This article applies to:

• Trustwave MailMarshal (SEG)
• Trustwave ECM/MailMarshal Exchange

Symptoms:

• E-mails that do not contain viruses are being stopped by the virus scanning rule.
• A command line virus scanner, such as McAfee or CA Antivirus, is being used.

Causes:

The Single Thread option is not checked in the properties of the command line based virus scanner.

Generally for all virus scanners invoked from the command line,you should check the Single Thread check box. This will mean that only one instance of the virus scanner will be run at a time. MailMarshal scanning services use multiple threads, but the scanner command line executables are not capable of doing this.

Resolution:

Select the Single Thread option in the command line based virus scanner properties (in the MailMarshal (SEG) 10 Management Interface or SEG Configurator).

Notes:

DLL based scanners are capable of running multi-threaded and are automatically configured.

This article was previously published as:

NETIQKB29018

Marshal KB220