Tuesday, October 9, 2012

Incoming Mail Flow Stops

By Joe Piggee Sr.

Event Source: MSExchangeTransport
Event Category: Resource Manager
Event ID: 15007
Description: The Microsoft Exchange Transport service is rejecting message submissions because the service continues to consume more memory than the configured threshold. This may require that this service be restarted to continue normal operation.


Event Source: MSExchangeTransport
Event Category: Resource Manager
Event ID: 15004
Description:
Resource pressure increased from Previous Utilization Level to Current Utilization Level.

  • Quick fix is to just restart your Transport service.
  • Long term fix is to either disable Transport from monitoring or what I'd recommend is to give the Exchange server the necessary resources, and adjust the settings accordingly.

To Disable the Transport from Monitoring :
Modify the edgetransport.exe.config file using notepad. This can be found in c:\program files\microsoft\exchange server\v14\bin. Change the “EnableResourceMonitoring” from “True” to “False”, save and close the file, then restart the Microsoft Exchange Transport Service.

Forefront VirusBuster Retired

By Joe Piggee Sr.

10/09/2012

 

Microsoft announced that is retiring one of the engines that are used in Forefront Protection. Forefront Security for Exchange 2010 is generating event log entries:

 

EventID 2109  

Source : GetEngineFiles

Details:  

TheVBuster scan engine is no longer supported. Updates are no longer available for this engine, and therefore the update check for this engine has been disabled. Please review the scan engines chosen for your scan jobs and make another selection to ensure up-to-date protection.

 

You can disable this engine by following the instructions on Microsoft's Site @  http://support.microsoft.com/kb/2758276

  1. Open Forefront Console
  2. Click Policy Management
  3. Global Settings
  4. Select Advanced Options
  5. Scroll down to Engine Management
  6. Change management to Manual
  7. Select VirusBuster AntiVirus Scan Engine, change the Transport to Disabled
  8. Click Save