Home
  •  

TransportScanJobEnabledE

TransportScanJobEnabledE_4_Rule (Rule)

Knowledge Base article:

Riepilogo

Questo evento verifica se il processo di analisi trasporto è attivato dalle schermate Impostazioni -> Opzioni generali ed ESEGUI -> Esegui processo nella console Amministratore Forefront.

Se il processo di analisi non viene attivato secondo le procedure suddette, viene generato un evento di errore.

Cause

Il processo di analisi trasporto non è attivato dalle schermate Impostazioni -> Opzioni generali né dalle schermate ESEGUI -> Esegui processo nella console Amministratore Forefront.

Soluzioni

Impostare il processo di analisi trasporto affinché venga attivato dalle schermate Impostazioni -> Opzioni generali ed ESEGUI -> Esegui processo nella console Amministratore Forefront.

Element properties:

TargetFSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport_Installation
CategoryEventCollection
EnabledTrue
Event_ID7014
Event SourceMicrosoft Forefront Security
Alert GenerateTrue
Alert SeverityError
Alert PriorityNormal
RemotableTrue
Alert Message
TransportScanJobEnabledE
Event LogApplication
CommentMom2005ID='{9C7825C7-6AC7-4B36-B70C-D39AD41808B4}';MOM2005ComputerGroupID={F1A85322-5BE3-4AC2-8E2C-34F448DA8BE0}

Member Modules:

ID Module Type TypeId RunAs 
_F6DA1507_12AF_11D3_AB21_00A0C98620CE_ DataSource Microsoft.Windows.EventProvider Default
GenerateAlert WriteAction System.Health.GenerateAlert Default

Source Code:

<Rule ID="TransportScanJobEnabledE_4_Rule" Comment="Mom2005ID='{9C7825C7-6AC7-4B36-B70C-D39AD41808B4}';MOM2005ComputerGroupID={F1A85322-5BE3-4AC2-8E2C-34F448DA8BE0}" Enabled="true" Target="FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport_Installation" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">

  <Category>EventCollection</Category>

  <DataSources>

    <DataSource ID="_F6DA1507_12AF_11D3_AB21_00A0C98620CE_" TypeID="WindowsLibrary!Microsoft.Windows.EventProvider">

      <ComputerName>$Target/Host/Property[Type="WindowsLibrary!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <LogName>Application</LogName>

      <Expression>

        <And>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="Integer">EventDisplayNumber</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>7014</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="String">PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>Microsoft Forefront Security</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="GenerateAlert" TypeID="HealthLibrary!System.Health.GenerateAlert">

      <Priority>1</Priority>

      <Severity>2</Severity>

      <AlertName/>

      <AlertDescription/>

      <AlertOwner/>

      <AlertMessageId>$MPElement[Name="TransportScanJobEnabledE_4_Rule.AlertMessage"]$</AlertMessageId>

      <AlertParameters/>

      <Suppression/>

      <Custom1>Microsoft Forefront Server Security</Custom1>

      <Custom2>Forefront Security for Exchange Server</Custom2>

      <Custom3>ScanJobFailure</Custom3>

      <Custom4/>

      <Custom5/>

      <Custom6/>

      <Custom7/>

      <Custom8/>

      <Custom9/>

      <Custom10/>

    </WriteAction>

  </WriteActions>

</Rule>