This article applies to:

• Trustwave MailMarshal (SEG)
• McAfee command line virus scanner

Question:

Procedure:

Note: With McAfee for Marshal (or other integrated virus scanners), you can use the {VirusName} variable to provide the virus name in templates and reports. See Trustwave Knowledgebase article Q10624

The following instructions explain how to create the log file and attach it to an e-mail template.

1. Create the log file. In the Policy Elements | Virus scanners section of the MailMarshal Configurator or Management Interface, edit the parameters of the scanner to include /REPORT c:\temp\%ThreadNo%.log. Note, you must add this variable after all of the other variables, but before %CmdFileName%. For example:

   /ALL /SUB /NOEXPIRE /ANALYZE /SECURE /NOBEEP /REPORT c:\temp\%ThreadNo%.log "%CmdFileName%"

2. Add the log file to the MailMarshal e-mail template. Locate the e-mail template that is sent out when a virus is detected. Typically, you would only want to modify the administrator template. In the attachments section, tick 'other' and specify the path to the McAfee log file. For example:

   c:\temp\%ThreadNo%.log)

   Note: These instructions are for the McAfee Command Line scanner (scan.exe), and not NetShield (scan32.exe).

This article was previously published as:

NETIQKB29187

Marshal KB232