Corrupt or encrypted items quarantined by SAVDI when option set to disabled

When using SAVDI in combination with EMC Isilon, files resulting in corrupt, error or encrypted results are quarantined even when the option to block them is not enabled.

This is caused by SAVDI’s use of the ICAP 204 and 200 ICAP return codes.

This article describes the steps to resolve this issue.

The following sections are covered:

Applies to the following Sophos products and versions

SAV Dynamic Interface 2.5.0

  1. Upgrade to SAVDI version 2.5.0
  2. Add the following line to the savdid.conf file in the scanprotocol section:

    useclean204: YES

    Note: This should result in a scanprotocol section similar to the below:

    scanprotocol {

    type: ICAP

    useclean204: YES


    Note: To make use of this feature please set either block-error, block-encrypted or block-corrupt to NO

    It will only affect the block setting(s) that is(/are) set to NO.

  3. Restart the SAVDI service

If you’ve spotted an error or would like to provide feedback on this article, please use the section below to rate and comment on the article.

This is invaluable to us to ensure that we continually strive to give our customers the best information possible.


  • No Related Posts

Leave a Reply