Endpoint Protection Small Business Edition

Hi,

On one of the clients I am getting large number of pop ups stating Symantec email Proxy. I could not resolve with reference to the past discussions and previous links. Can you please help me in this issue.


Hari Mohan
IT Head

Which is the version you are using?
This may be because of some threat present in that computer
Try by scan that pc in  safe mode with latest virus definitions.
Also assure that you are having all latest patches installed in that pc 

Hi,

There are many different pop ups that could happen because of Symantec Email Proxy, so it would be helpful if you could post back the exact error message on the pop up. A screenshot would be even better.

Thanks
Grant

Hello - new to forums.  I have a question

My office installed symantec endpoint and everything was well until one user recently got this message

 

"your email message to ________________ was unable to be sent because the connection to your mail server was interrupted.  please open your email client and re-send the message from the Send Messages folder"

what does that mean?  We are running 11.0 with an upgrade pending, should we do the upgrade first and see what happens or is this another problem.  Thanks for the help

Hi Lhasa,

Welcome to the forums!

That particular error usually occurs when there is a slow or unreliable connection to the mail server, or any other circustances where sending the mail takes too long or is interrupted.  Does this only occur when sending large files, for instance-?  The connection between Outlook (or whatever mail client you are using) and Exchange (or whatever mail server) may just be timing out.  Though it's a Symantec pop-up, it may very well have nothing to do with SEP at all.

I recommend increasing the server timeout value on the email client and seeing if that doesn't resolve the problem.

Please let the forum know if this has solved your issue!  And do continue to use the forum or contact Symantec Technical Support if you need any future assistance.

Thanks and best regards,

Mick

 Hi Hari,

Any new updates on your issue? We are still hoping to get the error message from you (or screenshot).

Hope all is well,
Grant

Hello,

We have been update to Endpoint 11.0.5  Since November and one of my clients has seemed to pick up a bug. I have ran SEP and does not detect any virus/malware/spyware however when the System is connected to the network it receives hundreds of Proxy Errors. This only started Monday after a pop up was detected by the end user. My End users says that he simply clicked the x to close in the top corner and then messages galour. This is only on this system and only since Monday. All my other systems are running perfect. All updates are showing in the system to the management server. I do know that my system is experiencing the 12/31/2009 definition status, but from what I read this morning this should be resolved in the next Live update.

the End users system seems to be sending these out on its own. We are running a Groupwise System and no other clients are experiencing issues.

My server time outs have been working for months so I do not believe that this is a time out issue because I get the messages even when the system is removed from the network and no return connection can be made.

Here is a screen shot. I also added the process screen from the taskmgr so you have an idea of system processes.



Thanks,

Paul

Hi Paul,

Judging from the email subjects about discount pharmaceuticals that appear in the pop-ups, I would wager that this computer is sending out spam.   Most spam these days is sent from botnets of computers that have been compromised- this looks like one of them. 

I recommend getting the lastest Rapid Release defintions onto that computer, pulling the network cable, and performing a full system scan in safe mode.  If that does not detect the threat, follow the steps in the following article and contact Symantec Technical Support 

The 5 Steps of Virus Troubleshooting

Thanks and best regards,

Mick

 

Hello Paul and Hari,

Here's a link to the official corresponding Symantec article: Many Unexpected Pop-Ups from Symantec Email Proxy are Displayed

Please let the forum know if the suggestions have helped to solve the issue!

Thanks and best regards,

Mick

Thanks everyone for the help. Once the system was up-to-date with today's virus definitions the scanner when ran in Safe mode detected a Hacktool.Rootkit file. Once removed the system has been running smooth again.
Thanks again.
 

Hi,

I was forced to format the system and come out from this problem.

Hari Mohan

Hi Hari and Paul,

Many thanks for bringign this up in the forum and adding a note about how you fixed it!  People who see such pop-ups in the future may find this thread by an Internet search and benefit from your experience.

It may be a good time to take some preventative action on the network ---  I recommend making sure that all MS patches are up to date, SEP or SAV is up to the latest version, weekly scheduled scans are completeing successfully on all clients, passwords are strong and network shares secured.  A little time spent now is better than a lot of work when an infection gets loose.   

If any future issues are encountered, pleasde do check back on the forum again or conatct Symantec Technical Support!

Thanks and best regards,

Mick

I am also receiving the following message:
 
“Your email message was unable to be sent because the connection to your mail server was interrupted. Please open you email client and re-send the message from the Sent Message Folder”.
 
However, I have increased the server timeout value from 1 to 3  minutes, but still receiving the same message.
 
Please can help! Many thanks!
 
Sophie Leighton

Hi Sophie,

There have been a couple of good forum threads about that error message:

https://www-secure.symantec.com/connect/forums/problems-sending-message-outlook-2003-and-symantec-endpoint-protection-11
https://www-secure.symantec.com/connect/forums/how-do-i-prevent-endpoint-protection-blocking-outbound-emails-large-groups-people
https://www-secure.symantec.com/connect/forums/im-using-endpoint-last-week-i-have-see-msg

If you are still seeing this with SEP 11 RU6a, you may be best opening a new forum thread where forum volunteers may be able to share their experience.  (Be sure to provide full details on how you make your mail conenctions, to what kind og mail server, what OS you are running, etc) If that does not provide the answer, you may wish to contact Symantec Tech Support.  

Thanks and best regards,

Mick

Two of the users recently reported receiving a message in their Outlook 2003 InBox copied below (recipients name removed from the copy of the message for privacy reasons).  Is this a SPAM message or is it a valid message from Symantec indicating a SPAM was removed?

Original Message

Original Message-----
From: Symantec Email Proxy [mailto:Symantec Email Proxy]
Sent: None
Subject: Symantec Email Proxy Deleted Message
 
Symantec Email Proxy deleted the following email message:
 
From: Elvira Richey <mated96@abatis.com>
To:
To: Subject: Elvira Richey sent you a message on Facebook
 

Hi Sadie,

That Email Proxy only examines messages for threats (worms, viruses, etc).  It does not scan for spam: there are other products which provide that protection (Symantec Mail Security for MS Exchange). As far as I am aware it wouldn't be responsible for sending mails like the ones you have added to this forum thread.

All the same, I recommend that, as a best practice, steps are made to ensure that all clients are runnig the latest releases of SEP or SAV, have up-to-date definitions, and all MS patches are applied. 

Hope this helps!  You may wish to start a dedicated Connect thread for this issue, if it persists.

Thanks and best regards,

Mick