• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1723
  • Last Modified:

Disabling Symantec Mail Security for MS Exchange (v4.6.1.107) notification in WinServ2K3 event log

I have recently enstated a standard spam subpolicy in Symantec Mail Security for MS Exchange - version 4.6.1.107.  SMSMSE is installed on a Windows Server 2003 environment.  The subpolicy is set to scan incoming SMTP traffic, weed out the spam, and delete it automatically.  In regards to the mechanism, it works well.  The problem is that SMSMSE is sending sending a notification to the Windows event log with every message that is blocked.  These notifications are overwhelming the event log and to be honest, I don't even want to know if a spam message is deleted.

The event log info is as follows:

Type: Warning
Source: Symantec Mail Security for Microsoft Exchange
Category: Content Filtering Rules
Event ID: 291
Description: The message "%message%" located in SMTP has violated the following policy settings:
                         Policy: Standard
                         SubPolicy: Filtering SubPolicy
                         Rule: Spam
                   The following actions wer taken on it:
                         The message "%message%" was marked for deletion for the following reason(s):
                                 A filtering rule was violated.

I have disabled ALL notification options in the SMSMSE console for the spam subpolicy, yet I still receive these notifications in the event log, to the tune of about 100 a day.

What simple thing am I missing that would enable me to turn off these notifications?
0
Sturgeon1483
Asked:
Sturgeon1483
  • 2
  • 2
1 Solution
 
charles18602Commented:
under Global>Configuration>Heuristic Antispam Engine> do you have Log regected messages selected?
0
 
Sturgeon1483Author Commented:
I just checked and no, that option is not selected.  The only boxes checked under heuristic antispam engine settings are to enable the heuristics and to tag the message subject with a spam label.

"Log rejected messages" is not selected.
0
 
SymShadyCommented:
You have to live with it unfortunately...There may be a way to do this in the registry but no way to do so in the interface.  Sorry.  I have even spoke to Symantec technicians about this one.
0
 
Sturgeon1483Author Commented:
Hmm, that's too bad.  Though your explanation would explain why I've had no luck finding a solution.  Thanks for the info.
0
 
SymShadyCommented:
I know it is a bummer...There has to be a way to hack the registry or something to do this this though.  What I am afraid of is that if there is a way to disable writing to the windows event log it will disable all and not just for the one policy.  This would not be helpful as you may want to view some of the other stuff written to the event log from SMSMSE.  If I find a better answer I will post it but I am not getting my hopes up to high on this one.  Like I said Symantec technicians couldn't even help on this one.

wish I had more!
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now