Sophos

Online support

Product maintenance

Contact support

Support services

SAV Interface: MAILsweeper missing detectable viruses

Sophos has received reports from SAV Interface customers that MAILsweeper occasionally lets through viruses even though Sophos Anti-Virus is able to detect them. This can happen with viruses such as W32/Sircam-A and W32/Magistr-A.

These viruses generate their own email subject lines, some of which cannot be handled properly by MAILsweeper. As a result, it appears that MAILsweeper fails to categorise these mails as containing attachments, so they are allowed through unchecked.

Please note: This is not a fault in Sophos Anti-Virus or SAV Interface. The problem will also occur when MAILsweeper is used with anti-virus products from other vendors. The problem is in the MAILsweeper product.

What to do

The vendors of MAILsweeper have published a technote on their website which reportedly fixes the problem. If you experience any difficulties, please contact MAILsweeper technical support. Clearswift has informed us that the problems described above do not apply for the current MAILsweeper version 4.2_6.

Sophos also recommends that you promote safe computing in your organisation. Well-informed users are less likely to be hit by a virus, whatever anti-virus solution they use. This means that viruses which do get through the gateway are less likely to cause problems

If you need more information or guidance, then please contact technical support.