Joel Brown
asked on
Exchange 2010 ScanMail Fail
I have a user who sent an internal email using outlook 2007 which was processed by our exchange 2010 server. She did not receive an error message when sending but when opening the sent item she gets the following message. " A policy violated content was detected and removed from the original mail header, subject, boty or attachment. You can safely save or delete this replacement attachment. "
I've traced the message using powershell and found the following information but I'm not sure where to go from here as I didn't find the message listed in the Agent Logs for that time period .....
++++++++++++++++++++++++++
PSComputerName : exchange1.desertortho.loca l
RunspaceId : 61def46d-dfa4-479d-81ee-29 9869729dc3
Timestamp : 6/7/2013 11:16:54 AM
ClientIp :
ClientHostname : EXCHANGE1
ServerIp :
ServerHostname :
SourceContext : ScanMail Routing Agent
ConnectorId :
Source : AGENT
EventId : FAIL
InternalMessageId : 366903
MessageId : <EF54B011491F8341A6201379C 871891606A E7FE4@EXCH ANGE1.Dese rtOrtho.lo cal>
Recipients : {debi@dbjortho.com}
RecipientStatus : {}
TotalBytes : 16033
RecipientCount : 1
RelatedRecipientAddress :
Reference :
MessageSubject : W/C charges...
Sender : jodic@dbjortho.com
ReturnPath : jodic@dbjortho.com
MessageInfo :
MessageLatency :
MessageLatencyType : None
EventData :
++++++++++++++++++++++++++ ++++++++++ +++++
We We have anti-spam turned on in exchange as well as our Trendmicro is filtering messages .......
Thanks so much for any help you can provide. ...
Joel Brown
I've traced the message using powershell and found the following information but I'm not sure where to go from here as I didn't find the message listed in the Agent Logs for that time period .....
++++++++++++++++++++++++++
PSComputerName : exchange1.desertortho.loca
RunspaceId : 61def46d-dfa4-479d-81ee-29
Timestamp : 6/7/2013 11:16:54 AM
ClientIp :
ClientHostname : EXCHANGE1
ServerIp :
ServerHostname :
SourceContext : ScanMail Routing Agent
ConnectorId :
Source : AGENT
EventId : FAIL
InternalMessageId : 366903
MessageId : <EF54B011491F8341A6201379C
Recipients : {debi@dbjortho.com}
RecipientStatus : {}
TotalBytes : 16033
RecipientCount : 1
RelatedRecipientAddress :
Reference :
MessageSubject : W/C charges...
Sender : jodic@dbjortho.com
ReturnPath : jodic@dbjortho.com
MessageInfo :
MessageLatency :
MessageLatencyType : None
EventData :
++++++++++++++++++++++++++
We We have anti-spam turned on in exchange as well as our Trendmicro is filtering messages .......
Thanks so much for any help you can provide. ...
Joel Brown
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Scanmail belongs to Trendmicro.
ASKER