Microsoft Forefront Threat management Gateway services keeps stopping

Please assist urgently
Microsoft Forefront Threat management Gateway 2010 services keeps stopping. We are on the
Service Pack 2 Roll update 5
On the event viewer does not display reason why the services stopped.
Your assistance will be highly appreciated
Regards
Daniel Nkuna

Hi,
Here is a similar thread that TMG keeps stopping and no error displayed in event log. It is fixed by uninstalling Surf cop on the TMG servers. Do you have such application installed on TMG server?
TMG Firewall service stopping
Best Regards,
Joyce
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Similar Messages

Steps to configure Forefront Threat Management Gateway 2010 Standard Version

Can you please guide the steps to configure Forefront Threat Management Gateway 2010 Standard Version

Hi,
Before you install the Forefront TMG, please make sure that your system meets the minimum system requirements for installing TMG. For TMG 2010 standard edition, it only supports deploying TMG server in a standalone server. You can refer to the link
below:
About the Forefront TMG Editions
In addition, it would be better if you can share more detailed information about your environment and requirements, such as the deployment model for the TMG. Besides, the links below would be helpful to you:
Forefront TMG Deployment
TMG Firewall Interface Configuration （Note:
Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Please make sure that you completely understand the risk before retrieving any suggestions from the above link.）
Best regards,
Susie

Is there any latest version of forefront threat management gateway 2010

Deal All
I just wanna know that did Microsoft released new version of forefront threat management gateway 2010?
Zeeshan Ibrahim Network Administrator

Hi, there is no new Version of Forefront TMG planned:
http://blogs.technet.com/b/server-cloud/archive/2012/09/12/important-changes-to-forefront-product-roadmaps.aspx
regards Marc Grote aka Jens Baier - www.it-training-grote.de - www.forefront-tmg.de - www.galileocomputing.de/3276?GPP=MarcGrote

WLC 5508 & Forefront Threat Management Gateway.

We are trying to implement a Guest wireless network on a new WLC 5508 which connects to the Internet via a Windows 2008R2 server running Forefront Threat Management Gateway beyond which there's a ASA and then the Internet. The Windows server also provides DHCP and DNS to the WLAN clients.
The problem we're having is that the TMG server will not return packets to a wireless client. We booth the wireless client, it picks up a DHCP address (from the TMG server), we open a browser and try and access the Internet, result; nothing. If we run Wireshark on the client we can see the DHCP request and response, we see the DNS request but no reply comes back. On the TMG server in the TMG live log we can see that it is dropping the packets to the client with the following error message:
A packet was dropped because its destination IP address is unreachable.
We've tried attaching a wired PC to the same VLAN and it can obtain an IP address from the TMG server, get DNS resolution from the TMG server and access the Internet so we know the problem must lie beteen the TMG server and the WLC 5508 but we can't determine whether it's something the WLC is doing which "masks" the client from the TMG server or something in the TMG server which is preventing it from communicating with the client.
If we open a browser on the client and enter http://1.1.1.1/login.html we get the login page and can authenticate (we have no DNS Host Name on the Virtual Interface, we've tried it with and without, no difference either way) but after that, nothing. We can see the client making repeated DNS requests and the return packets for each one are dropped by the TMG server with the message above.
Any advice would be much appreciated.
The WLC is running Software Version 7.3.112.0.

We are trying to implement a Guest wireless network on a new WLC 5508 which connects to the Internet via a Windows 2008R2 server running Forefront Threat Management Gateway beyond which there's a ASA and then the Internet. The Windows server also provides DHCP and DNS to the WLAN clients.
The problem we're having is that the TMG server will not return packets to a wireless client. We booth the wireless client, it picks up a DHCP address (from the TMG server), we open a browser and try and access the Internet, result; nothing. If we run Wireshark on the client we can see the DHCP request and response, we see the DNS request but no reply comes back. On the TMG server in the TMG live log we can see that it is dropping the packets to the client with the following error message:
A packet was dropped because its destination IP address is unreachable.
We've tried attaching a wired PC to the same VLAN and it can obtain an IP address from the TMG server, get DNS resolution from the TMG server and access the Internet so we know the problem must lie beteen the TMG server and the WLC 5508 but we can't determine whether it's something the WLC is doing which "masks" the client from the TMG server or something in the TMG server which is preventing it from communicating with the client.
If we open a browser on the client and enter http://1.1.1.1/login.html we get the login page and can authenticate (we have no DNS Host Name on the Virtual Interface, we've tried it with and without, no difference either way) but after that, nothing. We can see the client making repeated DNS requests and the return packets for each one are dropped by the TMG server with the message above.
Any advice would be much appreciated.
The WLC is running Software Version 7.3.112.0.

Forefront Threat management Gate 2010 & Apple Server Addresses.

We are using Microsoft Forefront Threat Management Gateway 2010 at our college. We would like to set up a policy which will allow a group of machines through to your servers ,with Malware detection disabled. When this is enabled it causes large downloads from your apps store to fail. What i require is a addresses of the apple server which run this part of the app store. Then i can set up a exclusion policy for the servers.
We can track the IP 's but looks like the IP of the apple servers change ramdonly.
Chris

Large companies like Apple (and Microsoft) use a worldwide network of co-located servers to provide services. Excluding all possible IP addresses from filtering would be a monumental if not impossible task. You would be better off contacting Microsoft support on how to resolve a problem like this with their software.

Microsoft Exchange Replication Service keep stopping

Not sure what is going on here. The replication service keep stopping on one of my servers within the DAG. I cant think of anything different about this server compared to others (anything known at least). This server sits at our DR facility and is the host
of the 3rd copy to a few of our databases, which primary and secondary ones live at our HQ. The application log reports this every 5-10 seconds
Watson report about to be sent for process id: 31860, with parameters: E12IIS, c-RTL-AMD64, 15.00.0995.029, msexchangerepl, M.Exchange.Common, M.E.C.H.DatabaseFailureItem.Parse, System.ArgumentOutOfRangeException, fe19, 15.00.0995.012.
ErrorReportingEnabled: False
The system log reports this every 5-10 seconds also:
The Microsoft Exchange Replication service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 5000 milliseconds: Restart the service.
I have ran windows update, and it seems that every time I reboot the machine, the shutdown tracker comes up. I think it has something to do with hardware, but no idea where to look next.

Hi,
This issue occurred because Microsoft Exchange Replication Services Was Unable to Write In "Microsoft-Exchange-MailboxDatabaseFailureItems/Operational"
The fix for the issue will be available in next cumulative update. Meanwhile, please follow the steps below for a workaround to resolve the issue. This workaround is to clear the entries log storing mailbox database failure items.
On problem server, open command prompt in administrator privileges.
Run following command to clear the even entries from the log
Wevtutil.exe cl "Microsoft-Exchange-MailboxDatabaseFailureItems/Operational"
Best Regards.

Microsoft Forefront Server Protection Eventing Service won't start?

Hi Guys,
When Forefront Protection for Exchange was integrated/enabled on our SBS 2008 server, Microsoft Forefront Server Protection Eventing Service won’t start. Even when we try to start it manually we are getting this message (see attached). During this attempt,
we got these events in the event viewer. In this case, in order to have our email working, we have to temporarily disable Forefront. Any suggestion how to fix this? Please advise.
Event 465
Source: ESENT
FSCEventing (9324) Corruption was detected during soft recovery in logfile C:\Program Files (x86)\Microsoft Forefront Protection for Exchange Server\Data\Incidents\inc.log. The failing checksum record is located at position END. Data not matching the log-file
fill pattern first appeared in sector 450 (0x000001C2). This logfile has been damaged and is unusable.
Event 301
Source: ESENT
FSCEventing (9324) The database engine has begun replaying logfile C:\Program Files (x86)\Microsoft Forefront Protection for Exchange Server\Data\Incidents\inc.log.
Event 454
Source: ESENT
FSCEventing (9324) Database recovery/restore failed with unexpected error - 501.
Event 1076
Source: FSCEventing
The Forefront Protection Eventing Service has stopped.
Thank you very much!
Arnel

Hi Arnel,
Based on error messages, it indicates a log file (inc.log) has become corrupted. Please restore the log file
from a backup copy, and then check if this issue can be solved. For more details, please refer to the following article.
Event Id 465
Hope this helps.
Best regards,
Justin Gu

Active Directory Management Gateway Service installation error

Hey,
When I attempt to install the 32 bit Server 2008 package from http://www.microsoft.com/en-us/download/details.aspx?displaylang=en&id=2852 I get an error saying that it's not the correct version. Just in case I tried the 3 other versions, but as
expected they give the same error. Any ideas?
Thanks In Advance,

Hi,
Based on the description, we can try to contact Microsoft Customer Support Services to obtain the hotfix to see if it helps.
A hotfix rollup package for Active Directory Web Service is available for the .NET Framework 3.5 SP1
http://support.microsoft.com/kb/969166
Besides, the following thread focused on the similar issue with ours and can be referred to for more information.
Active Directory Management Gateway Service - install problem
http://answers.microsoft.com/en-us/windows/forum/windows_other-windows_install/active-directory-management-gateway-service/d02c3ee7-ee4d-e011-8dfc-68b599b31bf5?tab=question&status=AllReplies
Best regards,
Frank Shen
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Expiring Certificate in Threat Management Gateway workgroup configuration

Can someone point me to documentation on how to renew a expiring certificate in a Threat Management Gateway in an workgroup configuration. The certificate is tied to the ISASTGCTL service.
Thanks in advanced.

Thanks a Lot Anders but I could not understand "one server cert for each array member issued to the fqdn
of the member" . Does it mean
1 . different certificate for each array member (i.e server01.workgroup.local for server01 and server02.workgroup.local
for server02)?
OR
2. Single server certificate (server01.workgroup.local) for both the servers. server01 in the primary
member of the array.
I am asking this because at present I can see that there is same server certificate present (i,e server01.workgroup.local)
on both the servers under ADAM_ISASTGCTRL\personal certificate store.
could you please throw some light on it.
Thanks and regards
Lalit

AD Management Gateway Service for Windows Server 2008 SP2

Hey,
I'm having the same issue as in this thread.
https://social.technet.microsoft.com/forums/windowsserver/en-US/93be1866-8aa8-4004-be95-113b7a4faef2/ad-management-gateway-service-for-windows-server-2008-sp2
And trying to follow the 5 step procedure listed in the 3rd post, but am stuck on step 5, getting the hotfix from Microsoft. The link posted from the Hotfix page is just a generic Microsoft Support page. Which is not helpful. How do I actually contact them
(phone # or email address) to get the software?
Thanks In Advance,

No luck. I've tried the chat which asks which Windows version Im using and there's no Server 2008 only desktop versions. I called and after talking with 3 people I got cut off. There has to be an easier way to get a simple file downloaded.
You can hire me to do it for you. I am always successful at contacting MS Support.
You didn't follow the instructions I posted.
Reach us over the phone at 1-800-642-7676 (TTY: 1-800-892-5234)
http://smallbusiness.support.microsoft.com/en-us/contact/
Click Technical Support for Chat.
GREAT BIG BLUE BUTTON SAYS "Technical Support" - CLICK IT AND SELECT WINDOWS SERVER AT THE BOTTOM OF THE LIST.
It is really that easy.
¯\_(ツ)_/¯

Exchange 2010 SP3 services keep stopping

Hi Folks,
Been struggling to find any answer to this problem. Hoping someone here can give me some guidance.
Have a Windows SBS 2011 Server which was migrated from SBS 2003. Have a secondary DC purely as a backup DC.
Ever so often three Exchange Services keep stopping:
EdgeSync
Forms-Based Authentication service
RPC Client Access
Which of course stops clients accessing emails. If I simply start the three services all is good. Sometimes it will be a few days before they will stop again. At the time they stop I get the following Event ID's
MSExchangeRPC Event ID: 1002
Failed to register service principal name ExchangeMDB. Failed with error code No authority could be contacted for authentication (0x80090311).
MSExchange EdgeSync Event ID: 1045
Initialization failed with exception: Microsoft.Exchange.Data.Directory.NoSuitableServerFoundException: The Microsoft Exchange Active Directory Topology service on server localhost did not return any suitable domain controllers.
at Microsoft.Exchange.Data.Directory.DSAccessTopologyProvider.GetConfigDCInfo(Boolean throwOnFailure)
at Microsoft.Exchange.Data.Directory.TopologyProvider.PopulateConfigNamingContexts()
at Microsoft.Exchange.Data.Directory.ADSession.GetConfigurationNamingContext()
at Microsoft.Exchange.Data.Directory.SystemConfiguration.ADSystemConfigurationSession.GetLocalSite()
at Microsoft.Exchange.EdgeSync.EdgeSyncConfig.<Initialize>b__0()
at Microsoft.Exchange.Data.Directory.ADNotificationAdapter.RunADOperation(ADOperation adOperation, Int32 retryCount)
at Microsoft.Exchange.Data.Directory.ADNotificationAdapter.TryRunADOperation(ADOperation adOperation, Int32 retryCount). If this warning frequently occurs, contact Microsoft Product Support.
I'm wondering if something went wrong with the migration as we didn't do it. It is a fairly new server 6 months old.
Any suggestions would be appreciated.
Thanks Brandan

Thanks Guys,
I can confirm that IPv6 is on. I ran the BPA and it did throw up a few issues, one with old server in DNS forward lookup zone. I have fixed these and waiting to see if they make a difference. The problem has always happened since the migration.
I have also switched the FormsBased and RPC to delayed start because I noticed these sometimes don't start after a reboot.
Keeping an eye on it and will report any updates.
Thanks Brandan

Mail Service Keeps Stopping For No Reason

Hi There everyone. Over the past few days my Mail Service keeps stopping. Not giving any particular error, the only clue is this log message:-
Jan 6 13:12:39 server master[371]: exiting on SIGTERM/SIGINT
Is that helpful? I can start the service again and it seems OK... for a few hours then it stops again.
I have tried, reconstructing and repairing until I am blue in the face. Any other suggestions please? Thanks in advance.

I have just had the same thing happend again today with this in the log file:-
Jan 12 08:52:53 server imap[1413]: AOD: user options: no lookup required for: paul
Jan 12 08:52:53 server imap[1413]: login: localhost [::1] paul plaintext user logged in
Jan 12 08:52:53 server imap[1413]: quota set to "unlimited" for mailbox user.paul
Jan 12 08:52:53 server imap[1413]: open: user paul opened INBOX
Jan 12 08:52:53 server imap[1413]: accepted connection
Jan 12 08:52:53 server imap[1413]: AOD: user options: no lookup required for: paul
Jan 12 08:52:53 server imap[1413]: login: localhost [::1] paul plaintext user logged in
Jan 12 08:52:53 server imap[1413]: quota set to "unlimited" for mailbox user.paul
Jan 12 08:52:53 server imap[1413]: open: user paul opened INBOX
Jan 12 08:52:53: --- last message repeated 2 times ---
Jan 12 08:52:53 server imap[1413]: SQUAT failed to open index file
Jan 12 08:52:53 server imap[1413]: SQUAT failed
Jan 12 08:53:07 server master[367]: process 1399 exited, status 0
Jan 12 08:54:21 server master[367]: process 1413 exited, status 0
Jan 12 09:02:07 server master[51]: getrlimit: max processes limit set to cur=2068 max=2068
Jan 12 09:02:07 server master[51]: process started
Jan 12 09:02:08 server master[177]: about to exec /usr/bin/cyrus/bin/ctl_cyrusdb
Jan 12 09:02:12 server ctl_cyrusdb[177]: verifying cyrus databases
Jan 12 09:02:14 server ctl_cyrusdb[177]: skiplist: recovered /var/imap/mailboxes.db (15 records, 2784 bytes) in 2 seconds
Jan 12 09:02:16 server ctl_cyrusdb[177]: skiplist: recovered /var/imap/annotations.db (0 records, 144 bytes) in 2 seconds
Jan 12 09:02:28 server master[261]: getrlimit: max processes limit set to cur=2068 max=2068
Jan 12 09:02:29 server master[261]: process started
Jan 12 09:02:29 server master[262]: about to exec /usr/bin/cyrus/bin/ctl_cyrusdb
Jan 12 09:03:42 server master[335]: process started
Jan 12 09:03:42 server master[337]: about to exec /usr/bin/cyrus/bin/ctl_cyrusdb
Jan 12 09:04:00 server ctl_cyrusdb[337]: DBERROR db4: unable to join the environment
Jan 12 09:04:15 server ctl_cyrusdb[337]: verifying cyrus databases
Jan 12 09:04:16 server ctl_cyrusdb[337]: skiplist: recovered /var/imap/mailboxes.db (15 records, 2784 bytes) in 1 second
Jan 12 09:04:16 server ctl_cyrusdb[337]: skiplist: recovered /var/imap/annotations.db (0 records, 144 bytes) in 0 seconds
Jan 12 09:04:41 server master[352]: getrlimit: max processes limit set to cur=2068 max=2068
Jan 12 09:04:41 server master[352]: process started
Jan 12 09:04:41 server master[354]: about to exec /usr/bin/cyrus/bin/ctl_cyrusdb
Jan 12 09:04:51 server ctl_cyrusdb[354]: verifying cyrus databases
Jan 12 09:04:51 server ctl_cyrusdb[354]: skiplist: recovered /var/imap/mailboxes.db (15 records, 2784 bytes) in 0 seconds
Jan 12 09:04:52 server ctl_cyrusdb[354]: skiplist: recovered /var/imap/annotations.db (0 records, 144 bytes) in 1 second
Jan 12 09:05:17 server master[387]: process started
Jan 12 09:05:27 server master[447]: getrlimit: max processes limit set to cur=2068 max=2068
Jan 12 09:05:27 server master[447]: process started
Jan 12 09:05:27 server master[448]: about to exec /usr/bin/cyrus/bin/ctl_cyrusdb
Jan 12 09:05:41 server master[451]: getrlimit: max processes limit set to cur=2068 max=2068
Jan 12 09:05:41 server master[451]: process started
Jan 12 09:05:41 server master[452]: about to exec /usr/bin/cyrus/bin/ctl_cyrusdb
Jan 12 09:05:59 server ctl_cyrusdb[452]: DBERROR db4: unable to join the environment
Jan 12 09:06:01 server ctl_cyrusdb[452]: verifying cyrus databases
Jan 12 09:06:01 server ctl_cyrusdb[452]: skiplist: recovered /var/imap/mailboxes.db (15 records, 2784 bytes) in 0 seconds
Jan 12 09:06:02 server ctl_cyrusdb[452]: skiplist: recovered /var/imap/annotations.db (0 records, 144 bytes) in 1 second
Jan 12 09:06:21 server master[479]: getrlimit: max processes limit set to cur=2068 max=2068
Jan 12 09:06:21 server master[479]: process started
Jan 12 09:06:21 server master[480]: about to exec /usr/bin/cyrus/bin/ctl_cyrusdb
Jan 12 09:06:31 server master[481]: getrlimit: max processes limit set to cur=2068 max=2068
Jan 12 09:06:42 server master[483]: getrlimit: max processes limit set to cur=2068 max=2068
Jan 12 09:06:43 server master[483]: process started
Jan 12 09:07:01 server ctl_cyrusdb[485]: DBERROR db4: unable to join the environment
Jan 12 09:07:02 server ctl_cyrusdb[485]: verifying cyrus databases
Jan 12 09:07:02 server ctl_cyrusdb[485]: skiplist: recovered /var/imap/mailboxes.db (15 records, 2784 bytes) in 0 seconds
Jan 12 09:07:02 server ctl_cyrusdb[485]: skiplist: recovered /var/imap/annotations.db (0 records, 144 bytes) in 0 seconds
Jan 12 09:07:28 server ctl_cyrusdb[485]: done verifying cyrus databases
Jan 12 09:07:28 server master[497]: about to exec /usr/bin/cyrus/bin/idled
Jan 12 09:07:29 server master[483]: Cyrus POP/IMAP Server v2.3.8 ready for work
Jan 12 09:07:29 server master[499]: about to exec /usr/bin/cyrus/bin/ctl_cyrusdb
Jan 12 09:07:29 server ctl_cyrusdb[499]: checkpointing cyrus databases
Jan 12 09:07:29 server ctl_cyrusdb[499]: archiving database file: /var/imap/annotations.db
Jan 12 09:07:29 server ctl_cyrusdb[499]: archiving log file: /var/imap/db/log.0000000001
Jan 12 09:07:29 server ctl_cyrusdb[499]: archiving database file: /var/imap/mailboxes.db
Jan 12 09:07:29 server ctl_cyrusdb[499]: archiving log file: /var/imap/db/log.0000000001
Jan 12 09:07:29: --- last message repeated 1 time ---
Jan 12 09:07:29 server ctl_cyrusdb[499]: done checkpointing cyrus databases
Jan 12 09:07:29 server master[483]: process 499 exited, status 0
Jan 12 09:08:16 server master[512]: about to exec /usr/bin/cyrus/bin/imapd
Jan 12 09:08:16 server imap[512]: executed
Jan 12 09:08:16 server imap[512]: accepted connection
Jan 12 09:08:16 server master[513]: about to exec /usr/bin/cyrus/bin/imapd
Jan 12 09:08:16 server imap[513]: executed
Jan 12 09:08:16 server imap[513]: accepted connection
Jan 12 09:08:17 server imap[512]: login: [172.16.1.99] paul plaintext user logged in
Jan 12 09:08:17 server imap[512]: quota set to "unlimited" for mailbox user.paul
Jan 12 09:08:17 server master[514]: about to exec /usr/bin/cyrus/bin/imapd
Jan 12 09:08:17 server imap[513]: login: [172.16.1.99] florensis CRAM-MD5 User logged in
Jan 12 09:08:17 server imap[513]: quota set to "unlimited" for mailbox user.florensis
Jan 12 09:08:17 server master[515]: about to exec /usr/bin/cyrus/bin/imapd
Jan 12 09:08:17 server imap[515]: executed
Jan 12 09:08:17 server imap[515]: accepted connection
Jan 12 09:08:17 server master[516]: about to exec /usr/bin/cyrus/bin/imapd
Jan 12 09:08:17 server imap[516]: executed
Jan 12 09:08:17 server imap[516]: accepted connection
Jan 12 09:08:17 server imap[516]: login: [172.16.1.99] paul plaintext user logged in
Jan 12 09:08:17 server imap[516]: quota set to "unlimited" for mailbox user.paul
Jan 12 09:08:17 server imap[515]: login: [172.16.1.99] florensis CRAM-MD5 User logged in
Jan 12 09:08:17 server imap[515]: quota set to "unlimited" for mailbox user.florensis
Jan 12 09:08:17 server imap[516]: seen_db: user paul opened /var/imap/user/p/paul.seen
Jan 12 09:08:17 server imap[516]: open: user paul opened Junk
Jan 12 09:08:17 server imap[515]: skiplist: recovered /var/imap/user/f/florensis.seen (7 records, 14904 bytes) in 0 seconds
Jan 12 09:08:17 server imap[515]: seen_db: user florensis opened /var/imap/user/f/florensis.seen
Jan 12 09:08:17 server imap[516]: SQUAT failed to open index file
Jan 12 09:08:17 server imap[515]: open: user florensis opened INBOX
Jan 12 09:08:17 server imap[516]: SQUAT failed
Jan 12 09:08:18 server master[517]: about to exec /usr/bin/cyrus/bin/imapd
Jan 12 09:08:18 server imap[517]: executed
Jan 12 09:08:18 server imap[517]: accepted connection
Jan 12 09:08:18 server imap[517]: login: [172.16.1.99] florensis CRAM-MD5 User logged in
Jan 12 09:08:18 server imap[517]: quota set to "unlimited" for mailbox user.florensis
Jan 12 09:08:18 server master[518]: about to exec /usr/bin/cyrus/bin/imapd
Jan 12 09:08:18 server imap[518]: executed
Jan 12 09:08:18 server imap[519]: executed
Jan 12 09:08:18 server imap[518]: SQUAT failed to open index file
Jan 12 09:08:18 server imap[518]: SQUAT failed
Jan 12 09:08:18 server master[520]: about to exec /usr/bin/cyrus/bin/imapd
Jan 12 09:08:18 server imap[520]: executed
Jan 12 09:08:18 server imap[520]: accepted connection
Jan 12 09:08:19 server imap[516]: Expunged 7 messages from user.paul.Junk
Jan 12 09:08:19 server imap[520]: login: [172.16.1.99] florensis CRAM-MD5 User logged in
Jan 12 09:08:19 server imap[520]: quota set to "unlimited" for mailbox user.florensis
Jan 12 09:08:19 server imap[517]: seen_db: user florensis opened /var/imap/user/f/florensis.seen
Jan 12 09:08:19 server imap[517]: open: user florensis opened Junk
Jan 12 09:08:19 server imap[517]: SQUAT failed to open index file
Jan 12 09:08:19 server imap[517]: SQUAT failed
Jan 12 09:08:19 server imap[519]: seen_db: user florensis opened /var/imap/user/f/florensis.seen
Jan 12 09:08:19 server imap[519]: open: user florensis opened Apple Mail To Do
Jan 12 09:08:19 server imap[520]: seen_db: user florensis opened /var/imap/user/f/florensis.seen
Jan 12 09:08:19 server imap[520]: open: user florensis opened Deleted Messages
Jan 12 09:08:19 server imap[520]: SQUAT failed to open index file
Jan 12 09:08:19 server imap[520]: SQUAT failed
Jan 12 09:08:20 server imap[513]: accepted connection
Jan 12 09:08:20 server imap[513]: login: [172.16.1.99] paul plaintext user logged in
Jan 12 09:08:20 server imap[513]: quota set to "unlimited" for mailbox user.paul
Jan 12 09:08:20 server imap[514]: Expunged 1 messages from user.paul
Jan 12 09:08:20 server imap[513]: seen_db: user paul opened /var/imap/user/p/paul.seen
Jan 12 09:08:22 server imap[513]: open: user paul opened Apple Mail To Do
Jan 12 09:08:22 server imap[516]: open: user paul opened Sent Messages
Jan 12 09:08:22 server imap[515]: Expunged 1 messages from user.florensis
Jan 12 09:08:23 server imap[517]: open: user florensis opened Apple Mail To Do
Jan 12 09:08:23 server imap[518]: open: user paul opened Junk
Jan 12 09:08:24 server imap[518]: Expunged 1 messages from user.paul.Junk
Does this help? It then cleared itself??

Problem starting Microsoft Forefront Server Protection Eventing Service?

Hi Guys,
Our Exchange 2007 Microsoft Exchange Information Store and Microsoft Exchange Transport services wont start. All dependencies have started except Microsoft Forefront Server Protection Eventing Service. We tried starting it manually but we got this message
(see attached). Any idea how to fix this? Since we cant start Microsoft Exchange Information Store and Microsoft Exchange Transport services, OWA users cant access their emails. Please advise.
Thanks,
Arnel

Hi Arnel,
Based on your description, I understand that the Microsoft Forefront Server Protection Eventing Service can’t
be started.
Please run
services.msc, select the Microsoft Forefront Server Protection Eventing Service and double-click to open it. In the service properties show box, please select Dependencies tab to check which service that it depends on didn’t start.
Meanwhile, would you please let me know which version of the
Forefront for Exchange Server? Please check if you have installed the latest updates to Forefront for Exchange Server. (Such as:
Hotfix Rollup 3 for Microsoft Forefront Protection for Exchange and so on.)
By the way, this issue seems to be more related to Forefront for Exchange Server. Please post it in the Forefront
for Exchange Server forum. I believe we will get a better assistance there.
https://social.technet.microsoft.com/Forums/forefront/en-US/home?forum=FSENext
Hope this helps.
Best regards,
Justin Gu

FEP 2010 service keeping stopping

Hi,
All our Windows XP machine having problem with Microsoft Forefront 2010. Its keep stop the service.
I have restarted but after 30 minutes in stops again. this is happen with over 50 pc now.
Its only started to happen today.

Hi,
Sorry for the inconvenience, it is due to an update that was shipped on April 15, 2014. This was corrected via signature update, which automatically resolved the issue, and if you have deployed the most recent signatures do not need to take any action. In addition,
if you have disabled Behavior Monitoring or changed any other features, please revert those changes.
More information:
Antimalware Engine 1.1.10502.0 was released to customers on 17 April 2014
Best regards,
Susie

Async service keep stopping with Specified cast is not valid

Hi there,
Our organization currently is experiencing some failure on CRM 4.0 Async service.
The error message is :
failed while monitoring asynchronous operations queue. Exception: System.InvalidCastException: Specified cast is not valid.
at Microsoft.Crm.Asynchronous.ServerOrganizationConfiguration.GetSdkBaseUrl()
at Microsoft.Crm.Asynchronous.ServerOrganizationConfiguration.get_WebServiceEndpoint()
at Microsoft.Crm.Asynchronous.CrmServiceFactory.CreateCrmService(Guid organizationId, Nullable`1 userId, CorrelationToken correlationToken)
at Microsoft.Crm.Asynchronous.SdkPluginDescriptionProvider.GetPluginTypeDescription(Guid pluginTypeId, IOrganizationContext context)
at Microsoft.Crm.Caching.PluginTypeCacheLoader.LoadCacheData(Guid key, IOrganizationContext context)
at Microsoft.Crm.Caching.CrmMultiOrgCache`2.CreateEntry(TKey key, IOrganizationContext context)
at Microsoft.Crm.Caching.CrmSharedMultiOrgCache`2.LookupEntry(TKey key, IOrganizationContext context)
at Microsoft.Crm.Caching.PluginTypeCache.LookupEntry(Guid pluginTypeId, IOrganizationContext context)
at Microsoft.Crm.Asynchronous.AsyncOperationCommand.GetPluginType(Guid pluginTypeId)
at Microsoft.Crm.Asynchronous.EventOperation.InternalExecute(AsyncEvent asyncEvent)
at Microsoft.Crm.Asynchronous.AsyncOperationCommand.Execute(AsyncEvent asyncEvent)
at Microsoft.Crm.Asynchronous.QueueManager.PoolHandler.ProcessAsyncEvent(AsyncEvent asyncEvent)
at Microsoft.Crm.Asynchronous.QueueManager.PoolHandler.InvokeHandlerInPool(Object state)
at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state)
at System.Threading._ThreadPoolWaitCallback.PerformWaitCallbackInternal(_ThreadPoolWaitCallback tpWaitCallBack)
at System.Threading._ThreadPoolWaitCallback.PerformWaitCallback(Object state)
It looks the GetSdkBaseUrl() function failed. Has anyone experienced it before?
Cheers

I don't know about your specific error, but the CRM 4.0 Async service was notoriously unstable. That's why they added a monitoring service in later versions to keep it up. However, for 4.0, I recommend going to the Service itself in the Windows
Service area, and then tell the "behavior after failure" section to "Restart" every time it fails. While not perfect, it will keep your Async service up and running even when it crashes.
The postings on this site are solely my own and do not represent or constitute Hitachi Solutions' positions, views, strategies or opinions.

Microsoft Forefront Threat management Gateway services keeps stopping

Similar Messages

Maybe you are looking for