cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
795
Views
0
Helpful
3
Replies

Ironport S170 indicates PDF downloads as malware.

rlw
Level 1
Level 1

As of 10/16/13, staff have had random issues with downloading PDFs. The Ironport S170 is indicating that they contain malware and blocking the download. Generally, the message is "malware in the category of unknown has been found on this site" a few indicate "malware specific." This seems to be quite random and is affecting so many users and occurs on many different websites that it would seem to be related to some type of definition update / change on the Ironports versus an issue with the websites. Has anyone else seen this problem?                 

3 Replies 3

Luis Silva Benavides
Cisco Employee
Cisco Employee

Hi Rebekka,

Could you please share the access_logs?

Regards,

Luis Silva

"If you need PDI (Planning, Design, Implement) assistance feel free to reach us"

http://www.cisco.com/web/partners/tools/pdihd.html

Luis Silva

rlw
Level 1
Level 1

This appears to have resolved itself.

Web Reputation scoring is dynamic and a particular URL's score can potentially change several times per day.  I suspect something triggered the score to be low enough to be blocked, but corrected itself.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: