Hi,
I have problem with my SMG. When i try to use fiters in SMG Spam Message Quarantine (From, Time Range: past week)
I wait for a long time and it's end with time out.
verions of SNG: 10.6.2-3
do anyone know what is the issue and the solution for it?
Hello,
we've experienced an increased load of our DNS servers ever since we updated our gateway to version 10.6.1-4 (now we're running 10.6.2-3), which introduced the "URL reputation lookup" feature. The DNS servers seem to be overloaded with (seemingly) unneccessary queries along the lines of:
20-Oct-2016 15:03:04.401 client 131.XXXXXX#55374: view internal: query: 27dd3f41eb4XXXXXe24e14e756bd5.smg.ultra.brightmail.com IN TXT +ED (192.XXXXX)
20-Oct-2016 15:03:04.445 client 131.XXXXXX#52635: view internal: query: dff7cebdbcXXXXXXX3f96b34cf328.smg.ultra.brightmail.com IN TXT +ED (192.XXXXX)
My question is, is this intended? What are those hash values in front of the ".smg.ultra.brightmail.com"?
If it's working as intended, would it be possible to disable this feature on for example only 2 scanners via cmd line? We're running a hybrid environment and scanning of internal communicaton for URLs isn't really needed.
Also - is the "URL reputation lookup" feature adding a significant value? I've checked the https://support.symantec.com/en_US/article.TECH234173.html article and it says "Unchecking this option will not significantly decrease anti-spam effectiveness over prior releases" but I'm not sure what exactly does it mean. I'm asking this to find out if it might be justifiable for us to set up a dedicated DNS server only for the gateway to use (so the high load wouldn't matter).
Looking forward to any answers :)
Best regards,
Václav Měch
Hi,
Is it possible to change text in notification for action: Clean the message?
Przemek
Hi everyone,
my customer has begin to receive a lot of emails with subject "Mail delivery failed: returning message to sender".
In the returned email state something like that customer was sent email earlier to email address "abc@xyz.com" or to the similar unknow email address. However, customer never sent email to these email addresses.
I checked message audit logs on smg for one of many returned emails and I see that message accepted from dns host provider of our customer. It looks confusing.
It looks like someone from outside has send emails on behalf our customer.
If someone know something about this problem, and how to resolve that ?
SMG version 10.6.2.-3. Mail server Exchange 2010.
One of my users recently forwarded me an error message with the following contents:
"Your email has been flagged by Symantec's Global Intelligence Network
as being sent via a known malicious IP address. Please contact the recipient
via telephone if you believe this message was received in error."
However, after checking http://ipremoval.sms.symantec.com/lookup and mxtoolbox, our IPs are blacklist-free. Any ideas on what could have caused this? My next step is to contact the other network's administrators.
Hi,
As per what Symantec official arcticles and admin guide says.
Bloodhound heuristics involve a trade-off between higher virus-detection rates and the speed with which Symantec Brightmail Gateway processes mail. Lower heuristic levels may miss more viruses but require less processing power. Higher heuristic levels may catch more viruses but consume more processing power.
What is the risk of trying to change the level from meduim to high?
If it is only about CPU/Memory + some additional latency seconds that's fine since we are only using about 10% of CPU.
Does any one have an experience of changing that level from default (meduim) to high?
Is there any risk of getting higher level of false positives ?
Please share thoughts
Ik heb meerdere mails met bijlage in de SMG onder Content en Suspicious files quarantine.
mijn vraag is wat er gebeurt als ik op "reject" klik. worden die mails met bijlage dan verwijderd en worden ze in de toekomst tegen gehouden of komen die terug?
Seems to be getting the following NDR, the message doesn't leave our email system.
This is affecting one external user, i have created a content policy to bypass the spam for this domain name, still no success?
any ideas?
550 5.7.1 message rejected as spam by content filtering
Hello,
I upgraded the Symantec Messaging Gateway to version 10.6.2-3, and since then, an Administrator with restricted rights cannot work on the Management Web access. He can log in, he can see the Dashboard but not the graffics, and if he clicks anything inside the page, he is logged out.
I tested the permissions in many ways, but when Manage Status and Logs is checked for view or Modify rights, we encounter these problems. When this access is not granted, everything is working as normal.
Internet Explorer version is 11, so is not the browser. Is this a bug?
Can anyone help me?
Hi,
We have messaging gateway which send mails to our lotus notes mail server. On lotus mail server log, I can see that the messaging gateway delivered the mail based on IP; but when I check on messaging gateway by sender or recipient, I do not see any entry. Is there a way to check all emails that have been received by the messaging gateway. With Message Audit Logs a particular search can be done, I would prefer having list of all mails received.
Thanks to help!
Hi All
I am not quite the IT professional and need some advice on what the best way of doing this is.
We have had issues with our fibre connectivity and to increase uptime we have addded another fibre line from a different ISP. Obviously this means we have two public IP's (for mail) both going in to our firewall.
With this said, am I correct in saying I would need to create two MX DNS entries (e.g. mail1.abc.com and mail2.abc.com) with mail1 having a higher priority, lets say 10, and mail2 a priority of 20? I will then also have the ISP's add the PTR records.
On my brightmail device, what should I make the host name? mail1 or mail2? Or something else?
Hope what I am trying to do makes sense above.
Thank you.
Regards,
Hi,
I am having problem at times with 1 of my messaging gateway, though the email address exists in Protocols> SMTP> Domains the sender gets a delivery failure
Delivery has failed to these recipients or distribution lists:
concerned email address
Your message wasn't delivered because of security policies. Microsoft Exchange will not try to redeliver this message for you. Please provide the following diagnostic text to your system administrator.
The following organization rejected your message: AntiSpam (name of the messaging gateway).
AntiSpam #550 5.7.1 < email address >... email address ... No such user ##
I had same problem on 11/11/16, I then whitelisted the sender domain. Today I have whitelisted the connection IP. Strange thing is that when I check on messaging gateway log, I do not find anything.
Can you please help for me to troubleshoot this problem. As already mentioned it happens on and off. Last time was 11/11/16, then it happened today also. Thanks to help!! What could be causing such an issue
Hi everyone,
I am facing a problem with updating the Symantec Messaging Gateway version 10.0.0-7.
The first available update version is 10.0.3-3. Gateway requires to "View description" before downloading the update. When the "View description" button is pressed a popup screen appears and it is blanc (please see attachment). After pressing "OK" and "Download Only" I just get an error: "Please read the corresponding description before continuing with the software update."
So the things just go round and round - no possibility to update.
Tried different browsers: IE11, Chrome, Firefox - no result.
Maybe somebody faced this problem...
Thank you in advance for your help!
Hi all,
I got a question regarding SMG spam quarantine expunger setting, if I set quarantine expunger frequency (drop down list) to Never. It that means it will not release any message in the spam quarantine folder? Because now the setting is Everyday, so our user still will receive the message even it has been quarantined at the first place,but when expunger runs on the defined time frame (12 am everday), the message will auto receive to our user. I just want to know if I set it to Never, it will not release any quarantined message.
Thanks
hi
our corporate requires Exchange messaging Security Solution, and i found SMG can be a good product for us. please let me know how can we test this machine inside our lab.
our company has about 500 users and mail transmission size is about <1k per day.
kind regards,
Mohammad
Hi all,
We have an applinace 8340 bought on November 2011. We like to upgrade SW from ver 10.5.4-4 to 10.6.x. The Release notes for 10.6 at part of Supported platforms mentions that "All supported hardware versions: 8380 purchased after March 2010, 8360purchased after March 2010, and 8340 purchased after September 2010" and in Unssuported platforms "Hardware platforms 8220, 8240, 8260, 8320, and 8340 (PowerEdge 860, R200,and R210 versions) purchased on or before June 2011.". It means that our platforms is ready for upgrade. But when we apply "update check" the message appeares on the screen that the HW is unssuported for that update. Can I do this upgrade? Is it safe to do it or is there any possibilty to exactly find out if our HW is ok or not? Thank for your advice.
hello,
our Symantec Messaging Gateway birghtmail broke yesterday, the issue no one can login into the script
I'm just a normal tech at medium clinic, our system administrator rank quit the job, and now everybody is looking at me to fix it. I do have minor experience, Wordpress small Linux experience..
can anyone tell me the location of the config files? so I can access the database to see what's going on? and the log location anything I can check.
I see a lot of files, but I failed to locate the config.php or something like that, to check if it's correctly anything
thank you
Hi Guys.
Running messaging gateway. I have the control center behind nat on a internal ip 172 range. An external scanner is on a public ip address. When emails need to go to the control center, they are getting stuck in delivery queue. Is there anyway to get around this?
Need one info,Customer is looking to secure and mask the critical information such as account details, credit card and debit cards details, pin code during the communication between bank and customer by user credentials or other encryption mechanism. They are currently doing PoC with Fortimail with secure mail feature.
IN POC need to show
For Encryption part, does this feature comes in same package.
I am new to this product and I have to deploy for symantec messaging gateway 10.6 as POC. We have our mail server in exchange 2010 and all exchange related configuration is on same. The users are around 800. Now what configurations do I need to configure in exchange server so that all mail trafics should in and out through symantec message gateway (SMG) so that only good mails should reached to clients. Please do provide required relevant resources for the same.
Thanks in advance