Antivirus-Scan-engine-shows-message-The-scan-engine-is-not-ready
Syslog events like below are observed:
<12>1 2023-04-19T00:24:41.743Z srx-test RT_UTM - AV_FILE_NOT_SCANNED_PASSED_MT [[email protected] source-zone="Untrust" destination-zone="ExternalVpn" source-address="192.168.31.133" source-port="18088" destination-address="172.31.252.75" destination-port="80" profile-name="test" filename="ca-jnpr.crl" action="PASSED" reason="the scan engine is not ready" error-code="10" username="N/A" roles="N/A"]
Antivirus trace options show below logs:
Oct 10 09:19:20 09:19:20.612125:CID-0:THREAD_ID-03:LSYS_ID-00:RT:check url whitelist: (-1) url:ca-jnpr.crl
Oct 10 09:19:20 09:19:20.612127:CID-0:THREAD_ID-03:LSYS_ID-00:RT:not found
Oct 10 09:19:20 09:19:20.612129:CID-0:THREAD_ID-03:LSYS_ID-00:RT:AV: av_is_scan_required 860 app_obj 0x9035dab0 av_info 0x7fbd3326b5b0 filename ca-jnpr
Oct 10 09:19:20 09:19:20.612131:CID-0:THREAD_ID-03:LSYS_ID-00:RT:Searching in mimelist bbe11b48 (len:4)
Oct 10 09:19:20 09:19:20.612132:CID-0:THREAD_ID-03:LSYS_ID-00:RT:mime_value: text/css
Oct 10 09:19:20 09:19:20.612133:CID-0:THREAD_ID-03:LSYS_ID-00:RT:mime_value: audio/
Oct 10 09:19:20 09:19:20.612134:CID-0:THREAD_ID-03:LSYS_ID-00:RT:mime_value: video/
Oct 10 09:19:20 09:19:20.612135:CID-0:THREAD_ID-03:LSYS_ID-00:RT:mime_value: image/
Oct 10 09:19:20 09:19:20.612135:CID-0:THREAD_ID-03:LSYS_ID-00:RT:Not found
Oct 10 09:19:20 09:19:20.612136:CID-0:THREAD_ID-03:LSYS_ID-00:RT:AV: current content size:0, config maximum content size:20000K
Oct 10 09:19:20 09:19:20.612137:CID-0:THREAD_ID-03:LSYS_ID-00:RT:AV: avira_av_is_scan_required 47 Engine not ready
These messages are expected if the file being scanned has content size=0 (empty files)
You will be able to verify the size from the AV trace options, like below:
You can also verify from the trace options that the files are processed by the AV when the content size is not equal to 0.