Skip to main content

LevelBlue + SentinelOne: Global Partnership to Deliver AI-Powered Managed Security Operations and Incident Response. Learn More

LevelBlue + SentinelOne: Global Partnership to Deliver AI-Powered Managed Security Operations and Incident Response. Learn More

Services
Cyber Advisory
Managed Cloud Security
Data Security
Managed Detection & Response
Email Security
Managed Network Security
Exposure Management
Security Operations Platforms
Incident Readiness & Response
SpiderLabs Threat Intelligence
Solutions
BY TOPIC
Offensive Security
Solutions to maximize your security ROI
Operational Technology
End-to-end OT security
Microsoft Security
Unlock the full power of Microsoft Security
Securing the IoT Landscape
Test, monitor and secure network objects
Why LevelBlue
About Us
Awards and Accolades
LevelBlue SpiderLabs
PGA of America Partnership
Secure What's Next
LevelBlue Security Operations Platforms
Security Colony
Partners
SentinelOne
Advancing integrated, intelligence‑driven security operations
Microsoft
Unlock the full power of Microsoft Security
Technology Alliance Partners
Key alliances who align and support our ecosystem of security offerings
Partner Portal
Loading...
Loading...

HOWTO: Configuring SpamProfiler Startup Timeouts

Expand / Collapse


This article applies to:

  • MailMarshal SEG/MailMarshal 
  • SpamProfiler

Question:

  • MailMarshal Receiver slow to start up
  • How do I change the timeout setting for SpamProfiler update checking at startup?

Note: For issues with SpamProfiler file downloads timing out, see Q12137.

Background:

When the Receiver starts up, it waits for the SpamProfiler service to be available before completing initialization and reporting ready.
  • On startup, SpamProfiler checks for updates over the Internet (http://sigupdates.marshal.com/). Downloading and processing of these updates can take a noticeable time, so the Receiver can appear slow to start.
  • In versions below 11.3, every Receiver restart also causes a SpamProfiler service restart.
  • In version 11.3 and above, restarting a running Receiver does not trigger a SpamProfiler service restart by default, so the restart process is much quicker.

Resolution:

To resolve issues with slow Receiver startup due to SpamProfiler, consider the following:
  • Ensure that each MailMarshal processing node can access the required site (http://sigupdates.marshal.com/).
    • To configure proxy settings for this connection, in the Configurator see Server and Array Configuration > Array Properties > Internet Access tab.
  • Upgrade MailMarshal to the latest version.
  • You can change the timeout for the SpamProfiler check with a configuration setting, using the following procedure.
    • Caution: if you change the update timeout, SpamProfiler may not update fully and detection performance can be affected.

Procedure:

  1. In the Management Console, navigate to Advanced Settings.
  2. Add or edit the following value:
    • Value name: Receiver.AuthEngineConfig
    • Value type: multi-string
    • Value data: micro-update timeout=nn (seconds; default if not entered:60)
  3. For version 8.X, on the Array Manager edit the Registry and navigate to the SEG Receiver key:
    • In version 8.X: HKEY_LOCAL_MACHINE\SOFTWARE\Trustwave\Secure Email Gateway\Default\Receiver
    • For full details of the location for each product version, see article Q10832.

Notes:

  • If the Advanced Setting or registry value AuthEngineConfig already exists, you can add this setting. To enter multiple settings in the Value data field, enter one setting per line.
  • All SpamProfiler configuration data is case sensitive.
  • Warning: Using the Registry Editor incorrectly can cause serious problems that may require you to reinstall your operating system. LevelBlue cannot guarantee that problems resulting from the incorrect use of Registry Editor can be solved. Make sure that you back up your Registry prior to making any changes.

 


To contact LevelBlue about this article or to request support:


Rate this Article:
     

Add Your Comments


Comment submission is disabled for anonymous users.
Please send feedback to Trustwave Technical Support or the Webmaster
.