Incidents reported

  • Article

 

Applies to: Forefront Protection 2010 for SharePoint

The following table lists and describes the various incidents that Microsoft Forefront Protection 2010 for SharePoint (FPSP) reports that are not specifically malware detections or filter matches. You can use settings in the Forefront Protection 2010 for SharePoint Administrator Console to control the associated actions that are taken.

Note

Unless stated otherwise, the configurable FPSP setting that controls each reported incident resides in the Advanced Options pane of the Forefront Protection 2010 for SharePoint Administrator Console. (Click Policy Management, and then, under Global Settings, click Advanced Options.)

Reported incident FPSP setting Description

CorruptedCompressedFile

Delete corrupted compressed files

FPSP has deleted a corrupted compressed file.

Note that a Container Removed description may be added to this incident.

CorruptedCompressedUuencodedFile

Delete corrupted UUEncoded files

FPSP has deleted a corrupted compressed UUEncoded file.

EncryptedCompressedFile

Delete encrypted compressed files

FPSP has deleted an encrypted compressed file.

EngineLoopingError

Engine error action

FPSP has deleted a file causing a scan engine to be caught in a read/write loop while scanning or attempting to clean a file.

ExceedinglyCompressedSize

Maximum container file size

FPSP has deleted a container file because its compressed size is too small relative to its uncompressed size.

Note that a Container Removed description may be added to this incident.

ExceedinglyInfected

Maximum container file infections

FPSP has deleted a container file because it exceeded the maximum number of infections.

ExceedinglyNested

Maximum nested attachments

FPSP has deleted a file because it exceeded the maximum nested file limit.

LargeInfectedContainerFile

Maximum container file size

FPSP has deleted a file because it exceeded the maximum container size that it attempts to clean or repair.

LargeUncompressedFileSize

Maximum uncompressed file size

FPSP has deleted a container file because it exceeded the maximum file size.

Note that a Container Removed description may be added to this incident.

Original Detected File

Not applicable

FPSP has quarantined a container file because one or more files in this container were detected as containing malware or matching a filter. The original file is quarantined in addition to the file or files that were detected.

ScanTimeExceeded

Maximum container scan time (seconds)

This setting is not under Global Settings but is instead separately configurable for each scan job.

FPSP has deleted a container file because it exceeded the maximum scan time.

UnreadableCompressedFile

Delete corrupted compressed files.

FPSP has deleted a compressed file that it could not read.

UnwritableCompressedFile

Delete corrupted compressed files.

FPSP has deleted a compressed file to which it cannot write (for example, during a cleaning operation).

See Also

Concepts

Viewing and managing incidents