Microsoft Forefront Threat Management Gateway 2010 regularly downloads updates to the definition files that are used to identify viruses, malware, and other potentially unwanted software. And, Forefront Threat Management Gateway 2010 regularly updates the Network Inspection System signature files. Forefront Threat Management Gateway 2010 may also periodically download detection engine updates.
The following files are updated as part of the Malware Inspection feature on Forefront Threat Management Gateway 2010:
Base: mpasbase.vdm, mpavbase.vdm
Delta: mpasdlta.vdm, mpavdlta.vdm
Those files are located at TMG directory\MPEngine. This directory contains subfolders in which the engine file and the signature files are located. The following registry subkeys contain the location and version of the TMG MPEngine:
The current engine subdirectory for MPEngine is defined in the following registry subkey: