying archive with EICAR in it into the storage server there is no alert,
only when i am opening archive and see its content the OAS detects the EICAR.

i would like to know more deeply about the scanning method while copying ZIP file.

Thanks,

Nimrod.

[ShayAppelboim]

Hello,

The scenario you write it sound like the VSES does not scan the archive, when you open the archive the eicar in open on your local system and the OAS of the VSE/ENS is detecting the file.

Look at the log file of the VSES check if the file scan by VSES or not.

[ShayAppelboim]

check this link:

https://kc.mcafee.com/corporate/index?page=content&id=KB81749

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select "Accept as Solution" in my reply, or give kudos as appropriate, so together we can help other members?