cant read SSL Mails in intern mail network attachment smime.p7m

August 29, 2016, 3:33 am

≫ Next: SMSMSE 7.5.4.109 using too much memory

≪ Previous: Symantec block email access

$

0

0

I need a solution

Hello,

its a often problem, that secure Mails are not readable intern. The mail give only a attachment "smime.p7m".

We are working with mac OSX 10.9-10.10 and Outlook 2011 V14.5

The conding key in the contacts in outlook are wrong or lost. when I copy the key from a person without problems, it work for a few weeks.

It´s every time the same person with this problems, other mails/macs working OK with SSL

I hope to find a soluten with you.

Thank you Jenny

0

---

SMSMSE 7.5.4.109 using too much memory

September 20, 2016, 5:44 am

≫ Next: SMSMSE on Edge transport Exchange 2016 ?

≪ Previous: cant read SSL Mails in intern mail network attachment smime.p7m

$

0

0

I need a solution

Hi,

We have 2 units of Exchange 2013 servers, both installed with Symantec Mail Security for Microsoft Exchange (SMSMSE) 7.5.4.109 with Anti-spam Premium.

The SMSUtilityService.exe (Symantec Mail Security Utility Service) process is using 1.8GB memory, even after restarted the server.

Anyone have a solution to fix or limit this? Thank you very much in advance.

0

SMSMSE on Edge transport Exchange 2016 ?

October 4, 2016, 1:21 am

≫ Next: Surge of email attacks using malicious WSF attachments

≪ Previous: SMSMSE 7.5.4.109 using too much memory

$

0

0

I need a solution

Hi,i found a article

If you are installing SMSMSE on an Exchange 2007 server or an Exchange 2010 server,install the product on all of the following server roles in your organization: 

• Edge Transport servers, if available
• Hub Transport servers
• Mailbox servers

But there is nothing for Exchange 2016; how to install or configure it on a transport edge

or is it not required any more?

best regards

Markus

0

Surge of email attacks using malicious WSF attachments

October 13, 2016, 3:33 am

≫ Next: Mail rejected with no content in mail body

≪ Previous: SMSMSE on Edge transport Exchange 2016 ?

$

0

0

I do not need a solution (just sharing information)

Just raising awareness of this new Security Response blog post:

Surge of email attacks using malicious WSF attachments
https://www.symantec.com/connect/blogs/surge-email-attacks-using-malicious-wsf-attachments

Please do configure mail servers and mail security products to block these and other malicious attachments!

Support Perspective: W97M.Downloader Battle Plan
https://www-secure.symantec.com/connect/articles/support-perspective-w97mdownloader-battle-plan

With thanks and best regards,

Mick

0

Mail rejected with no content in mail body

October 31, 2016, 4:12 am

≫ Next: Symantec mail security for Microsoft exchange

≪ Previous: Surge of email attacks using malicious WSF attachments

$

0

0

I need a solution

Hi everyone,

I have a problem with some emails sent to our mail domain. I have SMSfME 7.5.4.109 with Exchange server 2013.

If someone send email to our mail domain with no contents in mail body, smsfme agent reject that mail.

Some customers send us emails with attachments but with no contents in body. That emails are rejected by smsfme.

If customers type anything in mail body, we regularly receive that emails.

Can someone help me to resolve this issue ?

Thanks in advance

0

Symantec mail security for Microsoft exchange

November 6, 2016, 12:27 am

≫ Next: SMSMSE 7.5.5.128 File Type Filtering Rule Problem

≪ Previous: Mail rejected with no content in mail body

$

0

0

I need a solution

Dear All , 

please i have SMSME 6.5.5.255 version for exchange 2003 SP2  , i have an error  "live update was unable to complete successfully"

and there was other error that when i login to reports there was an error an existing connection was forcibly closed by the remote host" +"no connection could be made because the target machine actively refused it 127.0.0.1:58081"

0

• symantec error.JPG
• symantec error2.JPG
• SYMANTEC MAIL SECURITY 2.JPG

SMSMSE 7.5.5.128 File Type Filtering Rule Problem

November 21, 2016, 2:30 am

≫ Next: Exchange cmdlets to check SMSMSE status

≪ Previous: Symantec mail security for Microsoft exchange

$

0

0

I need a solution

Hello Symantec,

I installed new Version 7.5.5. with new File Type Filtering. But who defines this rules?

Jar and zip has the same Filter and cannot be filtered individually. When i want to filter *.jar, i also have to Filter *.zip. This makes no sense.

0

Exchange cmdlets to check SMSMSE status

November 25, 2016, 6:21 am

≫ Next: SMSMSE 7.5.5.128 Executable File Type Filtering Rule Blocking Office documents

≪ Previous: SMSMSE 7.5.5.128 File Type Filtering Rule Problem

$

0

0

I need a solution

Hello everyone,

Could some one tell me if there is some helpfull cmdlets that we can use with Exchange Management Shell to check the virus definition, product version, scann status... In our environnement we have Exchange 2010 sp3 and Mail Secutity product of Symantec.

Thanks a lot for your help

0

---

SMSMSE 7.5.5.128 Executable File Type Filtering Rule Blocking Office documents

December 2, 2016, 1:16 am

≫ Next: SMSMSE 7.5.5.128 Not scanning spam emails

≪ Previous: Exchange cmdlets to check SMSMSE status

$

0

0

I need a solution

Hi,

I recently upgraded to SMSMSE 7.5.5.128 and I now have a problem that SMSME is now blocking certain Powerpoint PPTX files and calendar items with attachments claiming that they are executable files. I analyzed one of the PPTX files that was being blocked and it was a simple powerpoint presentation containing no macros or embedded objects so I don't have a clue why the Powerpoint document is being treated as an executable file.

I have not made any changes to the Executable File Rule since the upgrade and before the upgrade we never had any issues.

0

• Executable File Rule.png

SMSMSE 7.5.5.128 Not scanning spam emails

December 6, 2016, 12:21 pm

≫ Next: The message "xxx" located in SMTP has violated the following policy

≪ Previous: SMSMSE 7.5.5.128 Executable File Type Filtering Rule Blocking Office documents

$

0

0

I need a solution

I have an Exchange 2010 single server sitting on a Windows 2008 box.
SMSMSE 7.5.5.128 is installed but not scanning or detecting any spam.  

It's showing a lot of Auto-Protect Scans and catching some Content Violations, but no Spam whatsoever.
And we are being inundated by spam... blatant spam, and it's not detecting it.

It is enabled, licensing is good, virus defs up to date, upgraded install just today.

Transport Agents are set and it is ahead of Exchange's Anti-Spam agents:

1	Transport Rule Agent	TRUE
2	Text Messaging Routing Agent	TRUE
3	Text Messaging Delivery Agent	TRUE
4	SMSMSERoutingAgent	TRUE
5	SMSMSESMTPAgent	TRUE
6	Connection Filtering Agent	TRUE
7	Content Filter Agent	TRUE
8	Sender Id Agent	TRUE
9	Sender Filter Agent	TRUE
10	Recipient Filter Agent	TRUE
11	Protocol Analysis Agent	TRUE

The OnEndOfData has SMSMSESMTPAgent listed first.
The OnSubmittedMessage has SMSMSERoutingAgent has it listed.

It should be picking up on some messages.

Am I missing something here?  Any suggestions?

0

The message "xxx" located in SMTP has violated the following policy

January 9, 2017, 12:44 am

≫ Next: The difference between Greenbug and Shamoon cyber attacks

≪ Previous: SMSMSE 7.5.5.128 Not scanning spam emails

$

0

0

I need a solution

Hi,

I have seen below Event Log a few times. I would like to know if "located in SMTP" means our user is sending this virus email?

=====

The message "Spam:Notification status of your delivery (FedEx 0000147097)" located in SMTP has violated the following policy:
    Scan: Auto-Protect
    Rule Violated: Unrepairable Virus Rule
    Action taken: Quarantine Entire Message
Complete message has been Quarantined.

=====

0

The difference between Greenbug and Shamoon cyber attacks

January 23, 2017, 1:58 pm

≫ Next: Symantec mail Security Upgrade from 7.5.1.83 to 7.5.5.128

≪ Previous: The message "xxx" located in SMTP has violated the following policy

$

0

0

I need a solution

Is there a link between Greenbug and the disk-wiping Shamoon attacks ??

Appreciate the feedback !

0

Symantec mail Security Upgrade from 7.5.1.83 to 7.5.5.128

February 2, 2017, 2:24 am

≫ Next: Need info SMSME

≪ Previous: The difference between Greenbug and Shamoon cyber attacks

$

0

0

I need a solution

Dear All,

I need to upgrade Symantec mail security from 7.5.1.83 to 7.5.5.128. Can anyone tell me prerequistis needs to be taken and also if anyone can share the link for the setups.

Regards,

M

0

Need info SMSME

July 12, 2016, 10:48 pm

≫ Next: Blocked Domain Emails

≪ Previous: Symantec mail Security Upgrade from 7.5.1.83 to 7.5.5.128

$

0

0

I need a solution

Dear All,

What are the different between?  Total Scanned, Auto-Protect, Scheduled Scans, Ant spam Scans, Not Spam, Spam, Sup. Spam. Why? The mail scan count does not match as per the report?

0

Blocked Domain Emails

July 15, 2016, 10:35 am

≫ Next: Quarantine release

≪ Previous: Need info SMSME

$

0

0

I need a solution

Receintly I was forced to change Mailscan products due to availiability.When I went to install I initially just ubibstakked the old product and installed the new After which email would flow to web email account s but not "HardDomains" For those we could email out but everythign was gettign blocked comming back in. If I uninstall the Mailscan all works fine again. I Tried installing to a different port but to no avail.

 Environment

Win 2006S R2 Enterprise SP1 x 64 on Esxi 5.5 VM

 Exchange 2010 Ver 14.03.0224.002

 Symantec Mail Security for Microsoft Exchange version 7.5

0

---

Quarantine release

July 18, 2016, 11:37 pm

≫ Next: Special Report: Ransomware and Businesses 2016

≪ Previous: Blocked Domain Emails

$

0

0

I need a solution

Is there a way to release emails from the quarantine in their original format? I mean now the released emails delivered as a mail from SMSMSE, and the original message is in a .msg file.

0

Special Report: Ransomware and Businesses 2016

July 19, 2016, 6:51 am

≫ Next: SMSMSE Content Enforcement Rules

≪ Previous: Quarantine release

$

0

0

I do not need a solution (just sharing information)

Just raising awareness of a new whitepaper from Symantec Security Response:

REPORT: Organizations must respond to increasing threat of ransomware
https://www.symantec.com/connect/blogs/report-organizations-must-respond-increasing-threat-ransomware

Ransomware can be incredibly destructive.  Please take time to read this report, then take any measures possible to reduce the risk of a successful ransomware attack against your network and data!

0

SMSMSE Content Enforcement Rules

July 28, 2016, 12:25 am

≫ Next: AntiVirus updates running on 8.1.3 for Domino

≪ Previous: Special Report: Ransomware and Businesses 2016

$

0

0

I need a solution

 Is there any way to apply the Content Enforcement Rules only to outbound emails? 

0

AntiVirus updates running on 8.1.3 for Domino

August 11, 2016, 9:54 am

≫ Next: Symantec block email access

≪ Previous: SMSMSE Content Enforcement Rules

$

0

0

I need a solution

Hi All, Need to know when virus definition updates will no longer be avaialble for Symantec Mail Security for Domino 8.1.3 which was EOL'd May 2016. Thanks in advancd. Need to plan...

0

Symantec block email access

August 18, 2016, 11:06 am

≫ Next: cant read SSL Mails in intern mail network attachment smime.p7m

≪ Previous: AntiVirus updates running on 8.1.3 for Domino

$

0

0

I need a solution

Dear all,

I'm having issue with our exim relay server. The email has been blocked from sending by Symantec. FYI, the emails are notification for our server/application monitoring.

2016-08-19 01:53:52 1baRVo-000Geb-9Z <= <> R=1baRVX-000GeP-FL U=Debian-exim P=local S=18625 T="Mail delivery failed: returning message to sender"
2016-08-19 01:53:52 1baRVo-000Geb-9Z ** ema@ericsson.com<EMA@ericsson.com> R=dnslookup T=remote_smtp: SMTP error from remote mail server after initial connection: host sesbmg12.ericsson.net [193.180.251.40]: 554 5.7.1 You are not allowed to connect. Please refer to http://ipremoval.sms.symantec.com/ for further information.
2016-08-19 01:53:52 1baRVo-000Geb-9Z Frozen (delivery error message)

When I check the mention IP at http://ipremoval.sms.symantec.com/, it say that The IP address you submitted, 193.180.251.40, does not have a negative reputation and therefore cannot be submitted for investigation.

Very appreciate for some feedback on how to allow the email to be sent again.

Thanks,

Luqman

0