Forefront Protection for Exchange Rollup 3


Microsoft released Hotfix Rollup 3 for Forefront Protection for Exchange Server (KB2538719).

Here’s the list of fixes included in this rollup:

  1. Mail queues and sluggish Exchange/Outlook performance
  2. Increased “Available Disk Space” Health Point threshold to 250MB
  3. Error: The DNS Blocklist lookup domain blocklist.messaging.microsoft.com could not be contacted
  4. The Exchange Information store crashes with Forefront Protection for Exchange installed
  5. An attempted upgrade of Forefront Protection for Exchange fails with a “Registration Service Failed” error
  6. You receive Forefront Protection Health Notifications indicating a status of “Green to Green”
  7. Forefront generates a MaxDisabledWait error within 15 minutes after starting
  8. A MaxDisabledWait error occurs and Forefront Protection does not recover
  9. Forefront Protection doesn’t apply keyword filtering within hyperlink strings
  10. Forefront Protection for Exchange crashes while scanning a TAR file
  11. An engine update fails in Forefront Protection for Exchange
  12. Emails that are 90 MB or larger are being sent to the Forefront archive folder
  13. The Microsoft Forefront Server Protection Eventing Service will not start following an upgrade from a beta version of Forefront Protection for Exchange
  14. Forefront Protection for Exchange detects files as “Engine Error” when no engines have been enabled for scanning
  15. Messages quarantined due to engine error can now be delivered as complete email
  16. High CPU conditions in EdgeTransort.exe process result in crash
  17. You receive Forefront generated email notification that the Cloudmark engine or Worm list could not update
  18. Exchange email queues at startup following an abnormal shutdown

For more details on the fixes consult the related knowledge base article. You can request the hotfix rollup through the support center here.

Forefront Protection 2010 for Exchange Rollup 2


Microsoft released Hotfix Rollup 2 for Forefront Protection 2010 for Exchange Server (KB2420647).

Here’s the list of fixes included in this rollup:

  1. Out of memory state occurs when running a manual scan in Forefront Protection for Exchange
  2. The link provided by Forefront Protection for Exchange to request removal from the SpamHaus block list wrong
  3. Forefront Protection for Exchange does not display data in multiple console fields and mail cannot be sent externally
  4. When starting a Windows Server 2008 R2 server running Exchange and Forefront Protection for Exchange, startup times are exceptionally long
  5. Forefront Protection for Exchange falsely detects legitimate attachments as Corrupted Compressed files
  6. File filtering does not occur in Forefront Protection for Exchange
  7. A Forefront Protection for Exchange antivirus engine fails to load and mail is deleted
  8. Forefront Protection for Exchange quarantines a blank message when taking action on a subject line filter
  9. When installing FPE on Data Availability Group cluster (DAG), Domain Administrator privileges are required
  10. Messages cannot be scanned because the FSCController service in Forefront Protection for Exchange is stuck in a continuous loop
  11. “The Expiration Date is not valid” is returned when you try to enter a new expiration date in Forefront Protection for Exchange
  12. The Forefront Protection for Exchange Administrator console hangs for several minutes when you navigate to the Filter Lists section
  13. Cannot uninstall Forefront Protection for Exchange on a non-clustered server
  14. Transport Scan process is not safely aborted after an out-of-memory condition occurs
  15. The FSCTransportScanner.exe process in Forefront Protection for Exchange may stop responding, and this generates a Dr. Watson crash that references Bucket ID 1211603866
  16. Filter Lists display an incorrect scan action in the Forefront Protection for Exchange Administrator console
  17. FSCController.exe is reloaded many times whenever the Start-SignatureUpdate cmdlet is run on a cluster running Forefront Protection for Exchange
  18. Submission queues in Exchange 2007 or 2010 fill when making a configuration change in the Forefront through the administrator or through Power Shell

For more details on the fixes consult the related knowledge base article (KB2420647). You can download the Forefront Protection 2010 for Exchange Server Hotfix Rollup 2 here.

Forefront Security for Exchange SP2 RU3


The ForeFront team released Rollup 2 for Forefront Security for Exchange (FSE) Service Pack 2. This rollup which fixes and issue with version 8 of the Kaspersky antivirus engine, introduced with Rollup 2. The related knowledgebase article is kb2420644. Unfortunately the ForeFront Update page doesn’t mention the new Rollup (yet).

You can request the FSESP2RU3 here.

ForeFront TMG SP1 Update 1 for Exchange 2010 SP1


The ForeFront team released Update 1 for Microsoft Forefront Threat Management Gateway (TMG) 2010 Service Pack 1.

Besides bug fixes and some added functionality, Update 1 also adds support for Exchange 2010 SP1. Because Exchange 2010 SP1 doesn’t support the get-antispamupdates cmdlet (see this post), implementing Exchange 2010 SP1 on servers in the Mail protection role (with Exchange – Edge server role – as well as ForeFront Protection for Exchange) leads to issues.

Update 1 fixes this issue. To make things confusing, the ForeFront team calls these cumulative updates Software Update or Update; what’s wrong Rollup? Be advised that the ForeFront Update page doesn’t mention the Update (yet), nor is the related knowledge base article published (kb2288910).

You can download ForeFront TMG SP1 Update 1 here. Note that currently only English is available, other languages are said to be made available soon.

ForeFront Update Center


Want to check if you’re running the latest Service Pack or Rollup for your ForeFront components? The ForeFront team has published a page where all ForeFront components, related technologies included, are listed, including information on the latest Service Pack, Rollup, version number as well as a link to product guidance.

The ForeFront Update Center as it is called contains information on the following products:

  • Microsoft Forefront Protection 2010 for Exchange Server
  • Forefront Protection 2010 for SharePoint
  • Microsoft Forefront Client Security
  • Microsoft Forefront Security for Exchange Server
  • Forefront Security for SharePoint
  • Forefront Server Security Management Console
  • Forefront Security for Office Communications Server
  • Antigen 9.0 for Exchange
  • Antigen 8.0 for Microsoft SharePoint Portal Server
  • Forefront Threat Management Gateway 2010
  • Internet Security and Acceleration Server 2006
  • Forefront Unified Access Gateway 2010
  • Intelligent Application Gateway 2007

You can find the page here.