Greetings all,

I recently had a problem with Scanmail 6.1 that required using the eicar
file to troubleshoot (SM was not quarantining when I configured it to do
so).  To my surprise, no matter what I set the action to SM would pass the
eicar file (it sees it and alerts on it...but "passes" it).  So needless
to say I got alarmed because who knows what else it was "passing".  So I
opened a case.  After a week and 12 engineers later I found this:

http://kb.trendmicro.com/solutions/solutionDetail.asp?solutionId=16659&submit2=Search


Which was also confirmed by this email from Trend�s support:
"We have asked our Pattern PM regarding this issue and he told us that
this was because of requests from marketing to change the active action of
EICAR Test file to pass.  This can be resolved by changing the Active
Action on SMEX.  We are in negotiations with SMEX team on their preferred
Active Action.  Please wait for further announcements."

I wanted to share this with the list for those of us who are using SM (I
suspect a number of us are since it tends to be the most recommended). 
For my current problem this leaves me with no way to trouble shoot it
(sending a live virus through SM to see if it quarantines stuff is what I
am left with�which isn�t gonna happen).

I personally have big problems with this change (and the fact it was
forced on all Trend customers without making it some sort of option) and I
have told Trend my feelings about it�.but I am but a single voice. 
Anyhow...now you know if you did not before.

Enjoy,

Steve



_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

Reply via email to