Link to home
Start Free TrialLog in
Avatar of Sturgeon1483
Sturgeon1483

asked on

Disabling Symantec Mail Security for MS Exchange (v4.6.1.107) notification in WinServ2K3 event log

I have recently enstated a standard spam subpolicy in Symantec Mail Security for MS Exchange - version 4.6.1.107.  SMSMSE is installed on a Windows Server 2003 environment.  The subpolicy is set to scan incoming SMTP traffic, weed out the spam, and delete it automatically.  In regards to the mechanism, it works well.  The problem is that SMSMSE is sending sending a notification to the Windows event log with every message that is blocked.  These notifications are overwhelming the event log and to be honest, I don't even want to know if a spam message is deleted.

The event log info is as follows:

Type: Warning
Source: Symantec Mail Security for Microsoft Exchange
Category: Content Filtering Rules
Event ID: 291
Description: The message "%message%" located in SMTP has violated the following policy settings:
                         Policy: Standard
                         SubPolicy: Filtering SubPolicy
                         Rule: Spam
                   The following actions wer taken on it:
                         The message "%message%" was marked for deletion for the following reason(s):
                                 A filtering rule was violated.

I have disabled ALL notification options in the SMSMSE console for the spam subpolicy, yet I still receive these notifications in the event log, to the tune of about 100 a day.

What simple thing am I missing that would enable me to turn off these notifications?
Avatar of charles18602
charles18602
Flag of United States of America image

under Global>Configuration>Heuristic Antispam Engine> do you have Log regected messages selected?
Avatar of Sturgeon1483
Sturgeon1483

ASKER

I just checked and no, that option is not selected.  The only boxes checked under heuristic antispam engine settings are to enable the heuristics and to tag the message subject with a spam label.

"Log rejected messages" is not selected.
ASKER CERTIFIED SOLUTION
Avatar of SymShady
SymShady

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Hmm, that's too bad.  Though your explanation would explain why I've had no luck finding a solution.  Thanks for the info.
I know it is a bummer...There has to be a way to hack the registry or something to do this this though.  What I am afraid of is that if there is a way to disable writing to the windows event log it will disable all and not just for the one policy.  This would not be helpful as you may want to view some of the other stuff written to the event log from SMSMSE.  If I find a better answer I will post it but I am not getting my hopes up to high on this one.  Like I said Symantec technicians couldn't even help on this one.

wish I had more!