About the Symantec Mail Security Management Service and Symantec Protection Center (SPC) 2.0

Article:TECH161785  |  Created: 2011-06-08  |  Updated: 2012-01-12  |  Article URL http://www.symantec.com/docs/TECH161785
Article Type
Technical Solution


Issue



A new service is added to Symantec Mail Security for Microsoft Exchange during the install or upgrade to version 6.5.5.  

This article describes the purpose of the SMSMSE Management Service, how it functions, and how to troubleshoot it.


Error



When the SMSMSE instance is enabled/integrated into the organization's SPC a new entry is added to the Windows Application Event Log containing MsiInstaller records of a new "SMSMSE Agent Plug-in"

Type: Information
Date: 27/09/2011
Time: 15:20:19
Event: 1042
Source: MsiInstaller
Category: None
User: \SYSTEM
Computer: SERVERNAME.domain.extension
Description: Ending a Windows Installer transaction: C:\Program Files\Altiris\Altiris Agent\Agents\SoftwareManagement\Software Delivery\{8D45021B-409E-423C-BE4C-EABD6A2BDDB3}\cache\Symantec_SMSMSEAgentPluginWindows_7_0_x64.msi. Client Process Id: 2336.

Type: Information
Date: 27/09/2011
Time: 15:20:19
Event: 1033
Source: MsiInstaller
Category: None
User: \SYSTEM
Computer: SERVERNAME.domain.extension
Description: Windows Installer installed the product. Product Name: SMSMSE Agent Plug-in. Product Version: 7.1.1.0. Product Language: 1033. Installation success or error status: 0.

Type: Information
Date: 27/09/2011
Time: 15:20:19
Event: 11707
Source: MsiInstaller
Category: None
User: \SYSTEM
Computer: SERVERNAME.domain.extension
Description: Product: SMSMSE Agent Plug-in -- Installation completed successfully.

Type: Information
Date: 27/09/2011
Time: 15:20:13
Event: 1040
Source: MsiInstaller
Category: None
User: \SYSTEM
Computer: SERVERNAME.domain.extension
Description: Beginning a Windows Installer transaction: C:\Program Files\Altiris\Altiris Agent\Agents\SoftwareManagement\Software Delivery\{8D45021B-409E-423C-BE4C-EABD6A2BDDB3}\cache\Symantec_SMSMSEAgentPluginWindows_7_0_x64.msi. Client Process Id: 2336.

 

After that there are new Application Events from the "Symantec Mail Security Management Service":

Type: Information
Date: 27/09/2011
Time: 15:26:23
Event: 206
Source: Symantec Mail Security Management Service
Category: ServerFeed
User: N/A
Computer: SERVERNAME.domain.extension
Description: Server Feed is Enabled

Type: Information
Date: 27/09/2011
Time: 15:26:22
Event: 58
Source: Symantec Mail Security Management Service
Category: ThreatEventFeed
User: N/A
Computer: SERVERNAME.domain.extension
Description: Querying for Last 7 days of data

Type: Information
Date: 27/09/2011
Time: 15:26:22
Event: 50
Source: Symantec Mail Security Management Service
Category: ThreatEventFeed
User: N/A
Computer: SERVERNAME.domain.extension
Description: Threat Event Feed Enabled

Type: Information
Date: 27/09/2011
Time: 15:26:22
Event: 100
Source: Symantec Mail Security Management Service
Category: ComputerStateFeed
User: N/A
Computer: SERVERNAME.domain.extension
Description: Computer State Feed Enabled

Type: Information
Date: 27/09/2011
Time: 15:26:22
Event: 150
Source: Symantec Mail Security Management Service
Category: ComputerDataFeed
User: N/A
Computer: SERVERNAME.domain.extension
Description: Computer Data Feed Enabled

Type: Information
Date: 27/09/2011
Time: 15:26:22
Event: 11
Source: Symantec Mail Security Management Service
Category: Service
User: N/A
Computer: SERVERNAME.domain.extension
Description: Monitoring Symantec Mail Security Management Service Plug-in

Type: Information
Date: 27/09/2011
Time: 15:26:22
Event: 10
Source: Symantec Mail Security Management Service
Category: Service
User: N/A
Computer: SERVERNAME.domain.extension
Description: Achieved synchronisation with Symantec Mail Security Management Service Plug-in

Type: Information
Date: 27/09/2011
Time: 14:41:24
Event: 9
Source: Symantec Mail Security Management Service
Category: Service
User: N/A
Computer: SERVERNAME.domain.extension
Description: Waiting for synchronisation with Symantec Mail Security Management Service Plug-in

Type: Information
Date: 27/09/2011
Time: 14:41:24
Event: 5
Source: Symantec Mail Security Management Service
Category: Service
User: N/A
Computer: SERVERNAME.domain.extension
Description:Service Started

 


Solution



The Symantec Mail Security Management Service is a new service that allows SMSMSE to interact with the new Symantec Protection Center (SPC) 2.0. Specifically, this Symantec Mail Security Management Service enables data integration of SMSMSE with SPC 2.0.
 
The service is installed along with the SMSMSE installer.  While this service will be started after installation, it will remain in a "waiting" state until integration with the optional SPC console is actively initiated.  Once additional components are pushed down from the SPC to the Exchange server the SMSMSE Management Service will go into use and start sending data feeds to the SPC server.
 
Symantec Protection Center unifies information security management across systems, networks, and data to effectively protect against the inherent risks in today’s IT infrastructures. More information about the Symantec Protection Center 2.0 console can be found here.  Exact steps for completing the integration of SMSMSE into SPC 2.0 can be found in the Symantec Mail Security for Microsoft Exchange with Symantec Protection Center v2.0 User Guide.
 
The service will keep listening for the plug-in "down" event. If the plug-in is un-loaded, the service will stop sending the datafeed and start listening for the plug-in "up" event.
 
Administrators integrating with SPC 2.0 for the first time may be interested in the illustrated Connect Forum article How to Tell When SMSMSE 6.5 has Successfully Integrated into SPC 2.0.
 

 





Article URL http://www.symantec.com/docs/TECH161785


Terms of use for this information are found in Legal Notices