To determine if the issue is caused by a missing
OnProductFail value, perform one of these checks on the Exchange server:
- Examine the McAfeeConfig.xml (<installation directory>\MSME\config\ ), scroll to the <VSAPI2 section (at the bottom of the page), and see if OnProductFail is missing. Below is an example of how a normal McAfeeConfig.xml file looks:
<VSAPI2 Background="0" BackgroundScanningAttachmentMessagesOnly="0" BackgroundScanningIgnoreStamp="0" BackgroundScanningLowerAgeLimit="2009-01-26T07:19:19" BackgroundScanningOnlyUnscanned="0" BackgroundScanningSkipStampUpdate="1" BackgroundScanningUpperAgeLimit="2011-01-01T00:00:00" DBS_Inbound="1" DBS_Internal="1" DBS_Outbound="1" Enabled="0" OnAccessScanningRollingLowerAgeLimit="86400" OnFail="0" OnProductFail="0" Proactive="0" SpamUserRouting="0" Threads="-1" TillDate="1" Timeout="180" Transport="1" TransportAVAPI="0" TransportExclusion="0" UpdateTransportAVStamp="1"/>
- Enable debug logging in MSME, open the TransportscanX64_#.log, and look for the following:
04/10/16 09:40:28.588,7068,PropertyPath.cpp,446,m_pathOut is : VSAPI2.OnProductFail
04/10/16 09:40:28.588,7068,PropertyPath.cpp,446,m_pathOut is : VSAPI2.OnProductFail
04/10/16 09:40:28.588,7068,SAFeWrapper.cpp,1004,40201 returned by m_pConfig->GetProperty(pp, &avOnProductFailAction)
04/10/16 09:40:28.588,7068,AtomicValue.cpp,221,McAfee Exception 80040201 thrown
If the OnProductFail value is missing and MSME is ePO managed:
- Launch the ePO console.
- Go to Menu, Systems, System Tree.
- In the left pane, select the group where the MSME policy is being applied.
- Click Assigned Policies.
- Click the drop-down button and select the MSME 8.5.0 policy.
- In the row for On-Access Settings, click Edit Assignment.
- Click the drop-down button and select My Default policy.
- Save the changes.
- Perform an agent wake-up call.
- Close the ePO console.
When the policy has been received and is enforced on the Exchange server, ensure that the
McAfeeConfig.xml now contains the
OnProductFail="0" value as shown in the example above.
If the OnProductFail value is missing and MSME is not ePO managed:
- Stop the MSME service.
- Open explorer and go to the <installation directory>\MSME\config\ folder.
- Open McAfeeConfig.xml in a text editor (notepad.exe).
- Scroll down to the <VSAPI2 section and add the OnProductFail="0" to the line as shown below:
<VSAPI2 Background="0" BackgroundScanningAttachmentMessagesOnly="0" BackgroundScanningIgnoreStamp="0" BackgroundScanningLowerAgeLimit="2009-01-26T07:19:19" BackgroundScanningOnlyUnscanned="0" BackgroundScanningSkipStampUpdate="1" BackgroundScanningUpperAgeLimit="2011-01-01T00:00:00" DBS_Inbound="1" DBS_Internal="1" DBS_Outbound="1" Enabled="0" OnAccessScanningRollingLowerAgeLimit="86400" OnFail="0" OnProductFail="0" Proactive="0" SpamUserRouting="0" Threads="-1" TillDate="1" Timeout="180" Transport="1" TransportAVAPI="0" TransportExclusion="0" UpdateTransportAVStamp="1"/>
- Save and restart the MSME service.