How to change the time-out value for a container file scan in Antigen

This article describes how to change the time-out value for a container file scan in Sybari Antigen.

Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall your operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.

If a container file scan takes longer than expected, Antigen stops the scan. Additionally, you may receive the following message: When you receive this message, you should examine the container file attachment that caused the scan to be stopped. A container file scan may take longer than expected if the container file is corrupted or is very large.

Antigen stops a container file scan that takes longer than expected to prevent bottlenecks. By default, Antigen 7.5 stops a container file scan if the scan takes longer than eleven minutes. Antigen 8.0 stops a container file scan if the scan longer takes 2 minutes (120,000 milliseconds).

To change the time-out value for a container file scan in Antigen, follow these steps:

1. Click Start, click Run, type regedit, and then click OK.
2. Locate and then click the following registry subkey:
   HKEY_LOCAL_MACHINE\software\sybari software\Antigen for Exchange
3. Double-click the MaxScanTime registry entry, and then type the time-out value that you want to use in the Value box.

Because Antigen can stop a scan, you do not have to restart the SMTP service every time that a container file scan takes longer than expected.

You can configure the action that Antigen takes if a container file scan takes longer than expected. To do this, follow these steps:

1. Start the Sybari Client (SybariClient.exe).
2. In Shuttle Navigator, click Settings, and then click General Options.
3. Under Scanning, click one of the following settings under Engine Error Action:
   • Ignore: When you click this setting, Antigen does not log any information about the scan.
   • Skip Detect Only: When you click this setting, Antigen logs information about the scan. However, Antigen does not do anything to the message or to the container file attachment.
   • Delete: When you click this setting, Antigen logs information about the scan. Additionally, Antigen deletes the container file attachment.