Trend Micro - Securing Your Journey to the Cloud Business
Support
Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Emails are tagged with "Smart Scan Suspicious" in the subject field in ScanMail for Exchange (SMEX)

    • Updated:
    • 9 Jun 2014
    • Product/Version:
    • ScanMail for Exchange 10.0
    • ScanMail for Exchange 11.0
    • Platform:
    • Windows 2003 Enterprise Server
    • Windows 2008 Enterprise Server
Summary
Users set up the ScanMail server to use Smart Protection Network and added both Standalone and Integrated Smart Scan Servers as the Smart Protection Sources in the SMEX management console.
However, they noticed that SMEX started tagging emails with the following message in the subject field:
Smart Scan Suspicious
When iCRC sends a query to the smart scan server, it returns a time out error "iCRC network query timeout" as seen in the SMEX_Master.log file:
2011/03/29 10:43:41 -0700 [2052 : 4792] [ utiltmsswrapper.dll][tmss_iCrcHandlerEventCallback.cpp( 264)] [DEBUG] [CTMSSiCrcHandlerEventCallback::ProcessEvent] - iCRC network query timeout
Details
Public
It is possible that the Smart Scan Server is busy handling URL queries sent by the existing OfficeScan clients and could not respond to ScanMail queries in a timely manner.
To address this issue, Trend Micro strongly recommends setting up a dedicated Standalone Smart Scan Server for SMEX so that it can quickly respond to queries.
You may also adjust some parameters in the ScanMail server to increase the timeout settings.
  1. Create a back up of the ICRCHdler.ini file.
  2. Open the ICRCHdler.ini and add the following lines:
    TaskTimeout = 3000
    ThreadCount = 10
  3. Save and close the file.
  4. Restart the ScanMail Master service.
Premium
Internal
Rating:
Category:
Configure; Troubleshoot; Deploy
Solution Id:
1058401
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.