IronPort C670 - Critical message

[pbabu6001]

Received critical as below. Is there any solution to resolve this issue.

The Critical message is:

MID 516702454 cannot be scanned by CASE. The message is either malformed or CASE is unable to process it at the moment.

Version: 9.7.1-066

Serial Number: 

Timestamp: 17 Dec 2017 02:59:58 -0600

[Libin Varghese · Accepted solution]

Hi,

This message is generally caused by a corrupted e-mail which has bad base64 encoding or corrupted mime parts that could not be scanned by CASE engine properly.

I see quite a few instances of these errors were reported over the weekend and we are working on a fix on our end.

TALOS has incorporated updates to the CASE URL Database in an attempt alleviate the issues we have been encountering with messages from *inthebox.com.

This was done around 2:30am Pacific Time.

Are you seeing any improvements? Have the number of alerts generated reduced?

Regards,

Libin Varghese

[MARK SCHWANTJE]

We've been having this issue as well since Thursday of last week. Will have to see if the update they made this morning resolves the problem.