Forefront Protection 2010 for Exchange and CorruptedCompressedFile issue

Hi
I have an issue where a third-party vendor is using Cisco Prime management software to email zipped reports to various recipients on our system. However, when it hits our system, Forefront is tagging this as a "CorruptedCompressedFile"
and stripping it from the emails.
I've had the email sent to a personal email account and the attachment looks ok - it opens normally and there is no password. If I use Windows 7 to extract the single file and then create a new zip file, this new zip file is delivered fine to users in our
system.
We are running Exchange 2010 (14.03.0174.001) and Forefront Protection for Exchange (11.0.727.0).
The file is a csv, and one example is only 2.5MB compressed, and 15MB uncompressed.
Does anyone know what could be causing the issue here?
Thanks
Paul

HI,
In general, the files that FPE is unable to parse will be scanned as a corrupted compressed file and it can be due to multiple reasons.
Please check the FSEAgentLog under %Program Files (x86)%\Microsoft Forefront Protection for Exchange Server\Data
to see if any detailed information exists.
Firstly, I recommend you to check the maximum compressed file size to make sure that it is larger than that file. You can clickPolicy
Management in the FPE Administrator Console, and under
Global Settings, click Advanced Options, then in the
Global Settings - Advanced Options pane, under the Threshold Levels section.
In addition,
files identified as corrupted are quarantined by default. You can override quarantining for these file types by clearing the
Quarantine corrupted compressed files
check box under the
Deletion Criteria
section in the Global Settings - Advanced Options pane,,
and then clicking
Save. However, it is not recommended to do this as it may cause all the files identified as corrupted are not quarantined.
Best regards,
Susie

Similar Messages

Discontinuing Forefront Protection 2010 for Exchange

Hi
Microsoft is discontinuing any further releases of Forefont Protection 2010 for Exchange Server:
http://blogs.technet.com/b/server-cloud/archive/2012/09/12/important-changes-to-forefront-product-roadmaps.aspx
We have a lot of customers with on-premises Exchange Servers, to which we sold Forefont Protection 2010 for Exchange Server.
What is the alternative for that product, Forefront Online Protection?
What is the Scenario, if a customer don't want his mx record to point to Microsoft?
Regards
Peter

Hi,
I'm sorry but yesterday I was working with a customer.
This is going to be a long post :-)
Exchange 2010 has no native antivirus/malware protection. This kind of protection is provided by Forefront Protection 2010 for Exchange.
Those filters provide antispam protection therefore from this point of view I wouldn't consider them a replacement for Groupshield AV protection on Exchange 2010.
This is the fast answer :-)
Let's move to the longer one.
There are going to be a lot of assumptions because I don't know your environment at all and this is something which should be carefully planned and tailored based on your business needs.
Assumptions:
You have an Exchange 2010 Organization
There are no Edge servers
You are following the common scenario with an AV for Exchange (Groupshield) running on Hub and Mailbox servers, Postini for Inbound/Outbound traffic protection from AV and SPAM (MX record pointing to Postini) and an AV for Filesystem running on the Exchange
servers
You are planning to move to Exchange 2013 in the future (let's say 6 months/1 year from now)
You are open to discuss a Microsoft-oriented solution without 3rd party software
We are not going to discuss licensing (we are lucky and someone else will decide for us :-))
We are not going to discuss the differences between Postini/Groupshield/Forefront/Exchange agents because I don't know them well enough to tell you something which would make sense and I'm still discussing if it was better the Commodore 64 or the Amiga
(obviously Commodore 64)
We are looking for a solution which should cover as many scenarios as possible
Short-term objective: Achieve antivirus/antispam protection on Exchange 2010 and get rid of Groupshield (and may be of Postini with it)
Long-term objective: Migrate to 2013 and leverage the antimalware and antispam agents included in the product
Act 1 - Short-term objective:
Inbound/outbound traffic:
The antispam agents can be installed on an Exchange 2010 Hub server but the place where they should be used is the Edge server.
Solution 1: Replace Postini with 2 Exchange 2010 Edge servers (MX record pointing to the Edge servers). Antivirus protection will be provided by Forefront Protection 2010 for Exchange (FPE) . Antispam protection by Exchange 2010 and FPE (which expands the antispam
capabilities of Exchange 2010)
Solution 2: Replace Postini with Forefront Online Protection for Exchange (FOPE)
Internal traffic:
Solution: FPE will replace Groupshield on the Hub servers. No antispam agents installed. FPE will be installed as a Transport Agent
Database Content (aka all that stuff that doesn't pass through transport):
Not all Exchange data are passing through the Hub transport (i.e. Drafts, Calendar, Contacts, Public Folders, etc...)
Solution 1: FPE will replace Groupshield on the Mailbox servers. FPE will leverage the Virus API (VSAPI) to access the content of the Store
Solution 2: The AV installed on your clients has an Outlook plug-in which scans the content of the store client-side
This should provide enough AV/antispam protection and you will have an homogeneous solution where all components are able to interact smoothly (Outlook Junk Mail, Antispam agents, safe senders, safe recipients, etc...) without much effort in terms of 3rd
party plug-ins, different administration consoles, different places where you have to check if the message has been blocked.
I know what is going to be the fate of Forefront but this is to meet our short-term/immediate objectives. From now on we will have until December 2015 to plan our migration to Exchange 2013.
The screen fades to black. Voice-over announces that you migrated to Exchange 2013 :-)
Act 2 - Long-term objective:
Inbound/Outbound traffic:
Solution 1: Leverage the AV and antispam agents on your published MBX/CAS servers
Solution 2: Use FOPE
Internal Traffic:
Solution: Leverage the AV agent on your MBX/CAS servers
Database content:
In Exchange 2013 the VSAPI is dead. Any AV for Exchange will have to use transport agents on Exchange 2013. The only possible exceptions is using Web Services for the On-demand scan of a limited number of mailboxes.
Solution: The AV installed on your clients has an Outlook plug-in which scans the content of the store client-side
The screen fades to black. Credits.
There are a few considerations related to these design changes which demonstrates that IMHO they are a good choice but they would be too long to discuss in this post and they would probably be OT. I'm thinking to write a blog when I'll have some time.
IMPORTANT: These are just my 2 pence. You should discuss this with someone which knows your infrastructure. The above solutions are at best incomplete because there a lot more factors which come into play when choosing a design like this.
My personal advice is to involve your TAM (if you have one) and work with my colleagues to find the solution best suited for your company.
Bye
Gabriele
P.S. Pure self-advertising: If you are in Switzerland you are not far from me :-D
-- Gabriele Tansini [MSFT] This posting is provided "AS IS" with no warranties, and confers no rights"

Half the engines are not updating wanted to update Forefront Protection 2010 for Exchange Server to newest sevice pack

Running forefront protection 2010 for exchange. The version of Exchange we are running is Exchange Server 2007 sp3 rollup 13. I am seeing that half our engines are not updating for forefront. Currently we are running version 10.1.0746 sp1 for Forefront.
I would like to get this up to the newest version which I think is SP2. Where can I download just the service pack 2 and will I have any problem with the version of exchange I am running. Thanks in advance for any help.
John

Hi,
I guess you are talking about Microsoft Forefront Security for Exchange Server.
You could have a look on the following blog.
http://blogs.technet.com/b/fss/archive/2009/12/10/migrating-from-forefront-security-for-exchange-server-to-forefront-protection-2010-for-exchange-server.aspx
Best Regards,
Joyce
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

If the Microsoft Forefront Protection 2010 for Exchange Server can use for exchange server 2013?

if the Microsoft Forefront Protection 2010 for Exchange Server can use for exchange server 2013?

thanks for your reply!
what's protection software can use for exchange server 2013?
Hi,
Most (if not all) of the bigger vendors has a product that supports Exchange 2013, so look them up.
Exchange 2013 has some Anti-Spam and Anti-Malware Protection functionality that you can read about here:
http://technet.microsoft.com/en-us/library/jj150481(v=exchg.150).aspx
Martina Miskovic

Microsoft forefront protection 2010 for exchange server is unable to perform the requested function

I get the following error any time I try and change any setting:
Microsoft Forefront Protection 2010 for Exchange Server is unable to perform the requested function. This may be becuase Microsoft ForeFront services are unavailable. Ensure that all Microsoft ForeFront services are running and that Windows Powershell is
functional.
I have installed the latest rollup for SEP. Rollup 5 I think. I have rebooted the server. I have checked the permissions and they are correct.
Any thoughts?

I posted a PowerShell-based workaround in the other thread:
https://social.technet.microsoft.com/Forums/forefront/en-US/1ccb9a5e-4b08-4f6b-a4bd-32cf5f2cd2b0/cannot-save-any-changes-microsoft-forefront-2010-for-exchange-is-unable-to-perform-the-requested?forum=FSENext
Mike Crowley | MVP
My Blog --
Baseline Technologies

Spam notification on Microsoft Forefront Protection 2010 for Exchange Server

Hello
I'm using Microsoft Forefront Protection 2010 for Exchange Server on edge Exchange2010 SP2.
I did know I can't configure any notification for detected spam, because the result would be that the users inbox would be spammed with Forefront notifications instead of the real spam.
http://social.technet.microsoft.com/Forums/forefront/en-US/6c293ded-8e61-44a1-ac25-bb685ecd1c7c/notification-spam-forefront-for-exchange-2010
But I can't find the Forefront notifications in tracking logs.
Is it usual ?
if not, why the Forefront notifications was't send?
Thanks for any ideas.
Hiroko

Hi,
I checked smtp log of our Exchange server.
But I think I can't search the logs.
Could you please tell me the word of error on smtp
log.
Thanks for any ideas.
Hiroko

Forefront protection 2010 for Exchange server - License Expiry.

Hi All,
We have forefront protection 2010 for exchnage server installed on my exchange 2010 servers. I see the expiry date set on the forefront console is 31st Mar 2014.
as per the below KB article's:
http://support.microsoft.com/kb/2793998?wa=wsignin1.0
http://technet.microsoft.com/en-us/library/ee358857.aspx
the support to the product is available till 31st Dec 2015.
My question is: how to extend the license for the forefront on all my exchnage servers? Should i have to change my license agreement number in the console or should i retain the same and just
extend the dates till 31st Dec 2015.
Also, how can we ensure that the change is effective and no issues after 31st Mar 2014.
Please help.
Thanks -
Sujit
Thanks and Regards - Sujit

Hi,
the problem here is that you can't buy FPE anymore so you can't extend the license.
It will work if you change the license number and the date, but that means that you run FPE without a valid license! You should contact your local Microsoft branch to make sure you are safe with this.
Greetings
Christian
Christian Groebner MVP Forefront

Replacement for Forefront Protection 2010 for exchange server.

Hello Team,
I have Forefront Protection 2010 installed on my Exchnage 2010 servers and the same is getting expired in March 1st week 2014. I also got to know Microsoft will stop support for the same very soon so i am really worried to get this license renewed or not?
Or please suggest any other product for same which can easily be replaced and has same or more features than Forefront also can easily be integrated with Exchange.
Thanks for taking your time and going through my querry and your valuable feedback will be really appreciated.
Thanks in Advance -
Sujitraj
Thanks and Regards - Sujit

Hi,
Actually, FOPE or EOP may be your better selection.
http://technet.microsoft.com/en-us/library/jj723137(v=exchg.150).aspx
http://technet.microsoft.com/en-us/library/jj723146(v=exchg.150).aspx
http://technet.microsoft.com/en-us/library/ff715245.aspx
Best Regards
Quan Gu

Support Forefront Protection 2010 for Exchange 2010 SP3

Hi
I have a simple question: Is there a full support of FPE 2010 (Version 11.0.727.0) for Exchange 2010 SP3 (and Rollup Updates)?
Thomas

Hi,
It seems that FPE 2010 for exchange 2010 SP3 is supported and you need to install the Rollup 4. For more detailed information, please refer to the link below:
Hotfix Rollup 4 for Microsoft Forefront Protection for Exchange
Updates for Microsoft Forefront and Related Technologies
Hope this helps!
Susie

Microsoft Forefront Protection 2010 for Exchange Server - where to look in GUI

Hi there!
We have configured Forefront for Exchange on Edge server.
We have created a test subject filter and sent a test mail.
On the Administrator Console under dashboards we see that message was blocked due to spam, but we cannot find in GUI some briefer details regarding this blocked message.
How can we see in this administration console GUI which exactly message has been blocked?
Having just dashboards and not being able to open and check every blocked message is a problem.
Please advice
With best regards
bostjanc

I posted a PowerShell-based workaround in the other thread:
https://social.technet.microsoft.com/Forums/forefront/en-US/1ccb9a5e-4b08-4f6b-a4bd-32cf5f2cd2b0/cannot-save-any-changes-microsoft-forefront-2010-for-exchange-is-unable-to-perform-the-requested?forum=FSENext
Mike Crowley | MVP
My Blog --
Baseline Technologies

Renewal of Forefront Protection 2010 for Exchange Server until EOL

Hello,
We have a Open Value subscription for Forefront Protection for Exchange Server 2010 (FPE) running with an Exchange 2007 server and an Edge Server. We attempted to renew the subscription to FPE and were automatically upgraded to FOPE and now EOP.
Since FPE is not End of Life yet, might it be possible to renew FPE on premises until such time as the product goes End of Life?
thank you,
Dan

Hello,
FPE on premises was available only as a subscription license in OV, OVS. for subscription products thre is not possibility to renew th elicensing if is removed from product list.
you can purchase FOPE(in OVS) or EOP as online subscription. you can use also EOP for on premises Exchnage Server.
on Microsoft document we have th efollowing info:
The following are the primary ways you can use EOP for messaging protection:
In a standalone scenario   EOP provides cloud-based email protection for your "on-premises Microsoft Exchange Server 2013 environment, legacy Exchange Server versions,
or for any other on-premises SMTP email solution."
As a part of Microsoft Exchange Online   By default, EOP protects Microsoft Exchange Online cloud-hosted mailboxes.
In a hybrid deployment   EOP can be configured to protect your messaging environment and control mail routing when you have a mix of on-premises and cloud mailboxes.
note: EOP replaces Microsoft Forefront Online Protection for Exchange (FOPE). All FOPE customers will be transitioned to EOP, as described in the
Forefront Online Protection for Exchange (FOPE) transition center. EOP delivers the protection and control provided by FOPE, and also includes additional features.
What's new in Exchange Online Protection describes some of these features.
thanks
diramoh

Problems with scan jobs Forefront protection 2010 for exchange server administrator console

Dears,
I have the following problem with the
CAS server:
How do I fix it?
thanks for your reply
Edwin Duran Ospina

Hi,
FPE will now post a warning if any items are present in the Undeliverable archive folder. You could remove the stuck email from "%Program Files (x86)%\ Microsoft Forefront Protection for Exchange Server\Data\Archive\Undeliverable".
For more information: http://support.microsoft.com/kb/2420647
Best Regards,
Joyce
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Hotfix availabe for Forefront Protection 2010 for Exchange

Hi,
there is a new hotfix available for FPE 2010 which can be downloaded here:
http://support.microsoft.com/kb/2927022/en-us
This hotfix requires rollup 4 to be installed for FPE 2010. It can be downloaded here:
http://support.microsoft.com/kb/2619883/en-us
Greetings
Christian
Christian Groebner MVP Forefront

Hi Christian, do you know if the install requires a reboot or if any Exchange services are restarted as a result of the install? Just trying to figure out when to apply the hotfix and if I need to take a maintenance outage. Thanks!

MS ForeFront Protection 2010 for Exchange Server Activation

Hi
I have a question that is in Activation application.
I correct type my licence key in second screen Activation application asking me about Licence Agreement Number and Expiration Date.
My question is: If Expiration Date that I set now will expire that will I be able change this date quickly or I will be must REINSTALL all this software?
Please HELP!!!! Today I ask this question on Business line and anybody help me in 3 hours telephone call!!!!

Right,
If an eval build expires, you need to get the activation key and plug it in
along with the license number and expiration date.
There
will be no need to uninstall/reinstall. The default license is for 3 years.
If the subscription build has expired, you then need to go
and renew your contract with Microsoft and then enter the new license number and expiration date per that contract. The product key will not change.

Microsoft Forefront Protection 2010 for exchange server Event ID 7009 5314

Hi There,
I am getting the event ID 7009 and 5314 when i enable the Kaspersky engine. If i disable it, then i don't face any issue.
Please let me know what could be the issue
Many thanks
David

Hi,
What is the edition of FPE? According to the events, it was due to that the antimalware engine was unable to load.
The KB below is related to the event errors 5314 and 7709, if you are running the
latest FPE 11.0.0727.0, maybe you can have a try:
http://support.microsoft.com/kb/2919357/en-us
In addition, can you update the KasperSky engine? If not, maybe you can show the hidden files and folders,
browse to C:\ProgramData and find a folder called "KasperSky SDK" ,and then rename it. After that, please update Kaspersky through the FPE Console
to see if the issue persists.
Best regards,
Susie

Forefront Protection 2010 for Exchange and CorruptedCompressedFile issue

Similar Messages

Maybe you are looking for