To stay updated on your favorite discussions, please create an account or log in. Then, click the Bookmark icon to subscribe and receive notifications.

Email and Server Security: Central Quarantine on fileshare causes unknown error

Zork
Zork W/ Alumni Posts: 1 Security Scout

Hi,

 

we are using multiple Exchange servers with DAGs and configured Email and Server Security to use a central quarantine (central sql server and file share as quarantine location)

 

twice a day ESS will fail with the following message (example):

 

Host: EXCHANGE1.fqdn (<IP>) Computer name: EXCHANGE1 User account: SYSTEM
Product: F-Secure Anti-Virus for Microsoft Exchange (OID: 1.3.6.1.4.1.2213.20)
Severity: error (3)
Message: An internal error occurred. Error code: Can't save mail into quarantine storage: boost::filesystem::copy_file: Das System kann den angegebenen Pfad nicht finden: "C:\Program Files (x86)\F-Secure\Anti-Virus for Microsoft Exchange\temp\de04cae7-2077-4b66-84aa-1495a4914e44", "\\EXCHANGE2\share\EXCHANGE1\Q20160404_000001\Q20160405055407_23831.[eml]".

 

the message that cannot be copied will remain in the submission queue until f-secure services and the Exchange transport service are restarted

 

Every ESS is using its own subdirectory for the quarantine.

all ACLs for the directories are correct, after restart of services ESS creates a new (date-coded) quarantine directory.

 

The error is very annoying, since it involves manually restarting services.

 

We need to be able to centrally manage quarantined messages, so moving the quarantine directory to a local directory is not an option

 

Is there a fix for this issue?

 

Thanks in advance!

Comments

  • Vad
    Vad W/ Alumni Posts: 1,069 Cybercrime Crusader

    Hello Zork,

     

    Please, contact support. We'll need more information to identify the root cause, and provide a proper solution.

     

    Best regards,

    Vad

This discussion has been closed.