If ClamAV is used in an email or file gateway, place it in a staging path and send a safe known-detection sample plus ordinary attachments. Confirm suspicious content is blocked or quarantined before delivery, while legitimate files pass. Simulate scanner downtime and document whether the gateway fails open or closed.
Signature updates, logging, and operator review are essential. A gateway's value depends on the complete response workflow, not just a scan command returning a result.
Akousa