Support articles

Find clear, step-by-step solutions to common WithSecure issues across installation, configuration, updates, and product performance.

Linux Security 64: What is the maximum level of nested archives to be scanned?

Issue:

Linux Security 64: What is the maximum level of nested archives to be scanned? 

Resolution:

By default, the maximum level of nested archives to be scanned is set to "5" for both real-time scanning and manual scanning. The value is configurable from Policy Manager console or lsctl command tool. 

How to change the max nesting level for archive scanning via Policy Manager Console:

Real-time scanning:

  1. Log in to the Policy Manager Console
  2. Select a host or policy domain from the domain tree
  3. Go to the Settings tab 
  4. Navigate to Linux > Real-time scanning
  5. Scroll down to the Handling archive in real-time scanning section
  6. Change the value in the field called "Scan archive up to nesting level:" 
  7. Distribute the policy (Ctrl + D)

Manual scanning:

  1. Log in to the Policy Manager Console
  2. Select a host or policy domain from the domain tree
  3. Go to the Settings tab 
  4. Navigate to Linux > Manual scanning
  5. Scroll down to the Handling archive in manual scanning section
  6. Change the value in the field called "Scan archive up to nesting level:" 
  7. Distribute the policy (Ctrl + D)

lsctl instructions can be found in the Linux Security 64 user guide: Configuring settings with the lsctl utility | Linux Security 64 | Latest | WithSecure User Guides