This article applies to:
- Trustwave MailMarshal (SEG)
- McAfee command line virus scanner
Question:
How do I attach a McAfee command line scanner log file to an e-mail template?
Procedure:
When a message is blocked because it contains a virus you can attach the McAfee Command Line scanner log file to the e-mail notification. The recipient of the notification can then see what virus the message was infected with.
Note: With McAfee for Marshal (or other integrated virus scanners), you can use the {VirusName} variable to provide the virus name in templates and reports. See Trustwave Knowledgebase article Q10624
The following instructions explain how to create the log file and attach it to an e-mail template.
- Create the log file. In the Policy Elements | Virus scanners section of the MailMarshal Configurator or Management Interface, edit the parameters of the scanner to include
/REPORT c:\temp\%ThreadNo%.log. Note, you must add this variable after all of the other variables, but before %CmdFileName%. For example:
/ALL /SUB /NOEXPIRE /ANALYZE /SECURE /NOBEEP /REPORT c:\temp\%ThreadNo%.log "%CmdFileName%"
- Add the log file to the MailMarshal e-mail template. Locate the e-mail template that is sent out when a virus is detected. Typically, you would only want to modify the administrator template. In the attachments section, tick 'other' and specify the path to the McAfee log file. For example:
c:\temp\%ThreadNo%.log)
Note: These instructions are for the McAfee Command Line scanner (scan.exe), and not NetShield (scan32.exe).
- This article was previously published as:
- NETIQKB29187
- Marshal KB232