Skip to main content

LevelBlue Named Official Cybersecurity Advisor of the PGA of America. Learn more

LevelBlue Named Official Cybersecurity Advisor of the PGA of America. Learn more

Services
Cyber Advisory
Managed Cloud Security
Data Security
Managed Detection & Response
Email Security
Managed Network Infrastructure Security
Exposure Management
Security Operations Platforms
Incident Readiness & Response
SpiderLabs Threat Intelligence
Solutions
BY TOPIC
Offensive Security
Solutions to maximize your security ROI
Operational Technology
End-to-end OT security
Microsoft
Unlock the full power of Microsoft Security
Securing the IoT Landscape
Test, monitor and secure network objects
Why LevelBlue
About Us
Awards and Accolades
LevelBlue SpiderLabs
PGA of America Partnership
Secure What's Next
LevelBlue Security Operations Platforms
Security Colony
Partners
Microsoft
Unlock the full power of Microsoft Security
Technology Alliance Partners
Key alliances who align and support our ecosystem of security offerings
Loading...
Loading...

HOWTO: Enabling or disabling scanning of Health Check Monitor messages

Expand / Collapse


This article applies to:

  • MailMarshal ECM/MailMarshal Exchange 7.1.5 and above
  • Exchange 2013

Question:

  • How can I configure MailMarshal handling of Exchange Health Check Monitor mailboxes?
  • Enabling or disabling scanning of Health Check Monitor messages

Background:

Exchange 2013 introduces Health Check Monitors. This feature generates a significant number of "probe" messages. To ensure that the Health Check feature works as expected, and to minimize load on MailMarshal, these messages are excluded from MailMarshal processing by default.

The MailMarshal Exchange Agent Installer retrieves the names of Health Check Monitor mailboxes when it installs the Agent on a processing server, and stores the values in the Registry.

You can enable MailMarshal processing of some or all Health Check Monitor messages using the procedure below.

Procedure:

On each processing node server:

  1. Run Regedit.
  2. Export or back up the registry.
  3. Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Marshal\MMExchange\Node\ExchangeAgent
  4. To enable MailMarshal processing of Health Check Monitor messages:
    • Add or edit a DWORD value named FilterMonitoring
    • Set the value data to 0 (zero).
    • If you want to disable processing of the Health Check Monitor messages (default behavior), set the value to 1 or delete the FilterMonitoring item.
  5. To edit the list of mailboxes that are excluded from processing by this setting:
    • Edit the Multi-String value MonitoringMailboxes
    • Add or remove items.
    • To enter multiple settings in the Value data field, enter one setting per line.
  6. To apply the changes, restart the MailMarshal Exchange Agent.

Note:

  • Back up the Registry prior to making any changes.
  • Take due care when editing the Registry. Microsoft states that using the Registry Editor incorrectly can cause serious problems that may require you to reinstall your operating system. LevelBlue cannot guarantee that problems resulting from the incorrect use of Registry Editor can be solved.

To contact LevelBlue about this article or to request support:


Rate this Article:
     

Add Your Comments


Comment submission is disabled for anonymous users.
Please send feedback to Trustwave Technical Support or the Webmaster
.