Van's FSS/Antigen/EOP Blog

My Blog for all Antigen/Forefront Server and Forefront Online Protection for Exchange issues

July, 2009

  • Issue Of the week 7/27/09 – Antigen Upgrade results in Expired evaluation.

    We have seen a few cases of licensed builds coming online as expired evaluations as people upgrade to Antigen Service Pack 2 for exchange.

    I believe this is somehow triggered on Active Passive server installs where the Active node fail’s over to the Passive during our install. This leaves the AntigenCluster folder on the shared drive missing the licence.cfg file.

    I have yet to reproduce this but the lack of a license file and other files that are created during the install on the shared drive is leading me to that conclusion.

    I would suggest always pausing the passive node while installing on the active node to avoid any issues with the server failing over during the install. This should probably be added to the online cluster install steps.

  • Issue of the week 7-17-09

    We are currently seeing a failure to allocate memory error

    Error in the programlog:

    Failed to allocate memory for local stream 0x8007000e

    Mail flow issues occur at the same time as these memory allocation errors. The mail flow issue is a result of the memory issue and not a cause.

    we are looking to collect more data to find the root cause of this issue.

     

  • Cloudmark engine added to SP2 for 9.0 Antigen

    http://support.microsoft.com/kb/971063

     

    This should be a much better engine choice. In the coming weeks I will be sharing any experiences we have with this engine.

     

    One suggestion:

    If you switch over to the Cloudmark engine you need to disable the Starengine service and disable updates for Spamcure. (I would then delete the Spamcure engine folder)

    Spamcure will spool up its service on an update. Since this is not being used, you end up wasting 350-500MB of physical ram.