Limitations and data retention Policy
In certain circumstances, there are ESET Cloud Office Security scanning limitations. A file is not scanned and will appear in Scan logs as Not scanned if the following occurs:
•The file size is over 200 MB
•The scan takes longer than 2 minutes and times out
•The archive file has a nesting level of 10 or more (usually, a file known as an archive bomb or zip bomb)
•The archive file is password-protected
•The file is damaged
Google Drive file types (scanned and not scanned):
•Files that are scanned by ESET Cloud Office Security are Blob files. According to the file types specification by Google, Blob files are the files containing text or binary content stored on Google Drive.
•ESET Cloud Office Security does not scan files such as Shortcuts and Google Workspace documents (files created by Google Workspace application: Google Docs, Sheets, Slides, etc.). There is no scan log for files that are not scanned.
Quarantine limits (when released from quarantine):
•15 MB for one email attachment
•150 MB for the whole email message, including attachments
Data retention policy:
Entity |
Retention period |
Comment |
|---|---|---|
Quarantined objects |
30 days |
Objects older than 30 days will be removed permanently. |
Detections |
90 days |
Records older than 90 days will be removed permanently. |
Scan logs records |
90 days |
Records older than 90 days will be removed permanently. |
Scan logs records with Clean scan result |
3 days |
If you have a policy that uses Log all objects, Clean scan results older than 3 days will be removed permanently. |
ESET Cloud Office Security database backup |
90 days |
Backups older than 90 days will be permanently deleted. |
Audit logs |
90 days |
Records older than 90 days will be removed permanently. |
Application Insights logs |
90 days |
Records older than 90 days will be removed permanently. |
Tenant removed from ESET Cloud Office Security console
When you remove a tenant from the ESET Cloud Office Security console, the retention period for tenant data is 30 days (quarantine, Scan logs, and Statistics are deleted after 30 days). If you add the tenant again within 30 days, all the data will be restored. Other objects (tenants, users, groups, sites, reports, policies) are permanently deleted after 90 days.
ESET Cloud Office Security deactivated in ESET Business Account or ESET MSP Administrator
If you deactivate ESET Cloud Office Security in ESET Business Account or ESET MSP Administrator, this process also removes tenants from ESET Cloud Office Security. ESET Cloud Office Security removal is permanent, and deleted data cannot be restored.
Antispam scan
ESET Cloud Office Security scans email messages stored in mailboxes for spam. For this reason, ESET Cloud Office Security cannot prevent a user from sending a spam message to an external email address. In a similarly unlikely scenario, if Office 365 user credentials get stolen, the credentials may be used by a spammer to send bulk spam messages (outbound email traffic).