ESA: Scanning error: (attachment) not readable

[Hallowelt]

Dear all,

from time to time we're observing scanning errors, mostly with ms office documents. Error message is

Info: MID 123456789 attachment 'XXXXXX.docx'
Info: MID 123456789 was marked unscannable due to extraction failures. Reason: Error in extraction process.
Warning: MID 123456789: scanning error (name='XXXXXX.docx', type=document/doc): not readable

Sadly I can't recreate this behaviour. 

Any Idea, why some attachments create this kind of error?

System Information: 

Name: C695
Product: Cisco C695 Email Security Appliance
Model: C695
Version: 14.2.1-020

Thanks,
Harald

[Ken Stieers]

If is always docx, grab the doc that errored and rename it to zip and then unzip it. If it has over 200 items in it, it will fail extraction.

It should show up in one of thw logs that this is the issue.