Messaging Security Agent (MSA) is missing from the Security Server web console or appears offline

To resolve this, assign the correct permissions to the administrator.

1. On the Security Server, find the dbPMC_ClientInfo.dbf database.
2. Right-click the file, then click Properties > Security tab.
3. Assign Full Control permissions to the administrator. Test the communication between the Security Server and the Messaging Security Agent.
   • If you have a firewall between the Security Server and the Messaging Security Agent, add ports 16372 and 16373 to the firewall exception list in the Control Panel. This will allow inbound and outbound traffic for these Messaging Security Agent ports.
   • If the Security Server and the Messaging Security Agent are installed on different computers, test the network connectivity. Ping the hostname and FQDN of the Security Server from the Messaging Security Agent, and vice-versa.
4. Start the following servicesthrough the Windows Services console if they are not running:
   • Trend Micro Messaging Security Master Service
   • Trend Micro Messaging Security Agent Remote Configuration Server
   • Trend Micro Messaging Security Agent System Watcher
5. Find the ..\Messaging Security Agent folder and repeat Steps 2 to 4.
6. On the Messaging Security Agent host machine, go to HKEY_LOCAL_MACHINE\Software\Trend Micro\ScanMail for Exchange\CSMServer and make sure that the values of these registry entries are as follows:
   • IPList = <IP Address of the Security Server>
   • Hostname = <Hostname or FQDN of the Security Server>
   • IsRegistered = 1

   If the values are different, modify them accordingly and restart the Trend Micro Messaging Security Master Service.

If the issue persists, set the appropriate access permissions to the ..\PCCSRV and Messaging Security Agent folders:

1. Find the ..\PCCSRV folder.
2. Right-click the folder then click Properties > Security.
3. Add IUSR_<servername> and then assign the following permissions:
   • Read and Execute
   • List Folder Contents
   • Read
4. Choose the Allow inheritable permission from parent to propagate to this object option, then click OK.
5. Find the ..\Messaging Security Agent folder and repeat Steps 9 to 11.
6. Change the website authentication process of Internet Information Services (IIS):
    

   When using a different username and password, make sure that the corresponding credentials have the same access permissions as that of IUSR_<servername>.
   1. Open the IIS Manager and double-click the <servername> tree icon.
   2. Double-click Web Sites and right-click SMEX Web Site.
   3. Click Properties > Directory Security > Authentication and access control.
   4. Change IUSR_<servername> to Administrator.
   5. Save the changes.

If the issue still occurs, contact Trend Micro Technical Support and provide the Case Diagnostic Tool (CDT) log generated on the client computer.