ESET Endpoint AntiVirus v5 does not scan Thunderbird v13 emails

[HerbalTowers]

Hello
I recently upgraded to ESET Endpoint AntiVirus (5.0.2122.1) and since the upgrade my emails do not appear get scanned. I use Thunderbird (13.0.1) as my email client which accesses my email account via IMAP (port 143).

In the ESET GUI, when I go to Tools > Protection Statistics > Email Client Protection, all the statistics indicate that no emails are being scanned.

I have checked the configuration in ESET and all the email client protection stuff looks like it is setup correctly.

Has anyone else has a similar issue?

[dwomack]

Please see the following Wilders threads and posts concerning all versions of Thunderbird after version 5:

http://www.wilderssecurity.com/showp...8&postcount=10

http://www.wilderssecurity.com/showthread.php?t=317178

[HerbalTowers]

@dwomack, thanks for the reply but the posts you link to say that POP3/IMAP is scanned regardless of the client used. My issue is that in the ESET GUI, when I go to Tools > Protection Statistics > Email Client Protection, all the statistics indicate that no emails are being scanned!

[siljaline]

The GUI | UI will not always show a scanned email count, this has always been dubious at best. I would defer you to what dwomack posted

One of the changes made in ESET NOD32 Antivirus v5.0.91 (and newer, of course) versions was to implement scanning of POP3, POP3S, IMAP and IMAPS traffic for threats outside of the email client. This means that if you are running Mozilla Thunderbird 6.0 or later that malicious code sent to your email account will still be detected by ESET NOD32 Antivirus.

Or Which email clients are compatible with Windows ESET security products?

[Marcos]

Try sending an email with the eicar test file to your email address and then receive it on the client running EEA 5.0.2122 to find out if it's detected or not.

[HerbalTowers]

@Marcos, unfortunately this does not help because the IMAP mail server also appears to run AV software and it strips out the EICAR test file before it gets to Thunderbird!

Is siljaline's post correct that the statistics shown on Tools > Protection Statistics > Email Client Protection are not reliable?

[siljaline]

Screenshot to illustrate my view of Thunderbird scanned email statistics.

[P_R_]

Hello siljaline,

the statics are correct, because the messages are not scanned as e-mails by plugin but they are scanned on the level of the protocol - POP3/IMAP so the malware is detected and stopped even before reaching your6 mailbox.

[HerbalTowers]

@siljaline, thanks for the screenshot, you have similar statistics to me

I think my issue has been that I misinterpreted what the email statistics represented. P_R_ explains it nicely in his post.

Many thanks for yours and everyone's help...

[siljaline]

Happy to help HerbalTowers. I was aware EAV protects at the POP|IMAP level although these are not shown in the UI.