forefront 2010 view blocked mail

[RabbieBurns]

having a play with forefront for exchange 2010. Seems to be doing its job and blocking spams, but is there any way to get a list of what mails are being blocked? I can get a count in the dashboard, but not any other info. IVe checked eventviewer and dont seem to see anything?

[tarquel]

See if you can find any detail in the actual logs:

 

C:\Program Files\Microsoft\Exchange Server\V14\TransportRoles\Logs\

 

You may have an additional folder in there or something.

 

I've not yet attempted to set this up yet, being that we have quite a few levels of spam/av protection before the emails even reach Exchange hehe but i will do at some point.

 

Nath.

[sukh]

Hi

 

Use the FPE console, in there you will see various tabs on the side, on the top of my head, something along the lines of incidents.

 

Here you will see all all quarantined emails.

 

Regards

Sukh

[RabbieBurns]

Hi Sukh, yeh, thats where I would expect it to be, but the only one in there is one that had a virus. Not any of the spams.

[sukh]

Hi

 

Did you check under the Monitoring view of on the console, under Quarantine?

 

Also, check what actions are performed on the Spam, i.e are you deleting emails?, rejecting? or sending them to Quarantine.

 

Sukh

Edited March 14, 2011 by sukh
Confirm Actions

[RabbieBurns]

i had to change the settings fo the spam score, and set it up to 9 for quarantine, as before 9 was marked as definate spam and rejected