Discussions

Symantec Antivirus (Brightmail) for Ms Exchange Servers

Tags:
+
0 Votes
Locked

Symantec Antivirus (Brightmail) for Ms Exchange Servers

DaShard_z
Problem:

The IIS, SMTP, POP3 and WWW services crash frequently on the Exchange with Symantec Antivirus servers and they took Exchange down. This happens with a frequency of once or twice an hour - or maybe more.

Resolution:

This issue is caused due to the Symantec Brightmail 5. The recommended workaround is to modify brightmail to no longer use the rulesets that are causing the issue.

Please Call Symantec to resolve this issue. Here is what they will probably tell you - to modify the bmiconfig.xml file.

To modify bmiconfig.xml to work around the issue:

Open the services menu by going to Start -> Run and typing services.msc
Stop the Symantec Mail security for Microsoft exchange service, and the Symantec Mail security spam statistics service, if they are started
Open <system drive>:\Program iles\Symantec\SMSMSE\5.0\Server\SpamPrevention\bmiconfig.xml in a text editor such as notepad
Go to the File menu, choose save as, and save the file as bmiconfig.old
Delete the following 5 strings:
<ruleType>header_regex</ruleType>
<ruleType>body_regex</ruleType>
<ruleType>lang_header_regex</ruleType>
<ruleType>lang_body_regex</ruleType>
<ruleType>bodysig</ruleType>

Once those entries are deleted, go to the File menu, and choose save as, save the file as bmiconfig.xml

Restart the Symantec mail security for Microsoft exchange service; it is not necessary to restart the Spam statistics service

- An easier way is to save the bmiconfig.xml to your Desktop first. Edit it as per the instruction above. THEN stop the Symantec Services, Rename the bmiconfig.xml file and Copy the edited file back to it's original folder. THEN restart the Symantec AV Service(s).
You can find symantec support at this number: 1-800-927-4017

Good Luck.