"virus=unknown" log message with antivirus passing oversized files

[#1]

Article

Description	"virus=unknown" log message with anti-virus passing an oversized file.
Components	All FortiGate models FortiOS v2.8
Steps or Commands	If a Protection Profile is configured with antivirus scanning, and the Oversize File/Email setting is set to Pass, the following log messages may appear on the web-based manager dashboard and within the antivirus logs: 2005-08-26 10:11:04 log_id=0213066000 type=virus subtype=oversize pri=notice vd=root src=172.16.200.11 dst=172.16.200.44 src_int=external dst_int=internal service=ftp status=passthrough from="n/a" to="n/a" file=testfile.ppt virus="unknown" msg="The file testfile.ppt exceeds size limit." The message may also be repeated multiple times during the single download attempt of the oversized file. The "virus=unknown" log entry may also occur on other antivirus events such as File Blocking, although there may be no actual virus detected. This is a known issue.