Maybe… if it is downloaded by an HTTP connection, WebShield could be monitoring it…
Besides what Alan posted, which is fully right of course, the Standard Shield at High sensitivity will scan the file when it is being saved to disk.