Notifications continue to be sent by using the host name of a node after the node fails over in Antigen 9.0 for Exchange

A node that is running Microsoft Exchange Server in a single copy cluster (SCC) environment fails over. After this occurs, notifications in Microsoft Antigen 9.0 for Exchange continue to be sent by using the host name of the previously active node.

However, you expect that notifications will be sent by using the host name of the currently active node after the node fails over.

This problem occurs because the registry entry that contains the original host name is replicated to the other node. This registry entry is the Server Profile registry entry. This entry is located under the following registry subkey:

To resolve this issue, install the hotfix rollup 1 package for Microsoft Antigen 9.0 Service Pack 1.

For more information, click the following article number to view the article in the Microsoft Knowledge Base: Note Before you can install Hotfix Rollup 1 for Antigen 9.0 Service Pack 1, you must have Antigen 9.0 Service Pack 1 installed.

Antigen 9.0 for Exchange sends notifications for many events. For example, Antigen sends the following notification when a suspect file is detected: However, this notification appears to have been sent from the previously active node.

For more information about the single copy cluster (SCC) environment, click the following article number to view the article in the Microsoft Knowledge Base:

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.