Protection Workspace can't read Security for Microsoft Exchange events

Technical Articles ID: KB93320
Last Modified: 2023-07-11 07:19:35 Etc/GMT

Environment

ePolicy Orchestrator (ePO) 5.10.0

Protection Workspace extension 1.0 - 1.0.0.1643

Problem

The Protection Workspace extension is unable to read events received from Security for Microsoft Exchange (SME).

The ePO orion.log fills up with the following error:

WARN [scheduler-TaskQueueEngine-thread-21] threats.ResolvedThreatsAction - Product ID not found for analyzer: MSME____8600

NOTE: There's no impact on the overall ability of ePO to parse, display, and query SME events. Only the Protection Workspace page and extension don't display data related to those events.

Solution

We investigated this issue and a Proof of Concept (POC) Build is currently available to resolve the issue. To obtain the POC Build, log on to the ServicePortal and create a Service Request. Include this article number in the Problem Description field.

Affected Products

Languages:

This article is available in the following languages:

Knowledge Center

Protection Workspace can't read Security for Microsoft Exchange events

Environment

Problem

Solution

Affected Products

Languages:

Title

Title

Knowledge Center

Protection Workspace can't read Security for Microsoft Exchange events

Environment

Problem

Solution

Affected Products

Languages:

Choose your region

Title

Title