This article has been archived. It is offered "as is" and will no longer be updated.
A node that is running Microsoft Exchange Server in a single copy cluster (SCC) environment fails over. After this occurs, notifications in Microsoft Antigen 9.0 for Exchange continue to be sent by using the host name of the previously active node.
However, you expect that notifications will be sent by using the host name of the currently active node after the node fails over.
This problem occurs because the registry entry that contains the original host name is replicated to the other node. This registry entry is the Server Profile registry entry. This entry is located under the following registry subkey:
HKEY_LOCAL_MACHINE\SOFTWARE\SYBARI/Antigen for Exchange\
Name : Server Profile Value type: String Value data: Antigen_Server Name
To resolve this issue, install the hotfix rollup 1 package for Microsoft Antigen 9.0 Service Pack 1.
For more information, click the following article number to view the article in the Microsoft Knowledge Base:
945597 Description of the hotfix rollup 1 package for Antigen 9.0 Service Pack 1
Note Before you can install Hotfix Rollup 1 for Antigen 9.0 Service Pack 1, you must have Antigen 9.0 Service Pack 1 installed.
Antigen 9.0 for Exchange sends notifications for many events. For example, Antigen sends the following notification when a suspect file is detected:
Microsoft Antigen for Exchange found a file infected with a virus. The file is currently %State%. Sent from: "%ISName% %ESName%"
However, this notification appears to have been sent from the previously active node.
For more information about the single copy cluster (SCC) environment, click the following article number to view the article in the Microsoft Knowledge Base:
927460 How to determine whether an Exchange 2007 clustered mailbox server is in a cluster continuous replication environment or in a single copy cluster
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.