ScanTransportCountAttachmentDetect

ScanTransportCountAttachmentDetect_4_Rule (Rule)

Knowledge Base article:

Management Pack
Summary

This counter measures the total number of attachments that have been detected (no action) during the Transport Scan Job.

 
© 2006 Microsoft Corporation, all rights reserved.

Element properties:

TargetFSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport_Installation
CategoryPerformanceCollection
EnabledTrue
Instance NameMicrosoft Forefront Server Security Scan
Counter NameTotal Attachments Detected
Frequency1800
Alert GenerateFalse
RemotableTrue
CommentMom2005ID='{CE2548C4-C8E8-457B-ADA2-A95394E024A2}';MOM2005ComputerGroupID={F1A85322-5BE3-4AC2-8E2C-34F448DA8BE0}

Member Modules:

ID Module Type TypeId RunAs 
_C1D1E985_5F4B_41EC_9405_C9F326608380_ DataSource System.Mom.BackwardCompatibility.Performance.FilteredDataProvider Default
CollectPerfData WriteAction Microsoft.SystemCenter.CollectPerformanceData Default
CollectPerfDataWarehouse WriteAction Microsoft.SystemCenter.DataWarehouse.PublishPerformanceData Default
GenerateAlert WriteAction System.Mom.BackwardCompatibility.AlertResponse Default

Source Code:

<Rule ID="ScanTransportCountAttachmentDetect_4_Rule" Comment="Mom2005ID='{CE2548C4-C8E8-457B-ADA2-A95394E024A2}';MOM2005ComputerGroupID={F1A85322-5BE3-4AC2-8E2C-34F448DA8BE0}" Enabled="true" Target="FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport_Installation" ConfirmDelivery="false" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>PerformanceCollection</Category>
<DataSources>
<DataSource ID="_C1D1E985_5F4B_41EC_9405_C9F326608380_" TypeID="MomBackwardCompatibility!System.Mom.BackwardCompatibility.Performance.FilteredDataProvider">
<ComputerName>$Target/Host/Property[Type="WindowsLibrary!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<CounterName>Total Attachments Detected</CounterName>
<ObjectName>Microsoft Forefront Server Security Scan</ObjectName>
<InstanceName>Transport Scan Job</InstanceName>
<Frequency>1800</Frequency>
<Expression/>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="GenerateAlert" TypeID="MomBackwardCompatibility!System.Mom.BackwardCompatibility.AlertResponse">
<AlertGeneration>
<GenerateAlert>false</GenerateAlert>
</AlertGeneration>
<InvokerType>1</InvokerType>
</WriteAction>
<WriteAction ID="CollectPerfData" TypeID="SystemCenterLibrary!Microsoft.SystemCenter.CollectPerformanceData"/>
<WriteAction ID="CollectPerfDataWarehouse" TypeID="DataWarehouseLibrary!Microsoft.SystemCenter.DataWarehouse.PublishPerformanceData"/>
</WriteActions>
</Rule>