Hello everybody,
After the recent global attack of the wannacry virus, my users and my hierachy are worried to found many infected messages in their mailboxes.
And actually, I think that about 90% of messages with an infected attachment go through the virus detection in Zimbra.
I know that Clamav is far from being the most efficient antivirus solution, but the detection score is really very low in the case of Clamav embeded in Zimbra.
Furthermore, if often test the attachments received in my mailboxe against websites like https://virusscan.jotti.org or https://www.virustotal.com and most of the time, these files are reported as malware by the Clamav engine used by those websites.
So why these malwares aren't detected by the embeded Clamav in Zimbra ?
Perhaps I have missed an important point in my config or something like that ?
If anyone has an explaination to provide to me, it would be great.