Event id 7001: Not all the antimalware engines selected in the Forefront Administration Console for scanning have been enabled for updates.

Answered Event id 7001: Not all the antimalware engines selected in the Forefront Administration Console for scanning have been enabled for updates.

  • Wednesday, January 23, 2013 7:52 AM
     
     

    I see event ID 7001 from source Microsoft Forefront Protection on my Exchange 2010 servers, the description is "Not all the antimalware engines selected in the Forefront Administration Console for scanning have been enabled for updates." This is FPE2010 with Update Rollup 4 installed, version 11.0.727.0, on Exchange 2010 SP2 UR5-v2.

    I have the engines settings set to Automatic:

    I noticed there's no Schedule for Cloudmark and VirusBuster, that's probably why this warning was triggered. And related, I also see error event id 2109 from source GetEngineFiles: "The VBuster scan engine is no longer supported. Updates are no longer available for this engine, and therefore the update check for this engine has been disabled.  Please review the scan engines chosen for your scan jobs and make another selection to ensure up-to-date protection."

    What can I do to prevent this warning and error from appearing in the event logs? Preferably I would like to keep FPE manage the engines automatically, but if manual configuration is needed to prevent this errors than that's fine too.


    Did my post help? Please use "Vote As Helpful", "Mark as answer" or "Propose as answer". Thank you!

All Replies

  • Wednesday, January 23, 2013 7:55 AM
     
     Answered

    Hi,

    check the following article how to disable the Warning about the VBuster engine:

    http://www.groeby.net/?page_id=92

    It's german but the pictures should do well. You can also do the steps with powershell like mentioned at the bottom of this article.

    Greetings

    Christian


    Christian Groebner MVP Forefront

    • Marked As Answer by Jetze Mellema Wednesday, January 23, 2013 8:08 AM
    •  
  • Wednesday, January 23, 2013 8:07 AM
     
     

    Hello Christian,

    Thank you for your response in less than three minutes after I asked my question. :)

    I like your article, especially because you used PowerShell to make the modification. I'm a great fan of PowerShell but have never used it to manage FPE.

    Thanks for your help!


    Did my post help? Please use "Vote As Helpful", "Mark as answer" or "Propose as answer". Thank you!

  • Wednesday, February 13, 2013 6:46 AM
     
     

    For an explanation of these steps in English, check: http://support.microsoft.com/kb/2758276


    All information provided by me in the forums are based on my own opinion and does not necessarily reflect the opinion or view of Microsoft or its employees. No rights can be claimed from information provided by me nor can I or Microsoft be held responsible for actions forthcoming out of the provided information.