Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Connect » Kerio and Antivirus
  •  
KevinAtAPC

Messages: 30
Karma: 0
Send a private message to this user
We've got Kerio running on Windows server 2003 with the mailserver store directory excluded on the AV. The AV starts and detects the EICAR test virus fine.

However, twice in the past 2 weeks we've had particular users showing 'Antivirus check... failed: Cannot open input file' repeatedly until repairing their index. At the same time, the system logs show a worm detected by the realtime scanner and no virus detected by Kerio. Timeframe of the errors match within 1 minute on the start event in each log.

Basically it seems that the realtime scanner is still checking incoming mail before Kerio gets to run it's internal check, this despite the directory being excluded.

Has anyone run into something like this before with CA Etrust or another AV program? I was of the thought that the KMS process needed to be excluded as well but wanted to see if maybe there was something else I was missing.
Previous Topic: Integrated McAfee AntiVirus vs Symantec
Next Topic: Reference customers
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Fri Nov 24 06:28:34 CET 2017

Total time taken to generate the page: 0.00356 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.