OK i try to setup this on my testsystem
That issue is on a production system from a client.
So i am writing back tomorow

If you don't want to set up non-transparent mode, you have two other alternatives with ClearOS.

1. Gateway Management
2. Application Blocker.

B

Hi Nick, hm yes thats totaly correct :-) . OK and what is the site block issue ? Can i not block a https site ?

Hi Steffen,
The Eicar file is not encrypted when you download the file by https. It is the whole https transaction which is encrypted so I would not expect the scanner on the server to be able to break into the https stream to scan the file. That is the advantage of a Desktop AV solution as it comes after the https transaction.

re the content filter, please see this doc.

in the virysfilter have i enabled block enkryptet files, when you go to eicar.org and you download the testfile can you see the issue

in the contentfilter: when i ban a site, so i think its banned http and https. but only http is working, thats not correct.

Hi Steffen,
I think the problem is that https traffic is encrypted between the browser and the endpoint which means the server can't see its content to inspect it. For the content filter the way round it is to use the proxy in non-transparent mode. I don't know how to get round it with the virus filter.