Multiple ImFilter Warnings

Question

Recently changed filter to Action: Warn
get-csimfilterconfiguration
Get-CsImFilterConfiguration
Identity : Global
Prefixes : {callto:, file:, ftp., ftp:...}
AllowMessage :
WarnMessage : Warning: Hyperlinks can contain viruses or otherwise be ha
rmful to your computer and data. To protect your computer,
click only those hyperlinks from trusted sources.
Enabled : True
IgnoreLocal : True
BlockFileExtension : True
Action : Warn
Filter is working but warnings are tripled during federated IM.
Warning: Hyperlinks can contain viruses or otherwise be harmful to your computer and data. To protect your computer, click only those hyperlinks from trusted sources. Warning: Hyperlinks can contain viruses or otherwise be harmful to your computer and data. To protect your computer, click only those hyperlinks from trusted sources.Warning: Hyperlinks can contain viruses or otherwise be harmful to your computer and data. To protect your computer, click only those hyperlinks from trusted sources.
www.google.com <http://www.google.com/>
and doubled during internal IM.
creating 3 identities for pools : fes ,director, edge and enable only fes didn't help.
It looks each pool adds next warning, how to make sure that 1 warning will be added ?

Answer 1

Get-CsImFilterConfiguration
Identity           : Global
Prefixes           : {callto:, file:, ftp., ftp:...}
AllowMessage       :
WarnMessage        : Warning: Hyperlinks can contain viruses or otherwise be ha
                     rmful to your computer and data. To protect your computer,
                      click only those hyperlinks from trusted sources.
Enabled            : False
IgnoreLocal        : True
BlockFileExtension : True
Action             : Warn
Identity           : Service:Registrar:fespool.domain.name
Prefixes           : {callto:, file:, ftp., ftp:...}
AllowMessage       :
WarnMessage        : Warning: Hyperlinks can contain viruses or otherwise be ha
                     rmful to your computer and data. To protect your computer,
                      click only those hyperlinks from trusted sources.
Enabled            : True
IgnoreLocal        : True
BlockFileExtension : False
Action             : Warn
Identity           : Service:EdgeServer:edgepool.domain.name
Prefixes           : {callto:, file:, ftp., ftp:...}
AllowMessage       :
WarnMessage        :
Enabled            : False
IgnoreLocal        : True
BlockFileExtension : False
Action             : Allow
Identity           : Service:Registrar:dirpool.domain.name
Prefixes           : {callto:, file:, ftp., ftp:...}
AllowMessage       :
WarnMessage        :
Enabled            : False
IgnoreLocal        : True
BlockFileExtension : False
Action             : Allow
You can configure it in Control Panel "IM and Precense" -> "URL Filter" -> "New" -> "Pool configuration"
In this configuration receives 2 warnings during Internal IM and 1 warning during fedarated IM, in case FEs Pool IM filter disabled for sure warnings dissapear totally.
Statement:
If a server (Server1) adds a warning to an instant message that contains an active hyperlink, a subsequent server (Server2) that receives this instant message can still take a different action
based on this active hyperlink present in the instant message and block the instant message or add a warning. If Server2 is configured only to add a warning for this URL, the earlier warning added by Server1 is removed, and the warning configured on Server2
is added to the beginning of the instant message.
From:
https://technet.microsoft.com/en-us/library/gg520952(v=ocs.14).aspx
looks is not true.
Please help why there is more than 1 warning ?