Select the product you need help with

Description of Forefront Security for SharePoint with Service Pack 3

Article ID: 967995 - View products that this article applies to.

INTRODUCTION

This article describes Microsoft Forefront Security for SharePoint issues that are fixed in Microsoft Forefront Security for SharePoint with Service Pack 3 (SP3).

Back to the top | Give Feedback

More information

New features in Service Pack 3

Service Pack 3 includes a new feature that provides customers with the latest protection against malware by extending the updating capabilities of Forefront Server Security (FSS). This feature can quickly notify users of the availability of a new threat scanning engine or a planned change in the existing scan engines. These notifications advise administrators how to make appropriate changes to the product configurations before any changes take effect. The notifications are logged in the FSS event log entries. They can also be configured for e-mail delivery through the "Virus Administrators" notification group. For more information about this feature, visit the following Microsoft Web site:
http://technet.microsoft.com/en-us/forefront/serversecurity/dd940095.aspx
(http://technet.microsoft.com/en-us/forefront/serversecurity/dd940095.aspx)
A new feature is added that allows large compressed files through if they cannot be scanned. By default, Forefront Security for SharePoint with SP3 still deletes large files that exceed the size limit. You must add a "SkipLargeCompressedFileDeletion" DWORD registry key entry to enable this feature. For more information about this feature, click the following article number to view the article in the Microsoft Knowledge Base:
972072
(http://support.microsoft.com/kb/972072/ )
Forefront Security for SharePoint detects a large compressed file as "CorruptedCompressed" even though the file is not corrupted
Forefront Security for SharePoint SP3 now supports Microsoft Office SharePoint Server 2007 Service Pack 2.
The following new scan engine performance counters are added for Realtime and Manual scan jobs:
- The average number of messages scanned per second by any engine.
- The average time taken to scan a message by any engine.

List of issues that are fixed

This service pack fixes the following issues:

967996

(http://support.microsoft.com/kb/967996/ )

The filter name is missing in the keyword filter match notifications in Forefront Security for SharePoint

968117

(http://support.microsoft.com/kb/968117/ )

You receive "out of memory" error messages in Forefront Security for SharePoint when the Realtime scan job scans documents

968112

(http://support.microsoft.com/kb/968112/ )

You receive a warning message when you try to uninstall Forefront Security for SharePoint hotfixes

968166

(http://support.microsoft.com/kb/968166/ )

The scan engines are not updated as expected in Forefront Security for SharePoint, and a "Failed to extract the file(s)" error is logged in the ProgramLog.txt file

968169

(http://support.microsoft.com/kb/968169/ )

Forefront Security for SharePoint may detect that 2007 Office files contain the UnwritableCompressedFile virus

968231

(http://support.microsoft.com/kb/968231/ )

You cannot configure filtering in Forefront Security for SharePoint

968261

(http://support.microsoft.com/kb/968261/ )

The FSCController service in Forefront Security for SharePoint stops responding after a restart of the server, and the Realtime scan job becomes disabled

968235

(http://support.microsoft.com/kb/968235/ )

Forefront Security for SharePoint does not correctly detect MP3 files after you use selected file types to create a file filter

968237

(http://support.microsoft.com/kb/968237/ )

Scan engines are not updated in Forefront Security for SharePoint, and an error is logged in the ProgramLog.txt file

968238

(http://support.microsoft.com/kb/968238/ )

The GetEngineFiles.exe process incorrectly deletes some files on a computer that is running Microsoft Forefront Security for SharePoint

968317

(http://support.microsoft.com/kb/968317/ )

The FSCController.exe process stops and then restarts, and e-mail notifications stop working in Forefront Security for SharePoint

968989

(http://support.microsoft.com/kb/968989/ )

Manual scans and Quick scans do not mark .eml files as "ExceedinglyNested" files in Forefront Security for SharePoint

969043

(http://support.microsoft.com/kb/969043/ )

Forefront Security for SharePoint cleans infected documents even though the "Attempt to clean infected documents" option in SharePoint is not selected

969051

(http://support.microsoft.com/kb/969051/ )

Detection of an Office 2007 file is logged two times in the Forefront Security for SharePoint logs

970513

(http://support.microsoft.com/kb/970513/ )

You receive "out of memory" error messages in Forefront Security for SharePoint

970607

(http://support.microsoft.com/kb/970607/ )

You cannot enable a keyword filter list after you disable the list in Forefront Security for SharePoint

970676

(http://support.microsoft.com/kb/970676/ )

When a manual scan job detects a keyword filter match, Forefront Security for SharePoint sends a notification that contains incorrect detection information

970677

(http://support.microsoft.com/kb/970677/ )

The Realtime scan job may time out multiple times and then crash in Forefront Security for SharePoint

968156

(http://support.microsoft.com/kb/968156/ )

Forefront Security for SharePoint cannot initiate the Realtime scan jobs at startup, and error codes "0x80030020" and "0x80030021" are generated

968163

(http://support.microsoft.com/kb/968163/ )

You cannot download files from a SharePoint Web site when Forefront Security for SharePoint is installed, and you receive an "Unknown Error" error message

968164

(http://support.microsoft.com/kb/968164/ )

Description of improved resource use that optimizes performance in Forefront Security for SharePoint with Service Pack 3

968158

(http://support.microsoft.com/kb/968158/ )

The FSCDiag.exe tool in Forefront Security for SharePoint prompts you to add "Exchange" versions instead of "SharePoint" versions

968267

(http://support.microsoft.com/kb/968267/ )

Forefront Security for SharePoint may incorrectly detect an attachment as an .rar file

968268

(http://support.microsoft.com/kb/968268/ )

In Forefront Security for SharePoint, some default deletion messages may lead a user or an administrator to assume mistakenly that an error occurred or that a virus was found

968154

(http://support.microsoft.com/kb/968154/ )

The Getenginefiles.exe process in Forefront Security for SharePoint stops responding and generates a crash that references "Bucket ID 766111704"

968155

(http://support.microsoft.com/kb/968155/ )

Forefront Security for SharePoint blocks clean 2007 Office files when an engine error occurs

972072

(http://support.microsoft.com/kb/972072/ )

Forefront Security for SharePoint detects a large compressed file as "CorruptedCompressed" even though the file is not corrupted

972074

(http://support.microsoft.com/kb/972074/ )

Forefront Security for SharePoint returns an error when it scans a large compressed file that is composed of many smaller files

Known issues

If you install Forefront Security for SharePoint 10.2.942.0 as an upgrade on a server on which the Database path and the Install path are different, you will receive the following errors:

Licensing: Could not fine ELI at ELI path (%Databasepath%\Engines\). Using install path (%InstallPath%)

Error: SybLicense: Could not load the cab file: (%InstallPath%)\EngineInfo.cab

If you have a server that has different values for the DatabasePath setting and the InstallPath setting, before you run the installation, you must manually extract the EngineInfo.cab file from the installation package, and then copy it to your server in the "%DatabasePath%\Engines" folder. Because the Engineinfo.cab file is embedded in the installation executable file, you should copy Setup.exe to a temporary location on disk, and then follow these steps to extract its contents:

Open the Command Prompt window.
Type setup.exe /x, and then press ENTER.
When you are asked for a path where you want to extract the files, type the path, and then click OK.
After the Engineinfo.cab file is extracted, copy it to the correct %Database%\Engine folder. The default location for the %Database%\Engine folder is as follows:
drive:\Program Files(x86)\Microsoft Forefront Security\SharePoint\Data\Engines

Notes

The following path is the default Database path: Drive:\Program Files(x86)\Microsoft Forefront Security\SharePoint\Data
The following path is the default Install path: Drive:\ Program Files(x86)\Microsoft Forefront Security\SharePoint

Back to the top | Give Feedback

More information

Service pack information

For instructions about how to install the service pack on Windows Server 2008, visit the following Microsoft Web site:

http://go.microsoft.com/fwlink/?LinkId=126289

(http://go.microsoft.com/fwlink/?LinkId=126289)

Installation instructions

An evaluation version is available on Microsoft TechNet:

Forefront Security for SharePoint SP3 - Evaluation

(http://www.microsoft.com/downloads/en/details.aspx?FamilyId=E06453B8-B2DD-4177-969C-2F89AA841E11&displaylang=en&hash=aOOU4KFPYrGkosuiaUXENXrCHdEjJciOfz2J3GPwA9o7NxfX%2by%2bW0qGvcpXwBvpRoTSqfIGfFwzziWnvrIaEUg%3d%3d)