SSL certificate issue: X.509 error value on Email and Server Security 12.12

Issue:

Message: Scanning 'message' by F-Secure Spam Scanner was unsuccessful. Reason: SSL certificate issue: X.509 error value
Host: <example> (192.168.101.150, fe80::5c55:4250:d46d:3d83%10) Computer name: EX-EXCH01 User account: EXAMPLE\EX
Product: F-Secure Content Scanner Server (OID: 1.3.6.1.4.1.2213.18)
Severity: error (3)
Message: Scanning 'message' by F-Secure Spam Scanner was unsuccessful. Reason: SSL certificate issue: X.509 error value. 56 similar errors occurred in last 10 minutes.

 

Resolution:

F-Secure Spam Scanner connects to the detection center address https://aspam.sp.f-secure.com/ which has an Amazon certificate that expires on Tuesday, June 30, 2020. Ensure that you have trusted this certificate. You may also try running Windows Update to install the latest updates and certificates.

The F-Secure Spam Scanner needs to be able to query aspam.sp.f-secure.com in order for it to work. It's hosted in the Amazon Web Services (AWS) Cloud and as a result does not have a static range of IP addresses. 

Verify that you are able to access the following URL: https://aspam.sp.f-secure.com/bdnc/config

  1. Open the browser on the host where you have installed  F-Secure Email and Server Security and enter https://aspam.sp.f-secure.com/bdnc/config. You should get the following response: {"benchmarkInterval":3600,"benchmark":1,"servers":["aspam.sp.f-secure.com"],"statsInterval":1800,"enforceSSL":true,"benchmarkThreshold":5,"disableThreshold":10}
  2. If you do not get a similar response as above, verify that *.f-secure.com and *.fsapi.com are allowed in your firewall 

If you require a proxy to connect to this address with your browser, then the anti-spam engine needs to be configured to use the same proxy.

How to setup proxy server locally from your F-Secure Email and Server Security:
  1. Open the F-Secure Email and Server Security Web Console and navigate to Settings 
  2. Expand the Setting and under Engines expand the Use proxy server
  3. Activate it by moving the use proxy icon and provide the proxy server information

Article no: 000017979

Pricing & Product Info

For product info and pricing please go to the F-Secure product page

Version history
Revision #:
1 of 1
Last update:
a week ago
Updated by: