I found that the sweep command would show a file as a virus yet some of these files were still getting through our mail system past Sophie. There wasn’t much on the web describing this problem so I am posting here for future reference. In the sophie.savi configuration file change GrpSuper: 0 to GrpSuper: 1
