TechNet
Products
IT Resources
Downloads
Training
Support
Products
Windows
Windows Server
System Center
Internet Explorer
Office
Office 365
Exchange Server
SQL Server
SharePoint Products
Lync
See all products »
Resources
Curah! curation service
Evaluation Center
Learning Resources
Microsoft Tech Companion App
Microsoft Technical Communities
Microsoft Virtual Academy
Script Center
Server and Tools Blogs
TechNet Blogs
TechNet Flash Newsletter
TechNet Gallery
TechNet Library
TechNet Magazine
TechNet Subscriptions
TechNet Video
TechNet Wiki
Windows Sysinternals
Virtual Labs
Solutions
Networking
Cloud and Datacenter
Security
Virtualization
Updates
Service Packs
Security Bulletins
Microsoft Update
Trials
Windows Server 2012 R2
System Center 2012 R2
Microsoft SQL Server 2012 SP1
Windows 8.1 Enterprise
See all trials »
Related Sites
Microsoft Download Center
TechNet Evaluation Center
Drivers
Windows Sysinternals
TechNet Gallery
Training
Training Catalog
Class Locator
Microsoft Virtual Academy
Free Windows Server 2012 courses
Free Windows 8 courses
SQL Server training
e-Learning overview
Certifications
Certification overview
MCSA: Windows 8
Windows Server Certification (MCSE)
Private Cloud Certification (MCSE)
SQL Server Certification (MCSE)
Other resources
TechNet Events
Second shot for certification
Born To Learn blog
Find technical communities in your area
Support options
For small and midsize businesses
For enterprises
For developers
For IT professionals
From partners
For technical support
Support offerings
For home users
More support
Microsoft Premier Online
Microsoft Fix It Center
TechNet Forums
MSDN Forums
Security Bulletins & Advisories
International support solutions
Log a support ticket
Not an IT pro?
Microsoft Customer Support
Microsoft Community Forums
Sign in
Van's FSS/Antigen/EOP Blog
My Blog for all Antigen/Forefront Server and Forefront Online Protection for Exchange issues
Options
Email Blog Author
RSS for posts
Atom
RSS for comments
OK
Search Blogs
Tags
Antigen
Antigen Upgrade
Anti-Spam
Cluster
Engine issues
engine updates
Forefront
Forefront for Exchange
Forefront Server Security
Install
Performance
Upgrade
x64
Archive
Archives
August 2012
(2)
April 2012
(2)
December 2011
(1)
September 2011
(1)
June 2011
(2)
May 2011
(2)
April 2011
(1)
March 2011
(1)
February 2011
(1)
December 2010
(1)
September 2010
(2)
June 2010
(1)
May 2010
(1)
April 2010
(2)
February 2010
(1)
December 2009
(1)
November 2009
(2)
October 2009
(1)
September 2009
(4)
August 2009
(4)
July 2009
(3)
June 2009
(4)
May 2009
(2)
Van's FSS/Antigen/EOP Blog
TechNet Blogs
»
Van's FSS/Antigen/EOP Blog
Sort by:
Most Recent
|
Most Views
|
Most Comments
Excerpt View
|
Full Post View
Cloudmark and Antigen 9.x issues on the weekend of 06/25/11
Posted
over 3 years ago
by
Van Makriniotis-CSS Security
13
Comments
*Updated to include default folder path for Cloudmark* If you are having issues with timeouts after updating your Cloudmark engine between Friday and Saturday afternoon this post should help you out. On Friday night we released a Cloudmark engine...
Microsoft Scan engine failing to update
Posted
over 2 years ago
by
Van Makriniotis-CSS Security
10
Comments
Just as a heads up. We are seeing cases where the Microsoft scan engine is failing to update in Forefront Protection for Exchange with the following errors. 6019 GetEngineFiles An error occurred while testing the scan engine. 6012 GetEngineFiles An error...
FPE issue where all spam is missed
Posted
over 3 years ago
by
Van Makriniotis-CSS Security
1
Comment
The most common reason we do not filter spam in FPE is that we honor the ms-exch-bypass-anti-spam permission on connectors. The most common scenario is that the bypass is enabled for anonymous connections. This is simple to fix with some PowerShell commands...
Forefront fore SharePoint \ Exchange Compressed File Size settings
Posted
over 3 years ago
by
Van Makriniotis-CSS Security
I get these issues every few months. SharePoint or Exchange Admin getting files deleted due to Large uncompressed size or large compressed size virus. We have a few KB’s on this but there is some detail that is missing. I also realized today that...
Antigen 9.x Update issue.
Posted
over 3 years ago
by
Van Makriniotis-CSS Security
2
Comments
During our testing we have discovered that there is a potential to download the Cloudmark engine update even when there is not an update. This is being looked at but for now it is recommended that you set Cloudmark to update only every 24 hours to avoid...
Forefront protection for exchange blocks Outlook block sender functionality and Exchange IMF
Posted
over 4 years ago
by
Van Makriniotis-CSS Security
2
Comments
I would recommend FPE customers do this. By default when our Anti-spam agent finds something as clean we mark it SCL -1 This can cause a lot of issues with Exchange Blocked senders and it also blocks out any chance of IMF catching something. This is covered...
Issue of the week: FPE\Antigen\FSS file type filtering
Posted
over 4 years ago
by
Van Makriniotis-CSS Security
1
Comment
I decided to write up a filter guide as there seems to be some confusion with the new interface in FPE. The screens are from FPE but the guidance is good for filtering in all of our products. With Forefront Protection for Exchange we have drastically...
FSSMC/FPFMC Error 500 when launching
Posted
over 2 years ago
by
Van Makriniotis-CSS Security
If you have issues logging into any of the Forefront Management Consoles with an Error 500 you most likely changed the service account password. To verify this is due to a password issue you can check the event logs for Event ID 10004, Distributed COM...
Keep an eye out for Kaspersky Not updating
Posted
over 3 years ago
by
Van Makriniotis-CSS Security
2
Comments
We have been seeing some Antigen 9.x servers up past rollup-3 that are still not updating to Kaspersky 8. As of last week, customers still running Kaspersky5 started getting errors during attempted updates. This is normally due to one or more files being...
FSEMailPickup service does not start after applying Rollup 4
Posted
over 3 years ago
by
Van Makriniotis-CSS Security
This issue is starting to pop up in a few environments with connectivity issues to https:\\crl.microsoft.com It looks like we implemented code access security into our Mail Pickup service. The issue is some firewalls or proxies might not allow this site...
Hello Fope!
Posted
over 2 years ago
by
Van Makriniotis-CSS Security
My first FOPE centered blog. One common issue with FOPE (this also happens in FSS/Antigen) is the 0 day Virus’s that pretend to be a legitimate mail from other senders. These tend to be small emails asking you to open the file in a zip attached to the...
Intermittent download failures
Posted
over 3 years ago
by
Van Makriniotis-CSS Security
Just wanted to give everyone a heads up. Some customers are reporting a failure (less than 5% of the time) downloading engines. The next time a download occurs it will download just fine. We are looking into the cause and the fix will be automatic as...
Issue of the Week 9/24
Posted
over 5 years ago
by
Van Makriniotis-CSS Security
2
Comments
The following error is logged every 60 minutes on Forefront Server for Exchange SP2 This is a informational warning but the way it is worded might cause some concern. Log Name: Application Source: ...
FOPE–Configuration and SPF checking
Posted
over 2 years ago
by
Van Makriniotis-CSS Security
1
Comment
We are in the process of adding this information to our setup documents. -When implementing FOPE or O365/Live@EDU and you have mail coming to your on premise servers, you need to turn off any SPF checking at your mail server/firewall. The connecting...
Forefront 32 bit 64 bit and what to download
Posted
over 5 years ago
by
Van Makriniotis-CSS Security
This is another very quick common question that seems to not have any documentation. Scenario: You go to get the latest hot fix rollup for forefront for Exchange. And you notice there are two versions of the patch. A 32 bit version and a 64 bit version...
Issue of the week 10/9/09 - StatisticsManagerServer event id 100
Posted
over 5 years ago
by
Van Makriniotis-CSS Security
Issue: Constant StatisticsManagerServer event id 100 on the passive node of a 2003 cluster (maybe on a SCC cluster in 2008 as well) Cause: Antigen Statistics Service needs to access the statistics.xml located in the %data% folder of the Antigen...
Forefront protection manager Spam configuration
Posted
over 4 years ago
by
Van Makriniotis-CSS Security
I had a question on how we can change the default action for spam to allow end users to manage what is spam and is not spam. In AntiSpam configuration under policy management By default our settings are quarantine at SCL 5-8 and reject at SCL 9. To allow...
Resolved – Engine update issue seen on multiple servers 09/22
Posted
over 3 years ago
by
Van Makriniotis-CSS Security
4
Comments
Updates to this issue will be posted to http://blogs.technet.com/b/fss/ Last night we pushed out an update that resolves this issue. Updating your engines should resolve this issue and you can go back to your previous configuration.
Issue of the Week 9/17
Posted
over 5 years ago
by
Van Makriniotis-CSS Security
Missed a week. This is for the following error Event Type: Error Event Source: GetEngineFiles Event Category: ...
FPE and Online Protection–Not scanning mail that has been scanned by FOPE
Posted
over 4 years ago
by
Van Makriniotis-CSS Security
There has been some major confusion on the setting under advanced options in Forefront Protection for exchange called “Rescan messages already scanned by Forefront Online protection for Exchange” By default it looks like this Now this looks like...
Forefront Management console template deployment
Posted
over 4 years ago
by
Van Makriniotis-CSS Security
Forefront Management console (FSSMC) has various jobs for configuring your server. The main job is the general options settings. This configures items in general options for Antigen/forefront servers. Other settings such as filter lists, scan engine...
Norman engine issue since the 9th of September 2010 on Forefront Protection for Exchange Server
Posted
over 4 years ago
by
Van Makriniotis-CSS Security
We are tracking an issue where Norman updates on Forefront Protection for Exchange are failing with a version downloaded is older than the local version message. Event ID 6014, Source GetEngineFiles. The workaround for this issue is to delete the numbered...
Strange Configurations and how they impact your servers.
Posted
over 3 years ago
by
Van Makriniotis-CSS Security
We have had a few strange detection issues last week due to some non-standard configurations. 1. Spam filtering not working for User X This one was due to a setting in content filtering. There is a setting called AntispamBypassEnabled for each user...
Cloudmark engine added to SP2 for 9.0 Antigen
Posted
over 5 years ago
by
Van Makriniotis-CSS Security
http://support.microsoft.com/kb/971063 This should be a much better engine choice. In the coming weeks I will be sharing any experiences we have with this engine. One suggestion: If you switch over to the Cloudmark engine you need to disable...
Engine Definition Creep and it’s effect on your Server
Posted
over 5 years ago
by
Van Makriniotis-CSS Security
The Latest “common” issue we have been experiencing with Microsoft Antigen 9.x is higher than normal memory utilization on servers that for the most part have been running without issues for years. This issue did not occur overnight but...
>