"Scan ERR: file corrupted" for PDF file uploads to Onedrive personal web
322
Created On 05/16/25 23:38 PM - Last Modified 11/11/25 21:23 PM
Symptom
The following symptoms were observed
- SCM->Log Viewer Firewall/File page report “Scan ERR: file corrupted” for file upload sessions.
- No incidents get created and reported in DLP portal for these sessions
Environment
Enterprise DLP with Prisma Access or NGFW
Cause
After a few uploads and blocking action by DLP via firewall, the application will use CSFP mechanism to break the file into multiple chunks. Then each chunk will be sent by the firewall to DLP in multiple sessions. Since DLP doesn’t get the full file, the verdict is reported as "Scan ERR: file corrupted” and SCM->Log Viewer reports the same.
Resolution
On 10.2.x CSFP is not supported. CSFP is supported on PANOS versions 11.1.x and 11.2.x.