Forefront Security for SharePoint Manual Scan Issues


Microsoft has become aware of two interrelated issues affecting a Manual Scan in Forefront Security for SharePoint.


The first issue is a memory leak which occurs when Keyword Filtering is enabled.  In all versions of Forefront Security for SharePoint prior to Service Pack 3, whether you have Keyword Lists created or not, you may experience this issue.  If, however, you have Forefront Security for SharePoint with Service Pack 3 installed (released 7/1/2009), this issue will only occur if you have Keyword Lists created.  If you do not have any Keyword Lists, even if Keyword Filtering is enabled for Manual Scan, you will not experience the leak.  Real-time scanning is not affected by this issue.


The second issue may occur as a result of the first.  After a period of time the memory leak can cause memory allocations to fail.  If these failures occur repeatedly in a specific way, it causes Forefront Security for SharePoint to incorrectly determine a valid document as “exceedingly nested”.  Every file that is scanned and determined to be exceedingly nested will be deleted and the contents replaced with standard deletion text. 


Microsoft is actively working toward a resolution for these issues.  An update will posted as soon as more information becomes available. In the meantime, we recommend that any customers using Forefront Security for SharePoint that run a Manual Scan disable Keyword filtering for Manual Scanning (for more information on configuring the Manual Scan job, see “Running the Manual Scan Job” in the FSSP User Guide http://technet.microsoft.com/en-us/library/bb795164.aspx).  This is extremely important, as manual scanning of your entire document library opens the potential of losing any document content incorrectly identified as “exceedingly nested”. Please note that, by default, Keyword Filtering is enabled for the Manual Scan job. 

Comments (13)

  1. Anonymous says:

    The information you have given due to congratulate you wish to continue with it …

  2. Anonymous says:

    This is very good news was well informed that the followers of the issue I am. Thank you .

  3. mantolama says:

    microsoft on this issue was really a good working employees well-made thank you

  4. Anonymous says:

    Congratulations on a successful and was working really well.

  5. Anonymous says:

    I write a lot of work to help me thank you I was pulling the same issue

  6. Anonymous says:

    Congratulations on a successful and was working really well.

  7. matbaa says:

    issues related to manual scan I took the trouble in this regard thanks everyone should be careful

  8. Anonymous says:

    thank you very good very good article issues related to manual scan I took the trouble in this regard thanks everyone should be careful

  9. Anonymous says:

    microsoft employees a good luck wish i was out

  10. Anonymous says:

    Thank you for your help on this matter.

  11. Anonymous says:

    Congratulations on a successful and was working really well.

  12. Forefront Security for SharePoint Manual Scan Issues
    thank you