Guest

Preview Tool

Cisco Bug: CSCvv86881 - [ENH]- Partially

Last Modified

Sep 26, 2020

Products (1)

  • Cisco Email Security Appliance

Known Affected Releases

13.5.1-277

Description (partial)

Symptom:
Partially encrypted PDFs are quarantined since certain portions
of the PDF are encrypted and Sophos AV sets the verdict "Encrypted"
Macafee scans those and sets the verdict "Clean". The policy is set to
quarantine encrypted files but this is meant for password-protected
files such as .zip. Due to this issue, many of the pdf files need to be released manually from the quarantine.

It will be a great help if the engines tag the samples as appropriate to avoid manually releasing them for the customer blocking the encrypted files.

Conditions:
Symptom: Partially encrypted PDFs are quarantined since certain portions
of the PDF are encrypted and Sophos AV sets the verdict "Encrypted"
Macafee scans those and sets the verdict "Clean". The policy is set to
quarantine encrypted files but this is meant for password-protected
files such as .zip. Due to this issue, many of the pdf files need to be released manually from the quarantine.

It will be a great help if the engines tag the samples as appropriate to avoid manually releasing them for the customer blocking the encrypted files.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.