Forefront Server Security TechCenter >
Forefront Server Security Forums
>
Forefront Security for Exchange Server
>
Microsoft Forefront Server Security encountered an error while performing a scan engine update.
Microsoft Forefront Server Security encountered an error while performing a scan engine update.
- Hi All,
I have Exchange Server 2007 SP1 with installing Forefront Security for Exchange Server with Service Pack 1 installed wih all AV scan engine failed to update.
I'm having problem in manually updating the engine of FFSE, see the attached Error message and the script that i executed in the batch script.
Analysis:
from the Mail server, i can open http://forefrontdl.microsoft.com/server/scanengineupdate , the result is "Directory Listing Denied This Virtual Directory does not allow contents to be listed. "
I've supplied the Proxy credentials but still i cannot update it by clicking on the FFSE GUI console and the batch script
Any idea would be greatly appreciated.
Thanks,
Error Message: Event Type: Error Event Source: GetEngineFiles Event Category: Engine Error Event ID: 6014 Date: 25/10/2009 Time: 8:46:00 PM User: N/A Computer: ExchangeServer01 Description: Microsoft Forefront Server Security encountered an error while performing a scan engine update. Scan Engine: Command Update Path: http://forefrontdl.microsoft.com/server/scanengineupdate/x86/Command Proxy Settings: Enabled Error Code: 0x80004005 Description: An error occurred while checking if an update was available. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Error Event Source: Microsoft Forefront Security Event Category: Health Status Event ID: 7007 Date: 25/10/2009 Time: 8:37:15 PM User: N/A Computer: ExchangeServer01 Description: None of the engines enabled for updates have been updated in the last week. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. ###################################################################### Script: REM FSS-AhnLab Antivirus Scan Engine GetEngineFiles.exe -u -m 128 http://forefrontdl.microsoft.com/server/scanengineupdate REM FSS-Authentium Command Antivirus Engine GetEngineFiles.exe -u -m 64 http://forefrontdl.microsoft.com/server/scanengineupdate REM FSS-CA Vet GetEngineFiles.exe -u -m 32 http://forefrontdl.microsoft.com/server/scanengineupdate REM FSS-Kaspersky Antivirus Technology GetEngineFiles.exe -u -m 32768 http://forefrontdl.microsoft.com/server/scanengineupdate REM FSS-Microsoft Antimalware Engine GetEngineFiles.exe -u -m 2 http://forefrontdl.microsoft.com/server/scanengineupdate REM FSS-Norman Virus Control GetEngineFiles.exe -u -m 1 http://forefrontdl.microsoft.com/server/scanengineupdate REM FSS-Sophos Virus Detection Engine GetEngineFiles.exe -u -m 8 http://forefrontdl.microsoft.com/server/scanengineupdate REM FSS-VirusBuster Antivirus Scan Engine GetEngineFiles.exe -u -m 512 http://forefrontdl.microsoft.com/server/scanengineupdate REM FSS-Worm List GetEngineFiles.exe -u -m 256 http://forefrontdl.microsoft.com/server/scanengineupdate
/* Windows Infrastructure Support Engineer */
Answers
- Hi Albert,
from the release notes you only have to stop all services of Exchange Services and FSE.
"When applying upgrades and hotfixes, the shutdown order, as given in the User Guide, has been changed. You should first stop all Exchange services and then stop any Forefront Server Security services that might still be running."
Greetings
Christian
Christian Groebner MVP Forefront- Marked As Answer byAlbert Widjaja Tuesday, October 27, 2009 11:19 PM
All Replies
- Hi Albert,
first of all check if the server has access to forefrontdl.microsoft.com in your firewall. If your firewall requires authentication for that servers enter the credentials and proxy under the Gerneal-settings in FSE. Optionally you can try to allow anonymous access to the update servers in your firewall and check what's happening then.
Btw. FSE SP2 is out since some weeks
Greetings
Christian
Christian Groebner MVP Forefront - Hi Chris, thanks for the reply.
So, in this case if I would like to update my FSE SP1, is there anything that i should be aware of ?
perhaps uninstalling the previous one and I'm really hesitant to do it since Ifi do this during the office hour, it would affect the mailflow.
/* Windows Infrastructure Support Engineer */ - Hi Albert,
from the release notes you only have to stop all services of Exchange Services and FSE.
"When applying upgrades and hotfixes, the shutdown order, as given in the User Guide, has been changed. You should first stop all Exchange services and then stop any Forefront Server Security services that might still be running."
Greetings
Christian
Christian Groebner MVP Forefront- Marked As Answer byAlbert Widjaja Tuesday, October 27, 2009 11:19 PM
- Great, thanks for that Christian.
/* Windows Infrastructure Support Engineer */

