SRX

Hello everyone,

i have a little issue with my SRX.

So far it detects the eicar testfile when downloading it from the internal webserver (and a neat message appears in the browser).

But if I upload the same file to my internal webserver via an HTML form (unencrypted HTTP connection!), then the file gets through without detection.

Which config option did i miss?

Problem solved, the eicar was just not submitted in the form at all ...

I'll share the simple html which was the actual probleme here:

<form action="" enctype="multipart/form-data" method="post">
<input type="file" multiple="multiple"/>
<input type="submit"/>
</form>

-> this did not transfer the selected files at all, and thus of course no anti-virus could ever detect the virus in the not transferred files.

after adding the name="uploads" attribute in the file-input, it transferred the files, and antivir correctly detected the eicar test:

<input type="file" multiple="multiple" name="uploads"/>

thx,

Jan