Mailsecurity and event IDs (Full Version)

All Forums >> [Content Security] >> GFI MailSecurity for Exchange/SMTP



Message


techguy -> Mailsecurity and event IDs (28.Apr.2008 2:15:27 PM)

We've been seeing these event IDs related to mailsecurity on our exchange 2007 SP1.

Server Spec:
Windows 2003 SP2
Exchange 2007 SP1
GFI MailSecurity



Event Type: Warning
Event Source: MSExchange Extensibility
Event Category: MExRuntime
Event ID: 1050
Date:  4/28/2008
Time:  1:30:27 PM
User:  N/A
Computer: Mailserver1
Description:
The execution time of agent 'GfiAvRoutingAgent' exceeded 300000 (milliseconds) while handling event 'OnSubmittedMessage'. This is an unusual amount of time for an agent to process a single event. However, Transport will continue processing this message.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Event Type: Warning
Event Source: MSExchangeIS
Event Category: Virus Scanning
Event ID: 9874
Date:  4/28/2008
Time:  10:41:52 AM
User:  N/A
Computer: Mailserver1
Description:
Unexpected error 0x8004010f occurred in "EcProcessVirusScanQueueItem" during virus scanning.
Mailbox Database: /o=ExchangeSite /ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Configuration/cn=Servers/cn=Mailserver1/cn=Microsoft Private MDB
Folder ID: 5-33C5
Message ID: 1-325E91F864
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

I see a lot of Event ID 9874.  When I reboot the server, it takes at least two minutes to get to the log on box.  If I uninstall the Mailsecurity, I don't have these problems.




John Letourneau -> RE: Mailsecurity and event IDs (29.Apr.2008 9:44:15 AM)

techguy,

Do you have any other antivirus/antispam software configured on this server?  There is a known issue with Microsoft Forefront that can cause the Event ID above.




techguy -> RE: Mailsecurity and event IDs (29.Apr.2008 12:03:44 PM)

Why would I use any other exchange or file level anti-virus program when I installed the best and the greatest GFI mailsecurity?  No, I don't have any anti-virus program other than GFI Mailsecurity. 




John Letourneau -> RE: Mailsecurity and event IDs (29.Apr.2008 12:57:56 PM)

techguy,

While GFI MailSecurity does scan email and the information store it does not perform file level scans on that server.  That is why I was curious about this.

I would recommend contacting support directly with this issue.  Issues like this are normally one of a kind and not something that is general enough to troubleshoot on a forum.  Please visit the following link and create a support request:  http://support.gfi.com/supportrequestform.asp




Page: [1]