Forefront Server Security TechCenter > Forefront Server Security Forums > Forefront Security for Exchange Server > Microsoft Forefront Server Security encountered an error while performing a scan engine update.
Ask a questionAsk a question
 

AnswerMicrosoft Forefront Server Security encountered an error while performing a scan engine update.

  • Sunday, October 25, 2009 11:45 AMAlbert Widjaja Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Has Code
    Hi All,

    I have Exchange Server 2007 SP1 with installing Forefront Security for Exchange Server with Service Pack 1 installed wih all AV scan engine failed to update.

    I'm having problem in manually updating the engine of FFSE, see the attached Error message and the script that i executed in the batch script.

    Analysis:
    from the Mail server, i can open http://forefrontdl.microsoft.com/server/scanengineupdate , the result is "Directory Listing Denied This Virtual Directory does not allow contents to be listed. "

    I've supplied the Proxy credentials but still i cannot update it by clicking on the FFSE GUI console and the batch script

    Any idea would be greatly appreciated.

    Thanks,

    Error Message:
    Event Type:     Error
    Event Source:   GetEngineFiles
    Event Category: Engine Error 
    Event ID:       6014
    Date:           25/10/2009
    Time:           8:46:00 PM
    User:           N/A
    Computer:       ExchangeServer01
    Description:
    Microsoft Forefront Server Security encountered an error while performing a scan engine update.
       Scan Engine: Command
       Update Path: http://forefrontdl.microsoft.com/server/scanengineupdate/x86/Command
       Proxy Settings: Enabled
       Error Code: 0x80004005
       Description: An error occurred while checking if an update was available.
     
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
     
    Event Type:     Error
    Event Source:   Microsoft Forefront Security
    Event Category: Health Status 
    Event ID:       7007
    Date:           25/10/2009
    Time:           8:37:15 PM
    User:           N/A
    Computer:       ExchangeServer01
    Description:
    None of the engines enabled for updates have been updated in the last week.
     
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
     
    ######################################################################
    Script:
     
    REM FSS-AhnLab Antivirus Scan Engine
    GetEngineFiles.exe -u -m 128 http://forefrontdl.microsoft.com/server/scanengineupdate
     
    REM FSS-Authentium Command Antivirus Engine
    GetEngineFiles.exe -u -m 64 http://forefrontdl.microsoft.com/server/scanengineupdate
     
    REM FSS-CA Vet
    GetEngineFiles.exe -u -m 32 http://forefrontdl.microsoft.com/server/scanengineupdate
     
    REM FSS-Kaspersky Antivirus Technology
    GetEngineFiles.exe -u -m 32768 http://forefrontdl.microsoft.com/server/scanengineupdate
     
    REM FSS-Microsoft Antimalware Engine
    GetEngineFiles.exe -u -m 2 http://forefrontdl.microsoft.com/server/scanengineupdate
     
    REM FSS-Norman Virus Control
    GetEngineFiles.exe -u -m 1 http://forefrontdl.microsoft.com/server/scanengineupdate
     
    REM FSS-Sophos Virus Detection Engine
    GetEngineFiles.exe -u -m 8 http://forefrontdl.microsoft.com/server/scanengineupdate
     
    REM FSS-VirusBuster Antivirus Scan Engine
    GetEngineFiles.exe -u -m 512 http://forefrontdl.microsoft.com/server/scanengineupdate
     
    REM FSS-Worm List
    GetEngineFiles.exe -u -m 256 http://forefrontdl.microsoft.com/server/scanengineupdate

    /* Windows Infrastructure Support Engineer */

Answers

  • Monday, October 26, 2009 1:18 PMChristian Groebner [MVP]MVPUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    Hi Albert,

    from the release notes you only have to stop all services of Exchange Services and FSE.

    "When applying upgrades and hotfixes, the shutdown order, as given in the User Guide, has been changed. You should first stop all Exchange services and then stop any Forefront Server Security services that might still be running."

    Greetings

    Christian

    Christian Groebner MVP Forefront

All Replies

  • Sunday, October 25, 2009 12:33 PMChristian Groebner [MVP]MVPUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Hi Albert,

    first of all check if the server has access to forefrontdl.microsoft.com in your firewall. If your firewall requires authentication for that servers enter the credentials and proxy under the Gerneal-settings in FSE. Optionally you can try to allow anonymous access to the update servers in your firewall and check what's happening then.

    Btw. FSE SP2 is out since some weeks

    Greetings

    Christian
    Christian Groebner MVP Forefront
  • Monday, October 26, 2009 12:52 PMAlbert Widjaja Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Hi Chris, thanks for the reply.

    So, in this case if I would like to update my FSE SP1, is there anything that i should be aware of ?

    perhaps uninstalling the previous one and I'm really hesitant to do it since Ifi do this during the office hour, it would affect the mailflow.
    /* Windows Infrastructure Support Engineer */
  • Monday, October 26, 2009 1:18 PMChristian Groebner [MVP]MVPUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    Hi Albert,

    from the release notes you only have to stop all services of Exchange Services and FSE.

    "When applying upgrades and hotfixes, the shutdown order, as given in the User Guide, has been changed. You should first stop all Exchange services and then stop any Forefront Server Security services that might still be running."

    Greetings

    Christian

    Christian Groebner MVP Forefront
  • Tuesday, October 27, 2009 11:19 PMAlbert Widjaja Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Great, thanks for that Christian.
    /* Windows Infrastructure Support Engineer */