Summary
Users set up the ScanMail server to use Smart Protection Network and added both Standalone and Integrated Smart Scan Servers as the Smart Protection Sources in the SMEX management console.
However, they noticed that SMEX started tagging emails with the following message in the subject field:
Smart Scan Suspicious
When iCRC sends a query to the smart scan server, it returns a time out error "iCRC network query timeout" as seen in the SMEX_Master.log file:
2011/03/29 10:43:41 -0700 [2052 : 4792] [ utiltmsswrapper.dll][tmss_iCrcHandlerEventCallback.cpp( 264)] [DEBUG] [CTMSSiCrcHandlerEventCallback::ProcessEvent] - iCRC network query timeout
Details
It is possible that the Smart Scan Server is busy handling URL queries sent by the existing OfficeScan clients and could not respond to ScanMail queries in a timely manner.
To address this issue, Trend Micro strongly recommends setting up a dedicated Standalone Smart Scan Server for SMEX so that it can quickly respond to queries.
You may also adjust some parameters in the ScanMail server to increase the timeout settings.
- Create a back up of the ICRCHdler.ini file.
- Open the ICRCHdler.ini and add the following lines:
TaskTimeout = 3000
ThreadCount = 10 - Save and close the file.
- Restart the ScanMail Master service.
