cant read SSL Mails in intern mail network attachment smime.p7m

August 29, 2016, 3:33 am

≫ Next: SMSMSE 7.5.4.109 using too much memory

I need a solution

Hello,

its a often problem, that secure Mails are not readable intern. The mail give only a attachment "smime.p7m".

We are working with mac OSX 10.9-10.10 and Outlook 2011 V14.5

The conding key in the contacts in outlook are wrong or lost. when I copy the key from a person without problems, it work for a few weeks.

It´s every time the same person with this problems, other mails/macs working OK with SSL

I hope to find a soluten with you.

Thank you Jenny

↧

SMSMSE 7.5.4.109 using too much memory

September 20, 2016, 5:44 am

≫ Next: SMSMSE on Edge transport Exchange 2016 ?

≪ Previous: cant read SSL Mails in intern mail network attachment smime.p7m

I need a solution

Hi,

We have 2 units of Exchange 2013 servers, both installed with Symantec Mail Security for Microsoft Exchange (SMSMSE) 7.5.4.109 with Anti-spam Premium.

The SMSUtilityService.exe (Symantec Mail Security Utility Service) process is using 1.8GB memory, even after restarted the server.

Anyone have a solution to fix or limit this? Thank you very much in advance.

↧

SMSMSE on Edge transport Exchange 2016 ?

October 4, 2016, 1:21 am

≫ Next: Surge of email attacks using malicious WSF attachments

≪ Previous: SMSMSE 7.5.4.109 using too much memory

I need a solution

Hi,i found a article

If you are installing SMSMSE on an Exchange 2007 server or an Exchange 2010 server,install the product on all of the following server roles in your organization:

Edge Transport servers, if available
Hub Transport servers
Mailbox servers

But there is nothing for Exchange 2016; how to install or configure it on a transport edge

or is it not required any more?

best regards

Markus

↧

Surge of email attacks using malicious WSF attachments

October 13, 2016, 3:33 am

≫ Next: Mail rejected with no content in mail body

≪ Previous: SMSMSE on Edge transport Exchange 2016 ?

I do not need a solution (just sharing information)

Just raising awareness of this new Security Response blog post:

Surge of email attacks using malicious WSF attachments
https://www.symantec.com/connect/blogs/surge-email-attacks-using-malicious-wsf-attachments

Please do configure mail servers and mail security products to block these and other malicious attachments!

Support Perspective: W97M.Downloader Battle Plan
https://www-secure.symantec.com/connect/articles/support-perspective-w97mdownloader-battle-plan

With thanks and best regards,

Mick

↧

Mail rejected with no content in mail body

October 31, 2016, 4:12 am

≫ Next: Symantec mail security for Microsoft exchange

≪ Previous: Surge of email attacks using malicious WSF attachments

I need a solution

Hi everyone,

I have a problem with some emails sent to our mail domain. I have SMSfME 7.5.4.109 with Exchange server 2013.

If someone send email to our mail domain with no contents in mail body, smsfme agent reject that mail.

Some customers send us emails with attachments but with no contents in body. That emails are rejected by smsfme.

If customers type anything in mail body, we regularly receive that emails.

Can someone help me to resolve this issue ?

Thanks in advance

↧

Symantec mail security for Microsoft exchange

November 6, 2016, 12:27 am

≫ Next: SMSMSE 7.5.5.128 File Type Filtering Rule Problem

≪ Previous: Mail rejected with no content in mail body

I need a solution

Dear All ,

please i have SMSME 6.5.5.255 version for exchange 2003 SP2 , i have an error "live update was unable to complete successfully"

and there was other error that when i login to reports there was an error an existing connection was forcibly closed by the remote host" +"no connection could be made because the target machine actively refused it 127.0.0.1:58081"

↧

SMSMSE 7.5.5.128 File Type Filtering Rule Problem

November 21, 2016, 2:30 am

≫ Next: Exchange cmdlets to check SMSMSE status

≪ Previous: Symantec mail security for Microsoft exchange

I need a solution

Hello Symantec,

I installed new Version 7.5.5. with new File Type Filtering. But who defines this rules?

Jar and zip has the same Filter and cannot be filtered individually. When i want to filter *.jar, i also have to Filter *.zip. This makes no sense.

↧

Exchange cmdlets to check SMSMSE status

November 25, 2016, 6:21 am

≫ Next: SMSMSE 7.5.5.128 Executable File Type Filtering Rule Blocking Office documents

≪ Previous: SMSMSE 7.5.5.128 File Type Filtering Rule Problem

I need a solution

Hello everyone,

Could some one tell me if there is some helpfull cmdlets that we can use with Exchange Management Shell to check the virus definition, product version, scann status... In our environnement we have Exchange 2010 sp3 and Mail Secutity product of Symantec.

Thanks a lot for your help

↧

SMSMSE 7.5.5.128 Executable File Type Filtering Rule Blocking Office documents

December 2, 2016, 1:16 am

≫ Next: SMSMSE 7.5.5.128 Not scanning spam emails

≪ Previous: Exchange cmdlets to check SMSMSE status

I need a solution

Hi,

I recently upgraded to SMSMSE 7.5.5.128 and I now have a problem that SMSME is now blocking certain Powerpoint PPTX files and calendar items with attachments claiming that they are executable files. I analyzed one of the PPTX files that was being blocked and it was a simple powerpoint presentation containing no macros or embedded objects so I don't have a clue why the Powerpoint document is being treated as an executable file.

I have not made any changes to the Executable File Rule since the upgrade and before the upgrade we never had any issues.

Executable File Rule.png

↧

SMSMSE 7.5.5.128 Not scanning spam emails

December 6, 2016, 12:21 pm

≫ Next: The message "xxx" located in SMTP has violated the following policy

≪ Previous: SMSMSE 7.5.5.128 Executable File Type Filtering Rule Blocking Office documents

I need a solution

I have an Exchange 2010 single server sitting on a Windows 2008 box.
SMSMSE 7.5.5.128 is installed but not scanning or detecting any spam.

It's showing a lot of Auto-Protect Scans and catching some Content Violations, but no Spam whatsoever.
And we are being inundated by spam... blatant spam, and it's not detecting it.

It is enabled, licensing is good, virus defs up to date, upgraded install just today.

Transport Agents are set and it is ahead of Exchange's Anti-Spam agents:

1	Transport Rule Agent	TRUE
2	Text Messaging Routing Agent	TRUE
3	Text Messaging Delivery Agent	TRUE
4	SMSMSERoutingAgent	TRUE
5	SMSMSESMTPAgent	TRUE
6	Connection Filtering Agent	TRUE
7	Content Filter Agent	TRUE
8	Sender Id Agent	TRUE
9	Sender Filter Agent	TRUE
10	Recipient Filter Agent	TRUE
11	Protocol Analysis Agent	TRUE

The OnEndOfData has SMSMSESMTPAgent listed first.
The OnSubmittedMessage has SMSMSERoutingAgent has it listed.

It should be picking up on some messages.

Am I missing something here? Any suggestions?

↧

The message "xxx" located in SMTP has violated the following policy

January 9, 2017, 12:44 am

≫ Next: The difference between Greenbug and Shamoon cyber attacks

≪ Previous: SMSMSE 7.5.5.128 Not scanning spam emails

I need a solution

Hi,

I have seen below Event Log a few times. I would like to know if "located in SMTP" means our user is sending this virus email?

=====

The message "Spam:Notification status of your delivery (FedEx 0000147097)" located in SMTP has violated the following policy:
   Scan: Auto-Protect
   Rule Violated: Unrepairable Virus Rule
   Action taken: Quarantine Entire Message
Complete message has been Quarantined.

=====

↧

The difference between Greenbug and Shamoon cyber attacks

January 23, 2017, 1:58 pm

≫ Next: Symantec mail Security Upgrade from 7.5.1.83 to 7.5.5.128

≪ Previous: The message "xxx" located in SMTP has violated the following policy

I need a solution

Is there a link between Greenbug and the disk-wiping Shamoon attacks ??

Appreciate the feedback !

↧

Symantec mail Security Upgrade from 7.5.1.83 to 7.5.5.128

February 2, 2017, 2:24 am

≫ Next: OAB updates blocked due to Unscannable File Rule

≪ Previous: The difference between Greenbug and Shamoon cyber attacks

I need a solution

Dear All,

I need to upgrade Symantec mail security from 7.5.1.83 to 7.5.5.128. Can anyone tell me prerequistis needs to be taken and also if anyone can share the link for the setups.

Regards,

↧

OAB updates blocked due to Unscannable File Rule

February 20, 2017, 8:14 am

≫ Next: URL Scanning

≪ Previous: Symantec mail Security Upgrade from 7.5.1.83 to 7.5.5.128

I need a solution

Hello,

I am having an issue where SMSMSE seems to be quarantining and stopping my Clients downloading updates to our OAB/GAL.

I get Event ID 218 stating:

The message "\Global Address List - data.oab - 617" located in /OFFLINE ADDRESS BOOK//o=MYDOMAIN/cn=addrlists/cn=oabs/cn=ES Default Offline Address Book/OAB Version 4 has violated the following policy settings:
   Scan: Auto-Protect
   Rule: Unscannable File Rule
The following actions were taken on it:
   The message "\Global Address List - data.oab - 617" was marked for Quarantine for the following reason(s):
Timeout occurred while scanning this item

For more information, visit https://entced.symantec.com/entt?product=SMSMSE&bu....

I have checked all the setting on the Exhange side (Exch 2010) to make sure my OAB is set up correctly, and I think I have narrowed it down to the above.

I have tried adding my domain to the list of internal domains in SMSMSE and nothing has worked. Any guidance or other things to check would be appreciated.

Many Thanks,

Sam

↧

URL Scanning

March 2, 2017, 11:08 am

≫ Next: Virus Attack - Outbreak.

≪ Previous: OAB updates blocked due to Unscannable File Rule

I do not need a solution (just sharing information)

How do i set it up so Syamntec Scans for known bad URLs without using Premium Anti-SPAM? Is this possible? I would like to scan messages bodies and/or attachments that contain known bad URL lists.

We are running SMSMSE 7.5.5.

Thanks,

Robert

↧

Virus Attack - Outbreak.

March 2, 2017, 11:26 am

≫ Next: Cerber Ransomware encrypts my files.

≪ Previous: URL Scanning

I need a solution

Yesterday the company i work for got hit with about 500 attempted deliveries of infected emails (Same virus). about 120 of them were actually delivrered to the users mailboxes.

I submitted a few samples to symantec and then symantec created new definitions and those were rolled out. However what i want to do is to scan all the users mailboxes and see if i can find any additional emails (that i wasnt aware of which may be infected) or scan and remove any leftover messages from yesterdays attack.

When i scan today with new definitions, even through the infected email message is still in my mailbox, Syamntec does not remove the infected email. Its unable to find it.

Shouldnt Symantec scan and remove the infected email itself? note: there were no atachments on the infected emails we received yesterday, just one obfuscated link (the rest of the links were good).

Thanks,

Robert

↧

Cerber Ransomware encrypts my files.

March 13, 2017, 1:09 pm

≫ Next: Getting below message when I send a file

≪ Previous: Virus Attack - Outbreak.

I need a solution

Hello. I have a problem with my laptop. All my files are crypted with Cerber Ransomware. How can I restore them? Are there any usefull Decryptor-tools by Symantec for this purpose?

Thanks

↧

Getting below message when I send a file

March 19, 2017, 11:00 pm

≫ Next: mail security blocking emails with .emdf files with scanning time limit & malformed

≪ Previous: Cerber Ransomware encrypts my files.

I need a solution

"Symantec Mail Security replaced Excise Invoice 4700018726.PDF with this text message.  The original file was a malformed file, therefore it cannot be scanned and was quarantined."

Do anyone knows what may be the reason and how do i solve it?

1490028844

↧

mail security blocking emails with .emdf files with scanning time limit & malformed

May 3, 2017, 3:47 am

≫ Next: Symantec Mail Security detected an error in a message you sent from your address

≪ Previous: Getting below message when I send a file

I need a solution

we are facing issue with emails with attachments, user had attached .emdf files it went to quarantine, message came to the receipt

I had removed from the quarantine folder but still doen't went to the receipt and please find below are my scanning limits

snapshot.

time limit.JPG

↧

Symantec Mail Security detected an error in a message you sent from your address

May 8, 2017, 2:18 am

≫ Next: Using content filter to block attachments - but need to allow 1 users through

≪ Previous: mail security blocking emails with .emdf files with scanning time limit & malformed

I need a solution

Symantec Mail Security is sending the following notification message to an internal sender:

Subject

Symantec Mail Security detected an error in a message you sent from your address

Body

Subject of the message: <Subject of the message sent from the sender>

Recipient of the message: <Recipient address>

Server Name: <Server Name>

The message was delivered succesfully to the recipient. Nothing about this message is found in the event log. I didn't find any reference online about this error. When the user send the same message again, the same notification message is sent.

↧