Im on version 7.5, for some reason when closing out of the app the threshold number gets reset and and doesnt save the manual score I put in. When I re open a prompt comes up with a validation error stating i need to change the value of a positive integer between 25 and 89 when selecting premium antispam settings. Ive been adding the default of 72. Anyone come across this issue?
Dear sir
I have a windows server 2016 DC with exchange 2016 CU6.
I install a trial version of SMSMSE 7.5.6.152.
I have o problem; when i set "Enable Symantec Premium Antispam" every outgoing mails is block.( other functions of SMSMSE work)
There is a solution?
Thank you
Constantin Pintilie
Hi ,
I am going to install SMSMSE first time in a 5 years :)
Cant find the latest version Admin guide
Is it possible for someone to give me a direct link?
and if there are some pre requirements that i should be aware of i will be happy to know about
Thanks :)
Hello!
I have a fresh installation of MS Server 2016, Exchange 2016 CU8 and SMSMSE 7.5.6.152.
I have configured the scheduled scans, but after a new login, the list ist empty. But the scans are in the system, because i can see the scan activity in the event log.
This is the second time, this problem happens with this software combination. What can i do?
Hi,
fresh install Exchange 2016 on Windows Server 2016.
Install last SMSMSE 7.5 but on run i received this error (see attach).
Help me please
Hi
I keep getting an encrypted PDF form a trusted sender.
I don't want this email to go to quarantine.
What ever I put in the "Trusted Domains or Users" it always gets caught.
What do I need to to to allow these emails to be white listed?
Thanks.
Hi,
Does SMSME 7.5 have any command line tools to perform quarantine releases? Using the console is cumberson and we'd like a way to make this process go faster. We received tens of thousands of emails per day and our filtering is set such that there are many false positives. From those false positives, we identify a couple dozen per day that we release from quarantine and scan manually. Having command line tools available would be great so that this can be scripted.
We recently upgraded to SMSME 7.5.6.152 and since then we have seen a dramatic increase in the malformed file rule being triggered on the majority of Office 2016 / 365 file types. So far we have .docx, .pptx, .xlsx take the majority of the impact. We have the malformed file rule set to quarantine attachments and have gone from 1-2 a week prior to upgrade to 9 files a day now. Understanding that we can whitelist sender domains and/or file types (each of which have their own security issues and offer less protection), I was looking to see if anyone else has encountered this with this version or if there is a recommended course of action.
Just raising awareness: this is a valuable resource for anyone looking to understand the threat landscape and plan effective defenses.
2018 Internet Security Threat Report
https://www.symantec.com/security-center/threat-report
I am using Symantec Mail Security for Exchange version 7.5.5.128, with exchange server
I have been getting a lot os spam thru my filter and I have noticed that they are using the subject of the message as the sender address separated by dots.
How do I create a rule to block messages that 2 or more dots before the @ on a senders email address ?
For example lose.weight.fast@somewhere.com or burn.carbs.easily@somewhere.com
Thanks.
Hi,
We are running mail security for an customer and customer is claiming that some of the spam mail are not spam. Is there a way which we can redirect spam messages to user junk folder in their Exchange mailboxes instead of the default delete when it is detected.
We are running Exchange 2013 on WK12R2 and the latest version of mail security. Kindly advice
Regards,
TS
SMSMSE is not updating definitions on one of my Excchange servers. Support advised that I use their remove utility to uninstall it completely, and then re-install. I did that, and at the end of the install I got an error stating that it could register the SAVFMSELU.dll file and that I would have to register it manually. There is a Symantec KB with instructions on how to do this. But when I follow the instructions to register this .dll, I get an error stating that the .dll was loaded but the call to DllRegisterServer failed with the error code 0X80040154. Support is telling me that this is a Windows issue and that I have to investigate it on my own. But I keep running into dead ends. I am hoping there is someone on this forum who has perhaps seen this and can help me resolve it. I have SMSMSE installed on two Exchange servers, my CAS server and the server hosting the mailbox databases. It works fine on the CAS server. It is the mailbox server that is having the problem. Aside from their Exchange roles, both servers are identical. They are Windows Server 2008R2. The Symantec KB states that you may have to disable Tamper Protection on Endpoint Protection before registering the .dll. I have done that and still getting the error. Does anyone have any insight into this?
Hi,
Exchange 2016 CU9 has been out for almost 2 months now, but it is not yet listet on the "SMSMSE Exchange Server version certification matrix", TECH141889.
Any specific reson for this, any issues? Should customers with SMSMSE wait installing Exchange 2016 CU9?
How do I get the download for SMSE 7.9.0.30? It's not available at fileconnect yet. Thanks
I'm running a Windows 2008 R2 server with SEP SBE 12.1.5 and until last week SMSMSE 7.5.6. Liveupdate was disabled on SMSMSE, and when SEPM ran LU it would update both products.
I updated last week to SMSMSE 7.9 and read about liveupdate having to be enabled on SMSMSE as well, which I did. Today I find out SEP definitions are not updating (cryptic Return code = 2 when running liveupdate from SEPM). Tried disabling LU on SMSMSE but keep getting the same error. Tried cleaning up lucatalog and then update. Same error. Any ideas what to try next?
I tried releasing an email with a quarentined attachment. However, only the email was released, the attachment stayed encrypted and quarentined. I want to now "Release to File" but I don't see a way to access the email because it no longer shows up in the Quarentine list. Is there a way to do this?
After update Symantec Mail Security for Microsoft Exchange to 7.9.0.30 version all rules stopped working.
I tried to create new rules, but it isn't solved the problem.
what i can do for fix it?
My enviroment : DAG - Exchange 2016
Mirosoft Server 2012 R2
Dear Symatec,
I have just bought a Licesing Mail Security for MS Exchange.
I have followed the instructions to add the Order Number and Customer ID, but the error system does not exist
I tried to find email support but could not
Please help me
2 of the email servers in the DR not up to date with the Virus definations for past 5 days- and these are isolated from the internet.
System log generated the following message- Reputation check timed out during unproven file evaluation, likely due to network delays.
Any help is appreciated.
I upgraded Symantec Mail Security for Microsoft Exchange from version 7.5 to 7.9 and have several problems.
It is running on Windows server 2008 R2, using Exchange Server 2010 SP2.
Symptoms:
When I open the SMSMSE console (to the Home tab), a message box titled “An error occurred”, says “The report response is invalid.” (I Googled this but the pages I found did not seem relevant. I also copied cmaf_db.mdb from the server (at: C:\Program Files\Symantec\SMSMSE\7.9\Server\Reports), opened it in Microsoft Access, compacted and repaired it, then replaced it. Its size is 732 KB. I could open all tables in the database and read data, so the database is not corrupt.)
The Home tab lists all of the labels but there is no data displayed. For example, “Server name:” label is displayed but it does not show the server name.
When I generate a report from a template, it says it was successful, but the status of the report says Failed, and it cannot be opened.
When I go to the Reports tab and “Reset database statistics” (or reset any of the other statistics), a message box titled “An error occurred”, says “The error occurred reading from the pipe.”
I can go to other tabs and they seem to work correctly. Anti-spam seems to be working correctly; X-Brightmail is in messages received, and email is going thru to users.
On the Monitors tab, Server Status shows:
Auto-Protect state: Started, Enabled
Installed version: 7.9.0.30
Virus definitions date: 7/29/2018 Rev 2
Virus definitions license status: Valid
SMSMSE service state: Started
Immediately after installing the upgrade, neither the Symantec Mail Security for Microsoft Exchange or Symantec Mail Security Utility services were running. I manually started them and could see data in the Home tab a couple times. The services seemed to stop a couple times, so I rebooted the server. Since then no data has appeared on the Home tab.
The event log within SMSMSE is filed with the following 2 errors and warnings (These are also in the Windows event log):
Error: The process SAVFMSELog.EXE terminated unexpectedly.
Warning: The process SAVFMSELog.EXE was restarted
These events occur in pairs; the error and warning have the same time stamp and each pair occurs within a couple seconds to several minutes apart.
When I look at log entries from before I installed the new version, there are thousands of entries saying: Failed to load Symantec Premium AntiSpam engine.
This entry has not appeared after installing the new version.
The Windows event log shows the following error occurring at the same time go to the Home tab in the SMSMSE console:
----------------------------------
Log Name: Application
Source: Symantec Mail Security Managed Components
Event ID: 0
Level: Error
Computer: zzzzz.xxxxx.local
Description:
Time : Monday, July 30, 2018 9:45:27 AM
Outer Exception Type: System.Runtime.InteropServices.SEHException
Outer Exception Message: External component has thrown an exception.
Outer Exception Source: System.Data
---Outer Exception Stack Trace---
Server stack trace:
at Symantec.Cmaf.Reporting.DataAccess.ReportingDBAccess.SelectChartData(ChartData& chartData)
at System.Runtime.Remoting.Messaging.StackBuilderSink._PrivateProcessMessage(IntPtr md, Object[] args, Object server, Int32 methodPtr, Boolean fExecuteInContext, Object[]& outArgs)
at System.Runtime.Remoting.Messaging.StackBuilderSink.SyncProcessMessage(IMessage msg, Int32 methodPtr, Boolean fExecuteInContext)
Exception rethrown at [0]:
at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)
at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)
at Symantec.Cmaf.Reporting.DataAccess.ReportingDBAccess.SelectChartData(ChartData& chartData)
at Symantec.Cmaf.Reporting.Management.ReportingManager.ProcessAndGenerateCharts(ReportingDBAccess reportingDB, ReportBase reportData, ChartData& chartData, Boolean bGenerate)
at Symantec.Cmaf.Reporting.Management.ReportingManager.GenerateSummaryReport(String templateName, ReportTemplates reportTemplate)
Source : Symantec.Cmaf.Reporting.Management.ReportingManager::ProcessTemplateAndGenReport Thread:8
ProcessTemplateAndGenReport at offset 694 in file:line:column <filename unknown>:0:0
---------------------------------
I’m also getting many other (Windows event viewer) events that may pertain to my problem:
Many Event ID 24 errors saying: The Exchange certificate expired.
1 Event ID 101 from Automatic LiveUpdate Scheduler, saying: Failed unregistering service.
Many Event ID 1000, Application Error, saying: Faulting application name: SAVFMSELog.EXE, …, Faulting module name: KERNELBASE.dll…
Does anyone have a clue?
