Corrupt attachment blocked

[Greg.Howley]

Recently we received an email with a .docx attachment that was blocked by Sophos AV.

The reason was:

Message 74694036: scanning error (name=xxxxxxxxxxxxxxxxxxxxxx .doc): file is corrupt

Message 74694036 quarantined to Virus. Anti-Virus verdict UNSCANNABLE.

Is this a default action (unscannable = virus)?

Thanks

[Ken Stieers · Accepted solution]

I think the default is to deliver as is, but id have to deplya a fresh vm to test.  Take a look at your incoming mail policy(ies), click on the Blue text under Anti-virus.  There's a specific setting for it...presumably someone set it or at least saw it...

[Greg.Howley]

D'oh!

Of course it's set in the default policy!