Bypassing not detectable data with antiviral analysing

[User75954620]

Hi,

I just wanted to know that if i'm bypassing the analysis of Mediatype (due for my example of a not detectable Mediatype), is the antimalware / antiviral scan still going through the file i'm uploading ?

Thanks for your help

[fw_mon]

Hello @User75954620 

yes, the AV Scan still performed even if Media Type Filter is bypassed. 

Be aware that most traffic nowadays is send via HTTPS, so you need HTTPS Scanning to scan it.

[User75954620]

Hi,

Thanks for your reply.

ok but even if the WebGateway can't detect the filetype, it still can analyse it without any problem right ?

[fw_mon · Accepted solution]

yes, by default AV scanning isn't depending on the media type filter and will scan uploads and downloads. You can easily test it with an EICAR test file.