Why did a virus-infected message get through the filters?

Issue: Virus-infected messages are getting through.

Symptoms: Users are receiving virus-infected messages.

Resolution 1:

The recipients may not be registered with the message security service. If the recipients are registered with the message security service, virus filtering may not be enabled for those recipients, or may not be properly configured. You can find information about configuring Virus Blocking in the Message Security Administration Guide.

In addition to Virus Blocking, you can turn on Attachment Manager filters, and configure them to scan compressed files for system threats. You can find information about configuring Attachment Manager in the Message Security Administration Guide

.
Resolution 2:

The virus may not have been identified as a threat at the time it was delivered. Enable Early Detection Filtering to guard against zero-hour threats. You can find information about configuring Virus Blocking in the Message Security Administration Guide.


Resolution 3:

If you are using Lotus Domino, your server may be configured to deliver messages to the address that most closely matches the To address of the message. In this case, a virus-infected message is not filtered because the To address doesn't match an address in the message security service, but the message is delivered because the address is a near match to one of your users.

Consult your Lotus Domino documentation for information about how to disable this function on your server.

Editions: This article is intended for administrators using Google Message Filtering, Google Message Security, and Google Message Discovery. If you're using another edition, your service may include different features from those described in this article.

Keywords: virus, bypass filters