F-Secure Content Scanner Server error
Dear F-Secure,
On our Exchange Server 2013 server, I have started getting messages similar to below for the past 20 hours.
Product: F-Secure Content Scanner Server (OID: 1.3.6.1.4.1.2213.18)
Severity: error (3)
Message: Scanning 'message' by F-Secure Spam Scanner was unsuccessful. Reason: no response from cloud. 29 similar errors occurred in last 10 minutes.
Server is Microsoft Windows Server 2012 R2 on a Physical box.
We have a very good internet connection.
F-Secure details:
F-Secure E-mail and Server Security 11.01 build 157
F-Secure Anti-Virus for Microsoft Exchange 10.00 build 416
F-Secure Content Scanner Server 7.30 build 485c
F-Secure Anti-Virus 9.51 build 136
F-Secure Automatic Update Agent 8.36 build 130
F-Secure Management Agent 8.60 build 350
F-Secure Web UI 1.50 build 267
F-Secure User Interface 9.34 build 11983
F-Secure ORSP Client 1.0.25 build 2275
F-Secure Aquarius 11.0.1 2015-10-06_05
F-Secure Hydra 5.14.151 2015-10-05_01
F-Secure Gemini 3.2.384 2015-10-02_01
Appears to be with 1.3.6.1.4.1.2213.18.1 / 1.3.6.1.4.1.2213.18.6 update
25711 2015-10-05 12:09:09+01:00 Ex2013Svr Ex2013Svr\Administrator F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.6
Finished updating Aquarius engine databases.
25712 2015-10-05 12:09:40+01:00 Ex2013Svr Ex2013Svr\Administrator F-Secure Anti-Virus 1.3.6.1.4.1.2213.12
The integrity of virus definition database update 2015-10-05_05 has been successfully verified.
25713 2015-10-05 12:10:43+01:00 Ex2013Svr Ex2013Svr\Administrator F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.1
F-Secure Aquarius started.
25714 2015-10-05 12:11:29+01:00 Ex2013Svr Ex2013Svr\Administrator F-Secure Anti-Virus 1.3.6.1.4.1.2213.12
Virus definition database(s) 7zip.xmd access.xmd ... zoo.xmd updated successfully.
25715 2015-10-05 13:08:06+01:00 Ex2013Svr SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.6
Started updating spam scanner databases.
25716 2015-10-05 13:08:08+01:00 Ex2013Svr SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.6
The integrity of database update aspam-update.mf has been successfully verified.
25717 2015-10-05 13:08:08+01:00 Ex2013Svr SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.1
The following database files have been updated successfully: fpiloader.conf, aspam.cr, aspam-update.mf, aspam-update.ini, aspam\mimepack.dll, aspam\fsbd.conf, aspam\bdnc.ini, aspam\bdnc.dll, aspam\asunicode.dll, aspam\asregex.dll, aspam\aspam.dll, aspam\asmcocr.dll, aspam\asextract.ini, aspam\asemlthin.mdl, aspam\ascore.dll, aspam\asconf.ini, aspam\AntispamThin.dll.
25718 2015-10-05 13:08:08+01:00 Ex2013Svr SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.1
F-Secure Spam Scanner stopped.
25719 2015-10-05 13:08:10+01:00 Ex2013Svr SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.1
F-Secure Spam Scanner started.
25720 2015-10-05 13:08:10+01:00 Ex2013Svr SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.6
Finished updating spam scanner databases.
25721 2015-10-05 13:09:27+01:00 Ex2013Svr SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.1
Scanning 'message' by F-Secure Spam Scanner was unsuccessful. Reason: no response from cloud.
25722 2015-10-05 13:20:42+01:00 Ex2013Svr SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.1
Scanning 'message' by F-Secure Spam Scanner was unsuccessful. Reason: no response from cloud. 24 similar errors occurred in last 11 minutes.
25723 2015-10-05 13:30:42+01:00 Ex2013Svr SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.1
Scanning 'message' by F-Secure Spam Scanner was unsuccessful. Reason: no response from cloud. 14 similar errors occurred in last 10 minutes.
25724 2015-10-05 13:41:45+01:00 Ex2013Svr SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.1
Scanning 'message' by F-Secure Spam Scanner was unsuccessful. Reason: no response from cloud. 17 similar errors occurred in last 11 minutes.
25725 2015-10-05 13:51:45+01:00 Ex2013Svr SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.1
Scanning 'message' by F-Secure Spam Scanner was unsuccessful. Reason: no response from cloud. 14 similar errors occurred in last 10 minutes.
25726 2015-10-05 14:01:45+01:00 Ex2013Svr SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.1
Scanning 'message' by F-Secure Spam Scanner was unsuccessful. Reason: no response from cloud. 17 similar errors occurred in last 10 minutes.
25727 2015-10-05 14:08:51+01:00 Ex2013Svr SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.6
Started updating Aquarius engine databases.
25728 2015-10-05 14:09:59+01:00 Ex2013Svr SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.6
The integrity of database update aquarius-update.mf has been successfully verified.
25729 2015-10-05 14:10:03+01:00 Ex2013Svr SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.1
The following database files have been updated successfully: zoo.xmd, zip.xmd, ... 7zip.xmd.
25730 2015-10-05 14:10:04+01:00 Ex2013Svr SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.1
F-Secure Aquarius stopped.
25731 2015-10-05 14:10:04+01:00 Ex2013Svr SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.6
Finished updating Aquarius engine databases.
25732 2015-10-05 14:10:37+01:00 Ex2013Svr SYSTEM F-Secure Anti-Virus 1.3.6.1.4.1.2213.12
The integrity of virus definition database update 2015-10-05_06 has been successfully verified.
25733 2015-10-05 14:10:45+01:00 Ex2013Svr SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.1
Can you explain what is going on?
Kind Regards
Paul HS
Comments
-
Some Logs for those interested....
25710 2015-10-05 12:09:09+01:00 SERVER SERVER\Administrator F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.1
F-Secure Aquarius stopped.
25711 2015-10-05 12:09:09+01:00 SERVER SERVER\Administrator F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.6
Finished updating Aquarius engine databases.
25712 2015-10-05 12:09:40+01:00 SERVER SERVER\Administrator F-Secure Anti-Virus 1.3.6.1.4.1.2213.12
The integrity of virus definition database update 2015-10-05_05 has been successfully verified.
25713 2015-10-05 12:10:43+01:00 SERVER SERVER\Administrator F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.1
F-Secure Aquarius started.
25714 2015-10-05 12:11:29+01:00 SERVER SERVER\Administrator F-Secure Anti-Virus 1.3.6.1.4.1.2213.12
Virus definition database(s) 7zip.xmd access.xmd ace.xmd adsntfs.xmd aitok.cvd alz.xmd aqu.index aquarius-update.ini aquarius-update.mf ar.xmd arc.xmd arj.xmd aspy_emu.cvd auto.cvd auto.xmd autoit.xmd avxdisk.xmd bach.xmd bdcore.dll boot.xmd bzip2.xmd cab.xmd cache.000 cache.001 cache.002 cache.003 cache.004 cache.005 cache.006 cache.007 cache.008 cache.009 cache.010 cache.011 cache.012 cache.013 cache.014 cache.015 cache.016 cevakrnl.cvd cevakrnl.ivd cevakrnl.rv0 cevakrnl.rv1 cevakrnl.rv2 cevakrnl.rv3 cevakrnl.rv4 cevakrnl.rv5 cevakrnl.rv6 cevakrnl.rv7 cevakrnl.rv8 cevakrnl.rv9 cevakrnl.rvd cevakrnl.xmd ceva_dll.cvd ceva_emu.cvd ceva_vfs.cvd ceva_vfs.ivd chm.xmd cookie.cvd cookie.xmd cpio.xmd cran.cvd cran.ivd dalvik.cvd dalvik.ivd dalvik.xmd dbx.xmd disp.xmd docfile.xmd dummyarch.xmd dummyscan.xmd emalware.000 emalware.001 … updated successfully (concatenated).
25715 2015-10-05 13:08:06+01:00 SERVER SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.6
Started updating spam scanner databases.
25716 2015-10-05 13:08:08+01:00 SERVER SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.6
The integrity of database update aspam-update.mf has been successfully verified.
25717 2015-10-05 13:08:08+01:00 SERVER SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.1
The following database files have been updated successfully: fpiloader.conf, aspam.cr, aspam-update.mf, aspam-update.ini, aspam\mimepack.dll, aspam\fsbd.conf, aspam\bdnc.ini, aspam\bdnc.dll, aspam\asunicode.dll, aspam\asregex.dll, aspam\aspam.dll, aspam\asmcocr.dll, aspam\asextract.ini, aspam\asemlthin.mdl, aspam\ascore.dll, aspam\asconf.ini, aspam\AntispamThin.dll.
25718 2015-10-05 13:08:08+01:00 SERVER SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.1
F-Secure Spam Scanner stopped.
25719 2015-10-05 13:08:10+01:00 SERVER SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.1
F-Secure Spam Scanner started.
25720 2015-10-05 13:08:10+01:00 SERVER SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.6
Finished updating spam scanner databases.
25721 2015-10-05 13:09:27+01:00 SERVER SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.1
Scanning 'message' by F-Secure Spam Scanner was unsuccessful. Reason: no response from cloud.
25722 2015-10-05 13:20:42+01:00 SERVER SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.1
Scanning 'message' by F-Secure Spam Scanner was unsuccessful. Reason: no response from cloud. 24 similar errors occurred in last 11 minutes.
25723 2015-10-05 13:30:42+01:00 SERVER SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.1
Scanning 'message' by F-Secure Spam Scanner was unsuccessful. Reason: no response from cloud. 14 similar errors occurred in last 10 minutes.
25724 2015-10-05 13:41:45+01:00 SERVER SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.1
Scanning 'message' by F-Secure Spam Scanner was unsuccessful. Reason: no response from cloud. 17 similar errors occurred in last 11 minutes.
25725 2015-10-05 13:51:45+01:00 SERVER SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.1
Scanning 'message' by F-Secure Spam Scanner was unsuccessful. Reason: no response from cloud. 14 similar errors occurred in last 10 minutes.
25726 2015-10-05 14:01:45+01:00 SERVER SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.1
Scanning 'message' by F-Secure Spam Scanner was unsuccessful. Reason: no response from cloud. 17 similar errors occurred in last 10 minutes.
25727 2015-10-05 14:08:51+01:00 SERVER SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.6
Started updating Aquarius engine databases.
25728 2015-10-05 14:09:59+01:00 SERVER SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.6
The integrity of database update aquarius-update.mf has been successfully verified.
25729 2015-10-05 14:10:03+01:00 SERVER SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.1
The following database files have been updated successfully: zoo.xmd, zip.xmd, ..., ace.xmd, access.xmd, 7zip.xmd. (Concatenated)
25730 2015-10-05 14:10:04+01:00 SERVER SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.1
F-Secure Aquarius stopped.
25731 2015-10-05 14:10:04+01:00 SERVER SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.6
Finished updating Aquarius engine databases.
25732 2015-10-05 14:10:37+01:00 SERVER SYSTEM F-Secure Anti-Virus 1.3.6.1.4.1.2213.12
The integrity of virus definition database update 2015-10-05_06 has been successfully verified.
25733 2015-10-05 14:10:45+01:00 SERVER SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.1
F-Secure Aquarius started.
25734 2015-10-05 14:11:20+01:00 SERVER SYSTEM F-Secure Anti-Virus 1.3.6.1.4.1.2213.12
Virus definition database(s) 7zip.xmd access.xmd ace.xmd adsntfs.xmd aitok.cvd alz.xmd aqu.index aquarius-update.ini aquarius-update.mf ar.xmd arc.xmd arj.xmd aspy_emu.cvd auto.cvd auto.xmd autoit.xmd avxdisk.xmd bach.xmd bdcore.dll boot.xmd bzip2.xmd cab.xmd cache.000 cache.001 cache.002 cache.003 cache.004 cache.005 cache.006 cache.007 cache.008 cache.009 cache.010 cache.011 cache.012 cache.013 cache.014 cache.015 cache.016 cevakrnl.cvd cevakrnl.ivd cevakrnl.rv0 cevakrnl.rv1 cevakrnl.rv2 cevakrnl.rv3 cevakrnl.rv4 cevakrnl.rv5 cevakrnl.rv6 cevakrnl.rv7 cevakrnl.rv8 cevakrnl.rv9 cevakrnl.rvd cevakrnl.xmd ceva_dll.cvd ceva_emu.cvd ceva_vfs.cvd ceva_vfs.ivd chm.xmd cookie.cvd cookie.xmd cpio.xmd cran.cvd cran.ivd dalvik.cvd dalvik.ivd dalvik.xmd dbx.xmd disp.xmd docfile.xmd dummyarch.xmd dummyscan.xmd emalware.000 emalware.001 … updated successfully (concatenated).
25735 2015-10-05 14:11:45+01:00 SERVER SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.1
Scanning 'message' by F-Secure Spam Scanner was unsuccessful. Reason: no response from cloud. 22 similar errors occurred in last 10 minutes.
25736 2015-10-05 14:21:45+01:00 SERVER SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.1
Scanning 'message' by F-Secure Spam Scanner was unsuccessful. Reason: no response from cloud. 27 similar errors occurred in last 10 minutes.
25737 2015-10-05 14:31:57+01:00 SERVER SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.1
Scanning 'message' by F-Secure Spam Scanner was unsuccessful. Reason: no response from cloud. 23 similar errors occurred in last 10 minutes.
25738 2015-10-05 14:41:57+01:00 SERVER SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.1
Scanning 'message' by F-Secure Spam Scanner was unsuccessful. Reason: no response from cloud. 18 similar errors occurred in last 10 minutes.
25739 2015-10-05 14:51:57+01:00 SERVER SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.1
Scanning 'message' by F-Secure Spam Scanner was unsuccessful. Reason: no response from cloud. 14 similar errors occurred in last 10 minutes.
25740 2015-10-05 15:02:00+01:00 SERVER SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.1
Scanning 'message' by F-Secure Spam Scanner was unsuccessful. Reason: no response from cloud. 15 similar errors occurred in last 10 minutes.
0 -
Appears to do with 1.3.6.1.4.1.2213.18.1 / 1.3.6.1.4.1.2213.18.6 update ...?
25711 2015-10-05 12:09:09+01:00 Ex2013Svr Ex2013Svr\Administrator F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.6
Finished updating Aquarius engine databases.
25712 2015-10-05 12:09:40+01:00 Ex2013Svr Ex2013Svr\Administrator F-Secure Anti-Virus 1.3.6.1.4.1.2213.12
The integrity of virus definition database update 2015-10-05_05 has been successfully verified.
25713 2015-10-05 12:10:43+01:00 Ex2013Svr Ex2013Svr\Administrator F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.1
F-Secure Aquarius started.
25714 2015-10-05 12:11:29+01:00 Ex2013Svr Ex2013Svr\Administrator F-Secure Anti-Virus 1.3.6.1.4.1.2213.12
Virus definition database(s) 7zip.xmd access.xmd ... zoo.xmd updated successfully.
25715 2015-10-05 13:08:06+01:00 Ex2013Svr SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.6
Started updating spam scanner databases.
25716 2015-10-05 13:08:08+01:00 Ex2013Svr SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.6
The integrity of database update aspam-update.mf has been successfully verified.
25717 2015-10-05 13:08:08+01:00 Ex2013Svr SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.1
The following database files have been updated successfully: fpiloader.conf, aspam.cr, aspam-update.mf, aspam-update.ini, aspam\mimepack.dll, aspam\fsbd.conf, aspam\bdnc.ini, aspam\bdnc.dll, aspam\asunicode.dll, aspam\asregex.dll, aspam\aspam.dll, aspam\asmcocr.dll, aspam\asextract.ini, aspam\asemlthin.mdl, aspam\ascore.dll, aspam\asconf.ini, aspam\AntispamThin.dll.
25718 2015-10-05 13:08:08+01:00 Ex2013Svr SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.1
F-Secure Spam Scanner stopped.
25719 2015-10-05 13:08:10+01:00 Ex2013Svr SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.1
F-Secure Spam Scanner started.
25720 2015-10-05 13:08:10+01:00 Ex2013Svr SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.6
Finished updating spam scanner databases.
25721 2015-10-05 13:09:27+01:00 Ex2013Svr SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.1
Scanning 'message' by F-Secure Spam Scanner was unsuccessful. Reason: no response from cloud.
25722 2015-10-05 13:20:42+01:00 Ex2013Svr SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.1
Scanning 'message' by F-Secure Spam Scanner was unsuccessful. Reason: no response from cloud. 24 similar errors occurred in last 11 minutes.
25723 2015-10-05 13:30:42+01:00 Ex2013Svr SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.1
Scanning 'message' by F-Secure Spam Scanner was unsuccessful. Reason: no response from cloud. 14 similar errors occurred in last 10 minutes.
25724 2015-10-05 13:41:45+01:00 Ex2013Svr SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.1
Scanning 'message' by F-Secure Spam Scanner was unsuccessful. Reason: no response from cloud. 17 similar errors occurred in last 11 minutes.
25725 2015-10-05 13:51:45+01:00 Ex2013Svr SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.1
Scanning 'message' by F-Secure Spam Scanner was unsuccessful. Reason: no response from cloud. 14 similar errors occurred in last 10 minutes.
25726 2015-10-05 14:01:45+01:00 Ex2013Svr SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.1
Scanning 'message' by F-Secure Spam Scanner was unsuccessful. Reason: no response from cloud. 17 similar errors occurred in last 10 minutes.
25727 2015-10-05 14:08:51+01:00 Ex2013Svr SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.6
Started updating Aquarius engine databases.
25728 2015-10-05 14:09:59+01:00 Ex2013Svr SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.6
The integrity of database update aquarius-update.mf has been successfully verified.
25729 2015-10-05 14:10:03+01:00 Ex2013Svr SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.1
The following database files have been updated successfully: zoo.xmd, zip.xmd, ... 7zip.xmd.
25730 2015-10-05 14:10:04+01:00 Ex2013Svr SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.1
F-Secure Aquarius stopped.
25731 2015-10-05 14:10:04+01:00 Ex2013Svr SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.6
Finished updating Aquarius engine databases.
25732 2015-10-05 14:10:37+01:00 Ex2013Svr SYSTEM F-Secure Anti-Virus 1.3.6.1.4.1.2213.12
The integrity of virus definition database update 2015-10-05_06 has been successfully verified.
25733 2015-10-05 14:10:45+01:00 Ex2013Svr SYSTEM F-Secure Content Scanner Server 1.3.6.1.4.1.2213.18.10 -
Hi,
F-Secure Spam Scanner relies on a cloud-based service and hence may report failures when there are network related issues. Of course, it is possible that the problem may be caused by the Spam Scanner database update. In order to investigate the problem, we'd like to get more details. Could you open a support ticket (https://www.f-secure.com/en/web/home_global/support/support-request) and provide FSDiag report from your Exchange Server. Please also elaborate if there were any messages successfully scanned for spam during the time frame when all those 73 errors (1+24+17+14+17) were reported.
0 -
As of 7/10/2015 12:15pm - the errors stopped.
Thank you for the update fix.
0
Categories
- All Categories
- 3.5K WithSecure Community
- 3.5K Products
- Get Support