Forefront Security for Exchange Server Forum

Upgrading FSE to Forefront 2010 on Exchange 2007 SP2

Fri, 20 Nov 2009 11:11:40 Z

Ready to upgrade FSE (latest version) on our Exchange 2007 SP2 to Forefront 2010. Server 2003 on a 2008r2 domain. Single Exchange server running all roles. FSE has been just about perfect over the last 18 months with virtually no issues.

Any suggestions on how to handle this? Is it as simple as it appears to be? What should we look for after the upgrade? I assume the install will take care of reconfiguring Exchange to take control of the spam features etc. (currently Exchange 2007 is doing all our spam filtering)?

Any and all advice is appreciated.

Charlie

charlie0

SFP 2010 and TMG

Mon, 30 Nov 2009 12:39:42 Z

Hi,

I have a question regarding the SFP 2010, I know that we have to install the Exchange Edge role and SFP 2010 befor installing TMG, and after installing these 2 procuces we have to install the TMG on the same server as these 2 produces are installed, but here is my question,

As you know the Edge server has no information store, that means no Scan mailbox option is availebale for the FSP 2010 that is installed on the Edge transport server, so what is the Best practice here? to get maximum of SFP 2010? do I have to install the SFP also on the Exchange server with Hub and mailbox roles?

Thanks,

Shahin

Shahin

Program log number and file type

Mon, 30 Nov 2009 11:16:08 Z

Hallo,

Anybody knows, how can I identify, in which file type some file belongs to ? (For example .WMZ, .FPT, ...)

In the Forefront's help, there is such statement: "The program log number is reported in the Forefront Security for Exchange Server program log when the associated file type is identified by a virus scanner or a file filter."

I can not find the "program log number" in any of the Forefront's log.

Thanks for helping in advance.

Forefront Online Email Filtering with Exch 2010 Enterprise CAL - Subscription Renewal?

Sat, 28 Nov 2009 19:17:18 Z

I have found nothing to indicate that there is a subscription renewal for Exchange Hosted Mail Filtering when activated for Enterprise CAL's. I'm finding that pretty hard to believe. Is there a renewal fee required after year 1...or do the Exch Ent CAL's require SA....or can I simply run Exchange 2010 with those Enterprise Exch CAL's forever on Exchange Hosted Mail Filtering at no additional charge?

John

install question

Thu, 26 Nov 2009 09:53:51 Z

Hi,

I have a question regarding where to install the forfront security for exchange,

we have a new network, with ISA 2006 and Exchange 2010, we did install the CA role mail box Role,... on a server and then Install Edge transport role on the same server as ISA 2006, now we want to install the forfront for Excahnge as wel.
Can some one tell me that where is the best location to install it? should we install it on the exchange server or on the ISA server that has Edge Transport server on it.

Thanks,

Shahin

Shahin

Checking Hotfix level of Forefront

Thu, 26 Nov 2009 12:35:33 Z

Hi All

We are using Forefront for Exchange version 10.1.0746.0.

I can see that the SP version is 1, however I'm trying to figure out what Hotfix Rollup Pack we are on.

Any idea?

Also, if we do go to Hotfix Rollup Pack 3 (which I believe is the latest), is this compatible with both Exchange 2007 SP1 on all roles (which we run at the moment) and Exchange 2007 SP2 (which we are thinking of moving to)?

Thanks in advance.

where to find overview engine versions

Fri, 27 Nov 2009 07:29:03 Z

Hi all,

In my SCOm I get messages about Out of date Forefront engines.

In Scanner Updates (in Forefront console) I can see that all engines are up to date except the worm list. For worm list this is what I see:

Engine version: 10.1.2.234

Last checked 26/11/1009

Last update: 16/09/2009

Is there a place (online) where I can see what engine versions I should have to be up to date?

Thx for help,

Patrick

Incident Reporting in Forefront 2010

Tue, 24 Nov 2009 15:58:22 Z

I installed Forefront 2010 on a server in our Exchange 2007 SP2 environment. We have used V10.2 for a couple of years so we are very familiar with this version. In the 2010 version, we setup some keyword and subject line filters and it appears things are getting filtered (we have a test account that gets spam email every couple of minutes and use it for testing) however we don't see anything in the Incident or Quarantine reports. We have the Quarantine option configured so they should be showing up. Is there something we need to turn on in order to see what is being filtered?

RPC error when changing anti spam definitions

Wed, 25 Nov 2009 21:59:30 Z

Ok, this is happening with FP2010 for Exchange in a 2007 EdgeServer, installed over Server 2008 SP2.

I've got some problems here with DNSbl filtering going aggressive, and from what I could see, it goes around blocking every incoming mail.
Ok, no problem. DNSbl filtering lists are also configured on exchange, so I wanted to disable connection filter component on FP2010.

This is where problems start:
Any save to changes in antispam configurations is a no go: FP2010 console gives back the following: "The server threw an exception.(Exception from HRESULT: 0x80010105 (RPC_E_SERVERFAULT))

My fix for this, for now, has been disabling completely anti spam features, after trying a reinstall and making sure all updates where applied.
Anyone seen this behavior before, and managed to get around it? Thanks in advance for any help

Should I disable the builtin Exchange antispam functions after intsalling FSE 2010?

Mon, 23 Nov 2009 10:49:15 Z

Hi,
We have a Exchange 2007 (SP1) system, and before installing FSE 2010 we just used the builtin exchange antispam functions (installed on the hub servers, as we don't use edge servers). My question is: After installing FSE2010 on our hub servers, should I disable the Exchange antispam functions? I can't seem to find any info on how to configure this...

Forefront error need help!!!

Thu, 19 Nov 2009 14:30:00 Z

This is the alert that came through:

Device: Airborne - IS / Merlin
| Event Log: Application, Error
| Source: GetEngineFiles
| Event ID: 6014
| User: SYSTEM
| Event Time: 2009/11/02 21:05:56
|
| Microsoft Forefront Server Security encountered an error while performing a scan engine update.
|
|    Scan Engine: Kaspersky5
|
|    Update Path: http://forefrontdl.microsoft.com/server/scanengineupdate/x86/Kaspersky5
|
|    Proxy Settings: Disabled
|
|    Error Code: 0xC0001F58
|
|    Description: The operation timed out.

Here is when the update was successful:

Log Name:      Application
Source:        GetEngineFiles
Date:          2009/11/09 09:14:26 PM
Event ID:      2011
Task Category: (2)
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      Merlin.Airborne.local
Description:
Microsoft Forefront Server Security did not detect any new scan engine updates.
   Scan Engine: Kaspersky5

   Update Path: http://forefrontdl.microsoft.com/server/scanengineupdate/x86/Kaspersky5

|
\------------------------------------------------------------------#

so what we do is we manually update the scan engine, but it happens alot. is there anyway to prevent from not getting the error in the future
Thanks hope the information is informative

Any recommendation on upgrading to FSE SP1 on CCR?

Tue, 04 Dec 2007 07:13:02 Z

Hi,

Does anyone know if there are any special consideration when upgrading a CCR to FSE SP1?

If not I assume that you will get minimal downtime by first upgrading the passive node, move the cluster, and finally upgrade the second node.

Regards

Jan

No new engines after installing SP2

Tue, 24 Nov 2009 10:04:39 Z

Been aware of the fact that certain engines are about to expire on 1st December for a while and eventually I've got around to install SP2 for FSE expecting that the new engines would become visible. But they're not! Am I missing something or do I need to wait for 1st December for them to appear?! Would have thought that the new engines would be visible now so they could be configured in advance, so any advice would be gratefully received.

FPE 2010 Console CPU usage

Tue, 24 Nov 2009 17:38:13 Z

I have FPE 2010 installed on Windows 2008 x64 with Exchange 2007 SP2 Edge Transport role.
When I have the FPE Console open, my CPU hits 80-90% and never drops. Even when I close the console the Microsoft.Forefront.Securitysuite.ui.console.exe is still running under Processes. If I kill it, then CPU is fine.

The weird thing is the FPE console seems to respond OK even though CPU is pegged. Anyone else seeing this or have a solution?

Thanks,

Shane

Forefront Server Security CCR Replication service has skipped replication of a file

Tue, 24 Mar 2009 10:50:41 Z

Hello,

Please can You help me.
For several days in Exchange logs we have error:

EVENT #      121193
EVENT LOG      Application
EVENT TYPE      Warning
SOURCE      FSECCRService
CATEGORY      CCR Service
EVENT ID      9411
COMPUTERNAME      MSEXH101
TIME      2009-03-20 13:25:07
MESSAGE      Microsoft Forefront Server Security CCR Replication service has skipped replication of a file.
File: ScanJobs.fdb
Reason: Cannot obtain a Forefront Run lock.

Sometimes this error includes other files which are not replicated from active node like Template.fdb,Notifications.fdb
We have Exchange07+Sp1 64bit CCR Cluster. The MS Forefront is managed by active node which is also "redistributed server"and the FSCController service is running on this node.
The problem is in replication between active and passive node. Beneath I'm including program.log from Forefront

Fri Mar 20 13:25:07 2009 ( 1556- 1844), "WARNING: FileSync (Thread)::CCR::FileSync::Run(): filesync.cpp:335: Cannot obtain a Forefront run lock; replication of 'ScanJobs.fdb' skipped."
Fri Mar 20 13:50:44 2009 ( 1556- 1844), "WARNING: FileSync (Thread)::CCR::FileSync::Run(): filesync.cpp:335: Cannot obtain a Forefront run lock; replication of 'ScanJobs.fdb' skipped."

But the most interesting thing is that later on the logs shows that file was replicated...

Fri Mar 20 14:25:23 2009 ( 1556- 1844), "INFORMATION: FileSync (Thread)::CCR::FileSync::Run(): filesync.cpp:304: Replicating 'FileScanners.fdb'. Result: Success (replicated)"
Fri Mar 20 14:26:23 2009 ( 1556- 1844), "INFORMATION: FileSync (Thread)::CCR::FileSync::Run(): filesync.cpp:304: Replicating 'FileScanners.fdb'. Result: Success (replicated)"

The problem has begun when we switched active node's.

P.s On our servers we have a lot of free space, so we can exclude that the problem is concerning disk space.

If anyone had the same problem and ideas please let me know :)

Mac

ISP redundancy for browsing only or for Server publishing also ?

Fri, 20 Nov 2009 23:00:51 Z

Is the new ISP redundancy feature for internal browsing scalability / failover OR for published server scalability / fail over also. For e.g Primary and Secondary MX comming through different ISPs into a same TMG box with ISP redundancy or let's say same OWA published onto two extenal interfaces simultaneously ? lastly this was possible through having two ISA boxes publishing the same Exchange setup.

Sending Notifications on Forefront

Mon, 23 Nov 2009 09:58:39 Z

Hi

We are running Forefront 10.1 on our Exchange servers.

I notice that there is a feature to send notifications regarding quarantined mail etc.

Does anyone have any recommendations on which Notifications to Enable?

Also - I don't see where I can set the address that Forefront sends these mails from? Any ideas?

Thanks in advance.

SP2 for ForeFront for Exchange Server

Mon, 23 Nov 2009 15:24:32 Z

I currently have Forefront for Exchange 10.1 (SP1) running on my Exchange 2007 SP1 servers. I am trying to find SP2 for FSE, but all I have found so far is a full installation of FSE with SP2. Where can I find just SP2 to apply to my current installation of FSE? Also, can FSE with SP2 run on an Exchange 2007 SP1 server?

Thank you very much.

ForeFront Protection 2010 for Exchange 2010 Hub Transport installation error

Fri, 13 Nov 2009 20:00:48 Z

I'm installing ForeFront Protection 2010 on an Exchange 2010 Hub Transport Server. In doing so, I get an error "The registration service failed to run using your current credentials. Please choose Abort to uninstall the product, Retry to attempt again running the service, or Ignore to continue with setup. If you continue, you will need to ensure that the Agents are correctly registered and review your antispam configuration.
The exit code is -2147467259."

I am a domain admin, a local administrator, and a member of Exchange Organizational Administrators.

After this, the Microsoft Forefront Server Protection for Exchange Registration Service will not start and as such, Microsoft Exchange Transport will not start.

When I try to start the Microsoft Forefront Server Protection for Exchange Registration Service I get the following in the event log.

FSEIMC Event ID 1016." Failed to register/enable the FSE Routing Agent. This will prevent the Microsoft Exchange Transport service from starting."

I have tried running the Exchange management shell command

Install-TransportAgent
Supply values for the following parameters:
AssemblyPath: C:\Program Files\Microsoft\Exchange Server\V14\TransportRoles\agents\FSEAgent\bin\FSEAgent_8.0.685.dll
Name: FSE Routing Agent
TransportAgentFactory: Antigen.AntigenRoutingAgentFactory

PowerShell, EMS returns:

The Transport Agent assembly file "C:\Program Files\Microsoft\Exchange Server\V14\TransportRoles\agents\FSEAgent\bin\FS
EAgent_8.0.685.dll" doesn't exist.
Parameter name: AssemblyPath
+ CategoryInfo : InvalidArgument: (:) [Install-TransportAgent], ArgumentException
+ FullyQualifiedErrorId : 78BBEE63,Microsoft.Exchange.Management.AgentTasks.InstallTransportAgent

But the file is clearly there, I'm looking at the file and it does exist.

Any help would be appreciated.

Forefront ScanEngine Not updating

Sat, 21 Nov 2009 14:48:08 Z

Hi Guys,
Am running forefront for exchange sp2, problem is i can't get my scan engine updates to work, Proxy settings and Network settings are configured o.k. on forefront. i have added the engine timeout value on the registry but my updates are still not updating. iam getting the following error messages on event viewer;
Event Type: Error
Event Source: DeploymentAgent
Event Category: None
Event ID: 100
Date: 11/20/2009
Time: 3:16:43 PM
User: N/A
Computer: NKCC-HQ-EX1
Description:
Fri Nov 20 15:16:43 2009 ERROR Error "Access is denied." (0x80070005) creating notifier for "<?xml version="1.0" encoding="utf-16"?><Antigen_SignatureUpdateAlert xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"><Machine>NKCC-HQ-EX1</Machine><DateStamp>2009-11-20T12:16:43.0000592-00:00</DateStamp><AlertType>10</AlertType><EngineId>128</EngineId><NetworkPath>http://forefrontdl.microsoft.com/server/scanengineupdate/x86/AhnLab</NetworkPath><EngineUpdateStatus>3</EngineUpdateStatus></Antigen_SignatureUpdateAlert>"

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
=====
Event Type: Error
Event Source: DeploymentAgent
Event Category: None
Event ID: 100
Date: 11/20/2009
Time: 3:16:43 PM
User: N/A
Computer: NKCC-HQ-EX1
Description:
Fri Nov 20 15:16:43 2009 ERROR CoCreateInstanceEx failed

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
==
Event Type: Error
Event Source: GetEngineFiles
Event Category: Engine Error
Event ID: 6014
Date: 11/20/2009
Time: 3:14:44 PM
User: N/A
Computer: NKCC-HQ-EX1
Description:
Microsoft Forefront Server Security encountered an error while performing a scan engine update.
   Scan Engine: Kaspersky5
   Update Path: http://forefrontdl.microsoft.com/server/scanengineupdate/x86/Kaspersky5
   Proxy Settings: Enabled

Your assistance will be highly appreciated.

Regards,
Brian.

Forefront for Exchange 2010 and Forefront TMG

Thu, 12 Nov 2009 16:57:53 Z

Hi,

Sorry if I asked in wrong place.

I'm trying to figure out how it works, the combination between Forefront for Exchange 2010, and role of Forefront TMG in this case. Can I install edge server role in domain member server TMG, and use Forefront Security for Exchange which come with TMG as a protection. And how it comes with licensing?

Thank you

alfa21

Activating an Upgrade to Forefront Security for Exchange Server SP2 from SP1

Wed, 23 Sep 2009 14:18:50 Z

I just downloaded the Forefront Security for Exchange Server SP2 from Technet, installed it and the upgrade from SP1 went well. I rebooted the server and now it is asking me for my volume licensing information. The problem is that I have a purchased version of Windows Essential Business Server 2008 (not SBS) and you don't get volume licensing with it. We do have an OPEN account but it only has the Cals we purchased for EBS.

Any Ideas how I can get this working again?

SBS 2008 & Forefront Exchange 2010

Thu, 19 Nov 2009 05:37:26 Z

Uninstalled the Forefront for Exchange that ships with SBS 2008 and installed the new Forefront 2010 for Exchange. Everything works great but I have a problem with the SBS Console alert. In Forefront Exchange 2010, the Forefront engine takes over the anti-SPAM function from Exchange and that is a good thing, but now the inherent SBS 2008 console has an error message under SECURITY for "Spam protection for E-Mail" as CRITICAL. I know what the problem is but I do not know how to disable the alert. Now that Excahnge is no longer handling anti-SPAM, the SBS server sees the function inactive and issues an alert sice it is unaware that that role is now filled by the Forefront 2010 anti-spam engine. Is there a method do disable the SBS Consoel alert on the SECURITY tab? Everything is working great with Forefront Exchange 2010 on SBS 2008 other than this little alert that is bugging me.

Thanks to anyone out there that has any insight on this...

antivirus update

Thu, 12 Nov 2009 16:12:24 Z

Dears,

I have 3 antivirus not updating with an error looks like there is no internet , but the five rests is working

the 3 that not working are kasper and ahnlab and sophos

so is there a problem from their side or it is from my side

REgards,

Forefront 2010 antispam action not working

Tue, 17 Nov 2009 16:14:13 Z

I have Forefront 2010 configured to "Stamp header and continue processing" for spam with an SCL from 5-8. However, the spam is now showing up on the client side in the Junk E-Mail folder or anywhere that I can find. FF is definitely filtering spam, I just need it to pass marginal (5-8) spam to the client so we can check for/evaluate false positives. The quarantine shows nothing in the FF GUI. I do understand that changes to this setting require restarting the Transport service, which has been done, and I also restarted the server. This is a single-service testing environment, Exchange 2007 SP2 with all the post-SP2 updates on Server 2008.

Cannot edit file filter and other settings

Sun, 15 Nov 2009 09:43:02 Z

Dear all,

I am experiencing a strange issue with our Forefront Server Security for Exchange installation (please refer to this screenshot): I cannot edit the File filter (and some other) settings. It seems that these features are just disabled. I am really wondering why this is the case - I am logged on the machine with full administrative rights.

I would really appreciate if you guys could help me with this. Thanks in advance,

Matthias

Forefront Security for Exchange Server - Blackberry interoperability issues

Fri, 13 Nov 2009 08:43:25 Z

Hi

We upgraded Forefront 2007 to Forefront Security for Exchange Servers 2010 this morning, Exchange 2k7 on Win 2k8 64bit ESXi. Result was excellent spam filtering and am very pleased with the new UI however experienced serious set back with Blackberry Professional Software installed on Win2k3 32bit, the Blackberry program doesnt seem to be able to communicate with Exchange 2k7, have fought with this all day!! - to prove its Forefront I have uninstalled it and Blackberry is working again... unfortunately I cant stop the transport during working hours but have tried all manner of services restarts etc.

The windows firewall is disabled on the Exchange server.

Are there some port blocking / firewall type properties to Forefront I cant see - nothing on the net about it as far as I can see!

I really want to get this update on and please our staff with less / non existant spam!?!

Many thanks

Alex

Cloudmark Anti-Spam engine not updating

Thu, 12 Nov 2009 12:48:58 Z

Hi

When updating the Cloudmark SPAM engine the following two errors occur:

Microsoft Forefront Protection encountered an error while performing a scan engine update.

Scan Engine: Cloudmark

Error Code: 0x80004005

Error Detail: Description: An error occurred while loading the scan engine.

and

Microsoft Forefront Protection encountered an error while performing a scan engine update.

Scan Engine: Cloudmark

Error Detail: An error occurred while testing the scan engine.

It downloads the engine onto the exchange server. The staging folder is created within the Engines\amd64\Cloudmark\Package folder, but after a minute everything disappears from this folder, and the above two errors are created within the event log

I am running Windows Server 2008 R2 x64, Exchange 2010 RC and the evaluation version of Microsoft Forefront Protection 2010 for Exchange server. There is also a Exchange 2007 server present within the exchange organization, running Microsoft Forefront Version: 10.1.0746.0 SP1

Thanks for any help

Forefront Protection 2010 for Exchange Server capacity planning blog posted

Fri, 13 Nov 2009 19:51:04 Z

A capacity planning blog was just posted for the recently released Microsoft Forefront Protection 2010 for Exchange Server (FPE) product. Here is the introductory paragraph that explains the purpose of the blog:

“The purpose of this document is to provide some guidance into Forefront Protection 2010 for Exchange Server (FPE) capacity planning regarding hardware, such as the number of processing cores and memory requirements. The information that follows provides direction on how to use the existing Forefront Security for Exchange Server (FSE) Version 10 with Service Pack 1 capacity planning tool for Exchange Server 2007 and Exchange Server 2010 deployments. The information provided here is based on the existing product documentation for Exchange Server.”

To read more, please go to the following URL: http://blogs.technet.com/FSS/

While a more detailed document is in the works and will be available at a later date, this blog provides some high level numbers and will help you make capacity planning decisions.

Forefront Online Protection Gateway on Edge transport Server

Fri, 13 Nov 2009 16:44:09 Z

Is the Forfront online protection gateway designed to be installed on an edge transport server which is not domain joined? When I try to enable it on my edge transport server I attempt the following steps.
1. Click the enable Forefront online protection for Exchange Gateway Managment check box
2. Enter the name of the edge transport server
3. CLick the edit credentials button and enter the local administrator credentials for the edge transport server
4. enter the company name and the user credential I used to register with the FOSE site.

when I hit save I get a prompt saying that following
"The supplied credential does not sufficient rights to manage FOPE gateway"

Now when i complete the same steps on my hub transport server I get no error messages and the confiuration is successfull.
SO does the FOPE Gateway only work on domain joined machines or will it work on workgroup machines like an edge transport server?

revers dns lookup

Fri, 13 Nov 2009 15:05:01 Z

Dears ,

if I check the perform revers DNS lookup in the forfront in the edge

so will it perform reverse dns to the IP and the Reverse DNS should match SMTP Banner or the IP should be resolved to any name to bypass my server !!

and how can I get a list of blocking domains which the exchange blocks by this revers DNS lookup

Regards,

Forefront & Exchange SP2

Thu, 12 Nov 2009 16:42:48 Z

Just a quick one. i currently run Windows 2003 R2 with Exchange 2007 SP1 and Forefront for Exchange SP1. I need to apply both SP2s, I think I should apply Exchange SP2 and then Forefront SP2. If someone could confirm it would be appreciated.

searching for a tutorial how to setup tmg and Exchange 2010

Fri, 13 Nov 2009 07:57:36 Z

the title says it all
I am a newbie on it pro stuff.
I have installed exchange2010 and on a other server i installed tmg and another server with AD
so far so good.
Now i want to have my Exchange working from outside trough tmg. this because i only have one IP adress and also have a sharepoint server which i want to publish to the net.

The big question is which steps do i need to follow in detail to get the exchange working.
I heard something about certificates etc...
Is there somewhere a good tutorial how to set this up inclusive steps of certification.

another thing is i have exchange2010 and forefront for exchange do i need to do anything with the forefront for exchange?

thanks in advance for the help

kind regards,

Paul Keijzers

Check my website http://www.kbworks.nl or follow me on @KbWorks be sure to Check my KbWorks blog

Installation Forefront 10/SP2 on Exchange 2010 RTM fails

Fri, 13 Nov 2009 13:13:32 Z

Hi,

I try to install Forefront 10 SP2 on an Exchange Edge-Server 2010 RTM (all german version). But I get always a message "The required Exchange server version was not found" and then I can only cancel the installation. Anyone an y idea?

Best regards

Joachim

Backscatter log question

Fri, 13 Nov 2009 12:08:26 Z

I've recently enabled Backscatter feature and am seeing prevailing number of records such as "accepted: in phase out period, Batv tag was not validated" in the log and only a few "accepted: Batv tag was validated" yet in the 'Backscatter Filtering' stats I see only 'Messages processed by backscatter filtering'.

Are the 'Batv tag was not validated' records in the log indicate a sympthoms of some problem or problem\misconfiguration of FFP? Or is this normal?

ForeFront Protection 2010 quarantine and item deliver

Fri, 13 Nov 2009 06:47:37 Z

In ForeFront Server Security for Exchange there was Compatibility mode for items in quarantine which allowed to (re-)deliver those items from quarantine without being quarantined again. I cannot seem to find something similar in ForeFront Protection 2010 for Exchange. When I'm trying to deliver message with item (CorruptedCompressedFile) from quarantine it gets quarantined again. Quarantine option 'Rescan filters on send' is not checked.
Any ideas? Could there be some registry tweak that enables 'Compatibility mode' behavior?

FPE 2010 DNSBL

Wed, 11 Nov 2009 17:08:29 Z

Is the anyone else having a problem the the Forefront DNBL feature in the Released verision of FPE? When I turn it on, it blocks every IP address which connects to the edge transport server.

FPE 2010 on DAG

Tue, 10 Nov 2009 15:24:02 Z

I am having a ForFront for Exchange issue that does not make sense to me. We are trying to install on the first node in the DAG and get the following error:

Installation on clusters requires domain administrator account

Exit setup, log on from an account that has cluster domain access and run setup.exe again.

No we are not a domain administrator, nor can we be because of split permissions, and yes we are local admin on all the members of the DAG, and the OU’s where all Exchange objects reside.

A. What am I missing?

B. What is “cluster domain access”

Thanks

p.s. this exact permission model works fine in the lab.

User Interaction with Forefront Protection 2010 for Exchange

Tue, 10 Nov 2009 10:38:44 Z

Hello,

i have an Edge Server with exchange 2010 RC and Forefront Protection for Exchange 2010 RC on a W2k8R2. It is working very good, but it needs additional work as it blocks some good Mails. Now I configured the Server to put all Spam-Mails in Quarantine and not to block them.Is it possible to give my Users a chance to look in their quarantined Mails? So they can give me a hint when they receive false positives. I have seen this feature in the online version.

Thanks
Sven

Is Forefront for Ex SP2 supported for Ex 2007 running on 2k8 x64???

Fri, 06 Nov 2009 22:54:28 Z

We have recently upgraded all of our Exchange servers to 2007 running on Server 2008 64 bit. Is Forefront for Exchange SP2 supported to run in this enviroment?

Thanks,

Brandon