Advisory: Malware may not be blocked by PureMessage for Exchange after update to Sophos Anti-Virus 7.6.20 or Endpoint Security and Control 9.0.5

Issue
The monthly update to Sophos Anti-Virus that occurred in June caused an issue with the anti-virus functionality in PureMessage for Microsoft Exchange, PureMessage for Notes/Domino and Sophos for Microsoft SharePoint. It also caused an issue with the content filtering/scanning features in PureMessage for Microsoft Exchange and Sophos for Microsoft SharePoint.

Issue with malware scanning
PureMessage for Microsoft Exchange may fail to identify malware in emails. As a result, endpoint anti-virus software may report that malware has been detected in emails, even though PureMessage has earlier scanned the messages without identifying a threat.

This issue may also affect emails in PureMessage for Lotus Domino and files scanned by Sophos for Microsoft SharePoint

As a result, the following systems may report less malware detections than expected:

* The Activity Monitor in PureMessage for Microsoft Exchange or PureMessage for Notes/Domino
* The Dashboard in Sophos for Microsoft Sharepoint

Issue with content filtering
PureMessage for Microsoft Exchange may fail to perform the action that you've selected in your content scanning policy for file type/phrase detections. As a result, your end users may be receiving emails and attachments with suspicious or restricted attachments, offensive language or certain types of spam.

This issue may also affect the content filtering feature in Sophos for Microsoft SharePoint.

Known to affect the following Sophos products
PureMessage for Microsoft Exchange
PureMessage for Lotus Domino
Sophos for Microsoft SharePoint

Please note that this issue does not affect desktop or server malware detection in Sophos Anti-Virus or Endpoint Security and Control.

What to do

To resolve this problem, do one of the following:

• PureMessage for Microsoft Exchange: Either restart the PureMessage Scanner service (in Windows Services) or reboot the server.
• PureMessage for Lotus Domino: Restart Domino or reboot the server.
• Sophos for Microsoft SharePoint: Restart the Sophos for Microsoft SharePoint Scanner service (in Windows Services) or reboot the server.