Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
rlw
Community Member

Ironport S170 indicates PDF downloads as malware.

As of 10/16/13, staff have had random issues with downloading PDFs. The Ironport S170 is indicating that they contain malware and blocking the download. Generally, the message is "malware in the category of unknown has been found on this site" a few indicate "malware specific." This seems to be quite random and is affecting so many users and occurs on many different websites that it would seem to be related to some type of definition update / change on the Ironports versus an issue with the websites. Has anyone else seen this problem?                 

3 REPLIES
Cisco Employee

Ironport S170 indicates PDF downloads as malware.

Hi Rebekka,

Could you please share the access_logs?

Regards,

Luis Silva

"If you need PDI (Planning, Design, Implement) assistance feel free to reach us"

http://www.cisco.com/web/partners/tools/pdihd.html

Luis Silva "If you need PDI (Planning, Design, Implement) assistance feel free to reach us" http://www.cisco.com/web/partners/tools/pdihd.html
rlw
Community Member

Ironport S170 indicates PDF downloads as malware.

This appears to have resolved itself.

Cisco Employee

Ironport S170 indicates PDF downloads as malware.

Web Reputation scoring is dynamic and a particular URL's score can potentially change several times per day.  I suspect something triggered the score to be low enough to be blocked, but corrected itself.

416
Views
0
Helpful
3
Replies
CreatePlease to create content