F-Secure Content Scanner Server error

Aspirant

F-Secure Content Scanner Server error

Dear F-Secure,

 

On our Exchange Server 2013 server, I have started getting messages similar to below for the past 20 hours.

 

Product: F-Secure Content Scanner Server (OID: 1.3.6.1.4.1.2213.18)

Severity: error (3)

Message: Scanning 'message' by F-Secure Spam Scanner was unsuccessful. Reason: no response from cloud. 29 similar errors occurred in last 10 minutes.

 

Server is Microsoft Windows Server 2012 R2 on a Physical box.

We have a very good internet connection.

 

F-Secure details:

F-Secure E-mail and Server Security 11.01 build 157
F-Secure Anti-Virus for Microsoft Exchange 10.00 build 416
F-Secure Content Scanner Server 7.30 build 485c
F-Secure Anti-Virus 9.51 build 136
F-Secure Automatic Update Agent 8.36 build 130
F-Secure Management Agent 8.60 build 350
F-Secure Web UI 1.50 build 267
F-Secure User Interface 9.34 build 11983
F-Secure ORSP Client 1.0.25 build 2275

 

F-Secure Aquarius 11.0.1  2015-10-06_05
F-Secure Hydra 5.14.151  2015-10-05_01
F-Secure Gemini 3.2.384  2015-10-02_01

 

Appears to be with 1.3.6.1.4.1.2213.18.1 / 1.3.6.1.4.1.2213.18.6 update

25711    2015-10-05  12:09:09+01:00  Ex2013Svr  Ex2013Svr\Administrator  F-Secure Content Scanner Server  1.3.6.1.4.1.2213.18.6
 Finished updating Aquarius engine databases.
25712    2015-10-05  12:09:40+01:00  Ex2013Svr  Ex2013Svr\Administrator  F-Secure Anti-Virus  1.3.6.1.4.1.2213.12
 The integrity of virus definition database update 2015-10-05_05 has been successfully verified.
25713    2015-10-05  12:10:43+01:00  Ex2013Svr  Ex2013Svr\Administrator  F-Secure Content Scanner Server  1.3.6.1.4.1.2213.18.1
 F-Secure Aquarius started.
25714    2015-10-05  12:11:29+01:00  Ex2013Svr  Ex2013Svr\Administrator  F-Secure Anti-Virus  1.3.6.1.4.1.2213.12
 Virus definition database(s) 7zip.xmd access.xmd ... zoo.xmd  updated successfully.
25715    2015-10-05  13:08:06+01:00  Ex2013Svr  SYSTEM  F-Secure Content Scanner Server  1.3.6.1.4.1.2213.18.6
 Started updating spam scanner databases.
25716    2015-10-05  13:08:08+01:00  Ex2013Svr  SYSTEM  F-Secure Content Scanner Server  1.3.6.1.4.1.2213.18.6
 The integrity of database update aspam-update.mf has been successfully verified.
25717    2015-10-05  13:08:08+01:00  Ex2013Svr  SYSTEM  F-Secure Content Scanner Server  1.3.6.1.4.1.2213.18.1
 The following database files have been updated successfully: fpiloader.conf, aspam.cr, aspam-update.mf, aspam-update.ini, aspam\mimepack.dll, aspam\fsbd.conf, aspam\bdnc.ini, aspam\bdnc.dll, aspam\asunicode.dll, aspam\asregex.dll, aspam\aspam.dll, aspam\asmcocr.dll, aspam\asextract.ini, aspam\asemlthin.mdl, aspam\ascore.dll, aspam\asconf.ini, aspam\AntispamThin.dll.
25718    2015-10-05  13:08:08+01:00  Ex2013Svr  SYSTEM  F-Secure Content Scanner Server  1.3.6.1.4.1.2213.18.1
 F-Secure Spam Scanner stopped.
25719    2015-10-05  13:08:10+01:00  Ex2013Svr  SYSTEM  F-Secure Content Scanner Server  1.3.6.1.4.1.2213.18.1
 F-Secure Spam Scanner started.
25720    2015-10-05  13:08:10+01:00  Ex2013Svr  SYSTEM  F-Secure Content Scanner Server  1.3.6.1.4.1.2213.18.6
 Finished updating spam scanner databases.
25721    2015-10-05  13:09:27+01:00  Ex2013Svr  SYSTEM  F-Secure Content Scanner Server  1.3.6.1.4.1.2213.18.1
 Scanning 'message' by F-Secure Spam Scanner was unsuccessful. Reason: no response from cloud.
25722    2015-10-05  13:20:42+01:00  Ex2013Svr  SYSTEM  F-Secure Content Scanner Server  1.3.6.1.4.1.2213.18.1
 Scanning 'message' by F-Secure Spam Scanner was unsuccessful. Reason: no response from cloud. 24 similar errors occurred in last 11 minutes.
25723    2015-10-05  13:30:42+01:00  Ex2013Svr  SYSTEM  F-Secure Content Scanner Server  1.3.6.1.4.1.2213.18.1
 Scanning 'message' by F-Secure Spam Scanner was unsuccessful. Reason: no response from cloud. 14 similar errors occurred in last 10 minutes.
25724    2015-10-05  13:41:45+01:00  Ex2013Svr  SYSTEM  F-Secure Content Scanner Server  1.3.6.1.4.1.2213.18.1
 Scanning 'message' by F-Secure Spam Scanner was unsuccessful. Reason: no response from cloud. 17 similar errors occurred in last 11 minutes.
25725    2015-10-05  13:51:45+01:00  Ex2013Svr  SYSTEM  F-Secure Content Scanner Server  1.3.6.1.4.1.2213.18.1
 Scanning 'message' by F-Secure Spam Scanner was unsuccessful. Reason: no response from cloud. 14 similar errors occurred in last 10 minutes.
25726    2015-10-05  14:01:45+01:00  Ex2013Svr  SYSTEM  F-Secure Content Scanner Server  1.3.6.1.4.1.2213.18.1
 Scanning 'message' by F-Secure Spam Scanner was unsuccessful. Reason: no response from cloud. 17 similar errors occurred in last 10 minutes.
25727    2015-10-05  14:08:51+01:00  Ex2013Svr  SYSTEM  F-Secure Content Scanner Server  1.3.6.1.4.1.2213.18.6
 Started updating Aquarius engine databases.
25728    2015-10-05  14:09:59+01:00  Ex2013Svr  SYSTEM  F-Secure Content Scanner Server  1.3.6.1.4.1.2213.18.6
 The integrity of database update aquarius-update.mf has been successfully verified.
25729    2015-10-05  14:10:03+01:00  Ex2013Svr  SYSTEM  F-Secure Content Scanner Server  1.3.6.1.4.1.2213.18.1
 The following database files have been updated successfully: zoo.xmd, zip.xmd, ... 7zip.xmd.
25730    2015-10-05  14:10:04+01:00  Ex2013Svr  SYSTEM  F-Secure Content Scanner Server  1.3.6.1.4.1.2213.18.1
 F-Secure Aquarius stopped.
25731    2015-10-05  14:10:04+01:00  Ex2013Svr  SYSTEM  F-Secure Content Scanner Server  1.3.6.1.4.1.2213.18.6
 Finished updating Aquarius engine databases.
25732    2015-10-05  14:10:37+01:00  Ex2013Svr  SYSTEM  F-Secure Anti-Virus  1.3.6.1.4.1.2213.12
 The integrity of virus definition database update 2015-10-05_06 has been successfully verified.
25733    2015-10-05  14:10:45+01:00  Ex2013Svr  SYSTEM  F-Secure Content Scanner Server  1.3.6.1.4.1.2213.18.1

 

Can you explain what is going on?

 

Kind Regards

Paul HS

2 REPLIES 2
F-Secure

Re: F-Secure Content Scanner Server error

Hi,

 

F-Secure Spam Scanner relies on a cloud-based service and hence may report failures when there are network related issues. Of course, it is possible that the problem may be caused by the Spam Scanner database update. In order to investigate the problem, we'd like to get more details. Could you open a support ticket (https://www.f-secure.com/en/web/home_global/support/support-request) and provide FSDiag report from your Exchange Server. Please also elaborate if there were any messages successfully scanned for spam during the time frame when all those 73 errors (1+24+17+14+17)  were reported.

 

 

 

 

Aspirant

Re: F-Secure Content Scanner Server error

As of 7/10/2015 12:15pm - the errors stopped.

Thank you for the update fix.