Why Is Deep CDR Returning "Action: none" and No Sanitized File?

Issue

When submitting files to Deep CDR, no sanitized file is generated, and the CDR result shows:

Action: none

This may occur even when the file contains elements commonly associated with risk, such as macros or embedded links.

Reason

Starting in MetaDefender Core v5.13.1, a feature called Analysis Mode was introduced.

When Analysis Mode is enabled:

• Deep CDR does not perform sanitization or generate a reconstructed output file.
• Instead, it scans and reports internal objects (e.g., macros, scripts, URLs) without modifying the file.
• This mode is designed for performance optimization and in-depth inspection, not content sanitization.
• As a result, the CDR action is recorded as none, and no sanitized file is returned.

For more information, please refer to this article: Analysis mode - MetaDefender Core

Resolution

To allow Deep CDR to sanitize and return a cleaned file:

To ensure Deep CDR generates a sanitized file:

1. Go to Core > Workflow Management.
2. Select the relevant workflow name.
3. Navigate to the Deep CDR section.
4. Go to the Advanced tab.
5. Uncheck the option "Analysis Mode".

6. Save the changes and resubmit the file.

When Analysis Mode is disabled, Deep CDR will sanitize the file and generate a sanitized output according to the configured policies.