When antivirus or DLP content scanning is enabled and the file scan limit is equal to or more than the available RAM, a memory exception error occurs and the ICAP failure Event Type appears in the Audit Event History.
The table below describes the various types of audit events that can appear in Mail Express reports and logs.
|
Event Type |
Description |
Severity* |
|
Data purged |
A Mail Express record was purged from the database |
Informational |
|
DMZ – connect |
The Mail Express Server connected to the DMZ Gateway |
Informational |
|
DMZ – expected disconnect |
Occurs when the Mail Express Server successfully and expectedly disconnects from the DMZ Gateway |
Informational |
|
DMZ – unexpected disconnect |
Occurs when the Mail Express unexpectedly loses connection to the DMZ Gateway |
Warning |
|
EFT Message Failure |
An ad hoc transfer notification to EFT could not be made |
Warning |
|
File purged |
Mail Express physically purged a file from disk |
Informational |
|
File removed manually |
A file was removed by an administrator |
Informational |
|
ICAP error |
A message sent to the ICAP server returned an error |
Warning |
|
ICAP failure |
A message sent to the ICAP server failed content inspection (see note below) |
Warning |
|
ICAP success |
A message sent to the ICAP server passed content inspection |
Informational |
|
Licensing |
An issue occurred regarding licensing of the Mail Express server |
Warning |
|
Login attempt |
A user attempted to log in to Mail Express |
Informational |
|
Password reset |
A user’s password was reset |
Informational |
|
Server shutdown |
Mail Express Server service has shut down |
Informational |
|
Server startup |
Mail Express Server service has started |
Informational |
|
Template customization |
A template customization is erroneous |
Warning |
|
Undeliverable message |
An email message could not be delivered |
Informational |
|
Unverified drop-off user |
An unverified (anonymous) user attempted a file upload, which resulted in phantom package (upload did not occur due to security restrictions) |
Informational |
|
User limit |
The maximum number of users for a given user type has been reached |
Warning |
|
User logged out |
A user logged out of Mail Express |
Informational |
*Levels of Severity
Informational—The default severity level for most events. Denotes an event that is expected under normal operation.
Warning—Denotes system issues that are recoverable.
|
|
When antivirus or DLP content scanning is enabled and the file scan limit is equal to or more than the available RAM, a memory exception error occurs and the ICAP failure Event Type appears in the Audit Event History. |