Forefront Server Security TechCenter >
Forefront Server Security Forums
>
Antigen
>
Event ID 5044, AntigenInternet Error
Event ID 5044, AntigenInternet Error
- Running Antigen 9.1. Noticed many 5044 errors in the applog, with the following description:
Call to engine scan function returned 0x80004005 within Internet scan job (file "winmail.dat->Untitled Attachment", message "Folder Content", folder "Outbound")
These also show up in the Antigen console quarantine, although they don't show up in the Incidents window.
In the Quarantine window the incident reads as EngineError, and the scan engine in use won't update. I changed engines and the error goes away. Question is, were all these messages really quarantined? We have notification enabled, and no users have complained. Anyone have any clues as to what's going on here?
Ted
Answers
- Hi Ted,
"Folder Content" messages are typically used for Public Folder replication, so that's probably why no users have complained. As PF replication is continuous and you're no longer seeing the issue, these quarantined items are not of much use to anyone. You should be able to find the items under REPORT>Quarantine in the Antigen Administrator UI.
Kind Regards, Andy Day | CSS Security, Sr. Support Engineer (Antigen/Forefront Server Security)- Marked As Answer byNick Gu - MSFTMSFT, ModeratorMonday, September 14, 2009 2:51 AM
All Replies
- Hi Ted,
"Folder Content" messages are typically used for Public Folder replication, so that's probably why no users have complained. As PF replication is continuous and you're no longer seeing the issue, these quarantined items are not of much use to anyone. You should be able to find the items under REPORT>Quarantine in the Antigen Administrator UI.
Kind Regards, Andy Day | CSS Security, Sr. Support Engineer (Antigen/Forefront Server Security)- Marked As Answer byNick Gu - MSFTMSFT, ModeratorMonday, September 14, 2009 2:51 AM
