Van's FSS/Antigen/EOP Blog

My Blog for all Antigen/Forefront Server and Forefront Online Protection for Exchange issues
Options
Search Blogs
Tags
Archive
Archives

Van's FSS/Antigen/EOP Blog

TechNet Blogs » Van's FSS/Antigen/EOP Blog
Sort by: Most Recent | Most Views | Most Comments
Excerpt View | Full Post View

  • Runner up – 9/30/09

    Posted over 5 years ago
    by Van Makriniotis-CSS Security}
    We have seen the following issue a few times in the last two weeks   Issue: After installing Antigen or recycling the server where we are installed with, Exchange fails to start up. Error is dependency failed to start. Trying to start Antigen Monitor...

  • Issue of the week 9/30/09

    Posted over 5 years ago
    by Van Makriniotis-CSS Security}
    I had a good question today from one of my customers What is the background scan. here is my response.   You should never use a background scan. Ever… Background scanning was a clever idea back in the day when VSAPI 1.0 was released. You have a background...

  • Issue of the Week 9/24

    Posted over 5 years ago
    by Van Makriniotis-CSS Security}
    The following error is logged every 60 minutes on Forefront Server for Exchange SP2 This is a informational warning but the way it is worded might cause some concern.   Log Name:      Application Source:       ...

  • Issue of the Week 9/17

    Posted over 5 years ago
    by Van Makriniotis-CSS Security}
    Missed a week. This is for the following error   Event Type:        Error Event Source:    GetEngineFiles Event Category:               ...

  • Issue of the week 8/31/09

    Posted over 5 years ago
    by Van Makriniotis-CSS Security}
    Another FSCIMC hung in a start pending state issue. Before this was tied to execution policy being set to restricted or locally signed This time certificates are to blame.   If for some reason your Microsoft root authority certificate expires you...

  • PDF false detects

    Posted over 5 years ago
    by Van Makriniotis-CSS Security}
    *Update* MSAV has been updated and has resolved this issue. Command engine has resolved this issue as well. *Update* Looks like there is a false detect issue with some engines and PDF files. Antivirus Version Last Update Result AntiVir 7.9.1.3 2009.08...

  • Issue of the week 8/17/2009

    Posted over 5 years ago
    by Van Makriniotis-CSS Security}
    This issue deals with Antigen 9.x and clusters with Multiple Active Nodes. You do not need the cluster resource on a single Active cluster . There is a fix in Antigen 9.1 RU5 and Antigen 9 Service Pack 2 that addresses an issue when moving Active nodes...

  • Issue of the week 8/7/2009

    Posted over 5 years ago
    by Van Makriniotis-CSS Security}
    I have been looking for a good issue to post this week. So here is a post for all those 8.0 customers looking to upgrade to 9 by the time 8.x for Exchange reaches its end of life at the end of the year. Mail Queues after an upgrade from 8.0 to 9...

  • Issue Of the week 7/27/09 – Antigen Upgrade results in Expired evaluation.

    Posted over 5 years ago
    by Van Makriniotis-CSS Security}
    We have seen a few cases of licensed builds coming online as expired evaluations as people upgrade to Antigen Service Pack 2 for exchange. I believe this is somehow triggered on Active Passive server installs where the Active node fail’s over to the Passive...

  • Issue of the week 7-17-09

    Posted over 5 years ago
    by Van Makriniotis-CSS Security}
    We are currently seeing a failure to allocate memory error Error in the programlog: Failed to allocate memory for local stream 0x8007000e Mail flow issues occur at the same time as these memory allocation errors. The mail flow issue is a result...

  • Cloudmark engine added to SP2 for 9.0 Antigen

    Posted over 5 years ago
    by Van Makriniotis-CSS Security}
    http://support.microsoft.com/kb/971063   This should be a much better engine choice. In the coming weeks I will be sharing any experiences we have with this engine.   One suggestion: If you switch over to the Cloudmark engine you need to disable...

  • Issue Of the week (Forefront)

    Posted over 5 years ago
    by Van Makriniotis-CSS Security}
    This is for everyone running Rollup 3 (You are running Rollup 3 right?) Rollup 3 has added extra diagnostics that can/will effect performance on high load systems. If you are running rollup 3 your program log will look something like this.   This...

  • Issue of the week Runner up

    Posted over 5 years ago
    by Van Makriniotis-CSS Security}
    Another Cluster issue you might see.   Error: Failed to get CMS info GetMCSEVSInfo: An Active node of an Active/Passive cluster is found, but no match for the shared drive is found"   Possible Solution: http://support.microsoft.com/kb/954934...

  • Issue of the Week (Antigen)

    Posted over 5 years ago
    by Van Makriniotis-CSS Security}
    Cluster License issue This is something I learned last week.   When You have a cluster that experiences a hardware failure, and you need to rebuild a node you need to make sure that the install points to the same folder on both nodes.   The...

  • issue of the week

    Posted over 5 years ago
    by Van Makriniotis-CSS Security}
    (UPDATE 8/17/2009) This issue has been identified as being caused by the Exchange MSP reporting tool. The issue has been addressed in the latest build of MPS. (UPDATE 8/17/2009)   (Update 8/19) It’s the ‘scripted MPS Reports tool’, not the Exchange...

  • Forefront 32 bit 64 bit and what to download

    Posted over 5 years ago
    by Van Makriniotis-CSS Security}
    This is another very quick common question that seems to not have any documentation. Scenario: You go to get the latest hot fix rollup for forefront for Exchange. And you notice there are two versions of the patch. A 32 bit version and a 64 bit version...

  • Engine Definition Creep and it’s effect on your Server

    Posted over 5 years ago
    by Van Makriniotis-CSS Security}
    The Latest “common” issue we have been experiencing with Microsoft Antigen 9.x is higher than normal memory utilization on servers that for the most part have been running without issues for years. This issue did not occur overnight but...