Question regarding Scanning of encrypted files inside Encrypted folders

[Uthra]

Team, we are planning to implement the Encryption solution to encrypt the files and folders and provided user access ( read & write)

The question is that

If a user tried to open or make some changes in the files inside the encrypted, will McAfee OAS scan files inside Encrypted Folder?

[mpatel127]

Hi @Uthra,

Thank you for contacting McAfee Community,

According to McAfee KB >>https://kc.mcafee.com/corporate/index?page=content&id=KB86704

Can Endpoint Security detect a virus that is encrypted by an encrypted file system (EFS)?
Yes, if the user who owns the EFS folder accesses the file when the scan runs. Endpoint Security can use their access token. Otherwise, Endpoint Security can't scan inside encrypted files or packages, and neither can any antivirus scanner. The Endpoint Security logs show the following when an EFS is encountered: Not scanned (The file is encrypted). Detection takes place only when the file has been decrypted or opened.

Let us know if you have any questions regarding information provided above and we will clarify that for you.

Was my reply helpful?
If you find my post useful, Please give it a Kudos! Also, Please don't forget to select "Accept as a solution" if my reply resolves your query!

Thanks and regards,
MayurKumar P