To stay updated on your favorite discussions, please create an account or log in. Then, click the Bookmark icon to subscribe and receive notifications.

Email server security quarantine is not working

Andy_4711
Andy_4711 Posts: 1 Security Scout
edited July 2022 in Business Suite

Hi there,

we have a fresh installation of exchange 2016 in hub transport role and install email server security 15 on the machine. The installation finished with no error also the configuration. The filtering works too because if we send an email with an office attachment (.xlsm is in our filter list) is not deliverd to the recipient. But the quarantine is empty (the mail should be moved there).

In the transport logfile I found this error (last line):

2021-12-10 13:14:52.528 [2bec.0063] I: FSecure.Ess.Agent.MessageScanner: Process attachment: 'lpise.jpeg'

2021-12-10 13:14:52.528 [2bec.0063] I: FSecure.AntiVirus.Exchange.Transport.TransportAgent: Message has to be deffered

2021-12-10 13:14:52.565 [2bec.00a1] I: FSecure.Ess.Agent.MessageScanner: Harmful web links count: 0

2021-12-10 13:14:52.565 [2bec.00a1] I: FSecure.AntiVirus.Exchange.Transport.TransportAgent: Message has to be deffered

2021-12-10 13:14:52.703 [2bec.007a] I: FSecure.Ess.Agent.MessageScanner: Harmful web links count: 0

2021-12-10 13:14:52.703 [2bec.007a] I: FSecure.AntiVirus.Exchange.Transport.TransportAgent: Message has to be deffered

2021-12-10 13:14:52.703 [2bec.006b] I: FSecure.Ess.Agent.MessageScanner: Spam level:9, returned spam level:9, prev spam level:-1

2021-12-10 13:14:52.703 [2bec.006b] I: FSecure.Ess.Agent.MessageScanner: Should be quarantined: True, reason: 'Spam', details: 'Spam, hits=9 required=5, details=Build: [Engines: 2.15.15.1355, Stamp: 3], Multi: [Enabled, t: (0.000014,0.163504)], BW: [Enabled, t: (0.000023)], RTDA: [Enabled, t: (0.048951), Hit: Yes, Details: v2.11.0; Id: 18.1i6p3j9.1fmi49086.1ugg1; ip(1403596599:843;); img(13942185420644648276:899;); url(3)], total: 1000(775)'

2021-12-10 13:14:52.703 [2bec.006b] I: FSecure.Ess.Agent.MessageScanner: Updated message reason: 'Spam', details: 'Spam, hits=9 required=5, details=Build: [Engines: 2.15.15.1355, Stamp: 3], Multi: [Enabled, t: (0.000014,0.163504)], BW: [Enabled, t: (0.000023)], RTDA: [Enabled, t: (0.048951), Hit: Yes, Details: v2.11.0; Id: 18.1i6p3j9.1fmi49086.1ugg1; ip(1403596599:843;); img(13942185420644648276:899;); url(3)], total: 1000(775)'

2021-12-10 13:14:52.727 [2bec.006b] *E: FSecure.Ess.Agent.MsgQuarantine: QuarantineMail() Failed System.ServiceModel.Security.SecurityAccessDeniedException: Der Zugriff wurde verweigert.

We can connect to the database for webgui -> email quarantine -> options -> test connection. We also can connect with fqmuser via SQL management studio. We can insert data in the table. But the table is empty.

On the filesystem we finaly grant full access to everybody at ..\programdata\fsecure\....

We tried every knowledge base article we found.


Any suggestion what we can try next?

Cheers,

Andy

Best Answer

  • Vad
    Vad Posts: 1,069 Cybercrime Crusader
    Solved

    Hello Andy,


    Please, contact support. We will need diagnostic information from your server for investigation.


    Best regards,

    Vad

This discussion has been closed.

Categories