Hey guys. I have been noticing for some time that occasionally I get error 4010:
Transport engine failed to evaluate condition due to Filtering Service error. The rule is configured to ignore errors. Details: 'Organization: '' Message ID '<ID@SERVER@DOMAIN.COM>' Rule ID '52b1774b-4a4c-4aba-ac8c-a3cb14f231ac' Predicate '' Action
''. FilteringServiceFailureException Error: Microsoft.Exchange.MessagingPolicies.Rules.FilteringServiceFailureException: FIPS text extraction failed with error: 'Scan request timed out: STREAMS
id: 0, parent: -1
name: "<e428b1cd53f64e3c88884d5354c4bbe1@SERVER@DOMAIN.COM>"
types:
text: not available
properties:
- Parsing::ParsingKeys::DepthLevel: 0
- Parsing::ParsingKeys::StreamSize: 1864
- ScanningPipeline::ElapsedTimeKeys::Parsing: 0
id: 1, parent: 0
name: "Message Body"
types: Html, Text
text: not available
properties:
- Parsing::ConfigKeys::BypassTextTruncation: 01 00 00 00 00 00 00 00
- Parsing::ParsingKeys::CharSet: 75 00 73 00 2D 00 61 00 73 00 63 00 69 00 69 00
- Parsing::ParsingKeys::ContentType: text/html
- Parsing::ParsingKeys::DepthLevel: 1
- Parsing::ParsingKeys::MessageBody: True
- Parsing::ParsingKeys::PreferredBody: True
- Parsing::ParsingKeys::StreamSize: 8631
- Parsing::ParsingKeys::Subject: FW: SUBJECT
- ScanningPipeline::ElapsedTimeKeys::Parsing: 2
- ScanningPipeline::ElapsedTimeKeys::TextExtraction: 2
- ScanningPipeline::TextExtractionKeys::TextExtractionAdditionalInformation:
- ScanningPipeline::TextExtractionKeys::TextExtractionMethod: OutsideInModule
- ScanningPipeline::TextExtractionKeys::TextExtractionResult: 2
- UnifiedContent::PropertyKeys::ExtractedContentOffset: 00 00 00 00 00 00 00 00
- UnifiedContent::PropertyKeys::RawDataOffset: 08 00 00 00 00 00 00 00
id: 2, parent: 0
name: "image001.png"
types: Png
text: not available
properties:
- Parsing::ParsingKeys::ContentType: image/png
- Parsing::ParsingKeys::DepthLevel: 1
- Parsing::ParsingKeys::StreamSize: 1182
- Parsing::ParsingKeys::Subject: FW: SUBJECT
- ScanningPipeline::ElapsedTimeKeys::Parsing: 1
- ScanningPipeline::ElapsedTimeKeys::TextExtraction: 0
- ScanningPipeline::TextExtractionKeys::TextExtractionAdditionalInformation:
- ScanningPipeline::TextExtractionKeys::TextExtractionResult: 1
- UnifiedContent::PropertyKeys::ExtractedContentOffset: 00 00 00 00 00 00 00 00
- UnifiedContent::PropertyKeys::RawDataOffset: DB 21 00 00 00 00 00 00
id: 3, parent: 0
name: "image002.png"
types: Png
text: not available
properties:
- Parsing::ParsingKeys::ContentType: image/png
- Parsing::ParsingKeys::DepthLevel: 1
- Parsing::ParsingKeys::StreamSize: 1129
- Parsing::ParsingKeys::Subject: SUBJECT
- ScanningPipeline::ElapsedTimeKeys::Parsing: 1
- ScanningPipeline::ElapsedTimeKeys::TextExtraction: 0
- ScanningPipeline::TextExtractionKeys::TextExtractionAdditionalInformation:
- ScanningPipeline::TextExtractionKeys::TextExtractionResult: 1
- UnifiedContent::PropertyKeys::ExtractedContentOffset: 00 00 00 00 00 00 00 00
- UnifiedContent::PropertyKeys::RawDataOffset: 95 26 00 00 00 00 00 00
id: 4, parent: 0
name: "image003.png"
types: Png
text: not available
properties:
- Parsing::ParsingKeys::ContentType: image/png
- Parsing::ParsingKeys::DepthLevel: 1
- Parsing::ParsingKeys::StreamSize: 4104
- Parsing::ParsingKeys::Subject: FW: SUJECT
- ScanningPipeline::ElapsedTimeKeys::Parsing: 1
- ScanningPipeline::ElapsedTimeKeys::TextExtraction: 0
- ScanningPipeline::TextExtractionKeys::TextExtractionAdditionalInformation:
- ScanningPipeline::TextExtractionKeys::TextExtractionResult: 1
- UnifiedContent::PropertyKeys::ExtractedContentOffset: 00 00 00 00 00 00 00 00
- UnifiedContent::PropertyKeys::RawDataOffset: 1A 2B 00 00 00 00 00 00
id: 5, parent: 0
name: "image004.png"
types: Png
text: not available
properties:
- Parsing::ParsingKeys::ContentType: image/png
- Parsing::ParsingKeys::DepthLevel: 1
- Parsing::ParsingKeys::StreamSize: 4449
- Parsing::ParsingKeys::Subject: SUBJECT
- ScanningPipeline::ElapsedTimeKeys::Parsing: 1
- ScanningPipeline::ElapsedTimeKeys::TextExtraction: 0
- ScanningPipeline::TextExtractionKeys::TextExtractionAdditionalInformation:
- ScanningPipeline::TextExtractionKeys::TextExtractionResult: 1
- UnifiedContent::PropertyKeys::ExtractedContentOffset: 00 00 00 00 00 00 00 00
- UnifiedContent::PropertyKeys::RawDataOffset: 3E 3B 00 00 00 00 00 00
id: 6, parent: 0
name: "SPREADSHEET.xlsx"
types: XlsxOfficePackage, Zip
text: not available
properties:
- Parsing::ParsingKeys::ContentType: application/vnd.openxmlformats-officedocument.spreadsheetml.sheet
- Parsing::ParsingKeys::DepthLevel: 1
- Parsing::ParsingKeys::StreamSize: 635727
- Parsing::ParsingKeys::Subject: SUBJECT
- ScanningPipeline::ElapsedTimeKeys::Parsing: 2
- ScanningPipeline::TextExtractionKeys::TextExtractionFailedModules: AdeModule
- ScanningPipeline::TextExtractionKeys::TextExtractionMethod: OutsideInModule
- UnifiedContent::PropertyKeys::ExtractedContentOffset: 00 00 00 00 00 00 00 00
- UnifiedContent::PropertyKeys::RawDataOffset: BB 4C 00 00 00 00 00 00
'. See inner exception for details ---> Microsoft.Filtering.ScanTimeoutException: Scan request timed out: STREAMS
id: 0, parent: -1
name: "<e428b1cd53f64e3c88884d5354c4bbe1@SERVER@DOMAIN.COM>"
types:
text: not available
properties:
- Parsing::ParsingKeys::DepthLevel: 0
- Parsing::ParsingKeys::StreamSize: 1864
- ScanningPipeline::ElapsedTimeKeys::Parsing: 0
id: 1, parent: 0
name: "Message Body"
types: Html, Text
text: not available
properties:
- Parsing::ConfigKeys::BypassTextTruncation: 01 00 00 00 00 00 00 00
- Parsing::ParsingKeys::CharSet: 75 00 73 00 2D 00 61 00 73 00 63 00 69 00 69 00
- Parsing::ParsingKeys::ContentType: text/html
- Parsing::ParsingKeys::DepthLevel: 1
- Parsing::ParsingKeys::MessageBody: True
- Parsing::ParsingKeys::PreferredBody: True
- Parsing::ParsingKeys::StreamSize: 8631
- Parsing::ParsingKeys::Subject: SUBJECT
- ScanningPipeline::ElapsedTimeKeys::Parsing: 2
- ScanningPipeline::ElapsedTimeKeys::TextExtraction: 2
- ScanningPipeline::TextExtractionKeys::TextExtractionAdditionalInformation:
- ScanningPipeline::TextExtractionKeys::TextExtractionMethod: OutsideInModule
- ScanningPipeline::TextExtractionKeys::TextExtractionResult: 2
- UnifiedContent::PropertyKeys::ExtractedContentOffset: 00 00 00 00 00 00 00 00
- UnifiedContent::PropertyKeys::RawDataOffset: 08 00 00 00 00 00 00 00
id: 2, parent: 0
name: "image001.png"
types: Png
text: not available
properties:
- Parsing::ParsingKeys::ContentType: image/png
- Parsing::ParsingKeys::DepthLevel: 1
- Parsing::ParsingKeys::StreamSize: 1182
- Parsing::ParsingKeys::SUBJECT
- ScanningPipeline::ElapsedTimeKeys::Parsing: 1
- ScanningPipeline::ElapsedTimeKeys::TextExtraction: 0
- ScanningPipeline::TextExtractionKeys::TextExtractionAdditionalInformation:
- ScanningPipeline::TextExtractionKeys::TextExtractionResult: 1
- UnifiedContent::PropertyKeys::ExtractedContentOffset: 00 00 00 00 00 00 00 00
- UnifiedContent::PropertyKeys::RawDataOffset: DB 21 00 00 00 00 00 00
id: 3, parent: 0
name: "image002.png"
types: Png
text: not available
properties:
- Parsing::ParsingKeys::ContentType: image/png
- Parsing::ParsingKeys::DepthLevel: 1
- Parsing::ParsingKeys::StreamSize: 1129
- Parsing::ParsingKeys::Subject:SUBJECT
- ScanningPipeline::ElapsedTimeKeys::Parsing: 1
- ScanningPipeline::ElapsedTimeKeys::TextExtraction: 0
- ScanningPipeline::TextExtractionKeys::TextExtractionAdditionalInformation:
- ScanningPipeline::TextExtractionKeys::TextExtractionResult: 1
- UnifiedContent::PropertyKeys::ExtractedContentOffset: 00 00 00 00 00 00 00 00
- UnifiedContent::PropertyKeys::RawDataOffset: 95 26 00 00 00 00 00 00
id: 4, parent: 0
name: "image003.png"
types: Png
text: not available
properties:
- Parsing::ParsingKeys::ContentType: image/png
- Parsing::ParsingKeys::DepthLevel: 1
- Parsing::ParsingKeys::StreamSize: 4104
- Parsing::ParsingKeys::Subject: SUBJECT
- ScanningPipeline::ElapsedTimeKeys::Parsing: 1
- ScanningPipeline::ElapsedTimeKeys::TextExtraction: 0
- ScanningPipeline::TextExtractionKeys::TextExtractionAdditionalInformation:
- ScanningPipeline::TextExtractionKeys::TextExtractionResult: 1
- UnifiedContent::PropertyKeys::ExtractedContentOffset: 00 00 00 00 00 00 00 00
- UnifiedContent::PropertyKeys::RawDataOffset: 1A 2B 00 00 00 00 00 00
id: 5, parent: 0
name: "image004.png"
types: Png
text: not available
properties:
- Parsing::ParsingKeys::ContentType: image/png
- Parsing::ParsingKeys::DepthLevel: 1
- Parsing::ParsingKeys::StreamSize: 4449
- Parsing::ParsingKeys::SUBJECT
- ScanningPipeline::ElapsedTimeKeys::Parsing: 1
- ScanningPipeline::ElapsedTimeKeys::TextExtraction: 0
- ScanningPipeline::TextExtractionKeys::TextExtractionAdditionalInformation:
- ScanningPipeline::TextExtractionKeys::TextExtractionResult: 1
- UnifiedContent::PropertyKeys::ExtractedContentOffset: 00 00 00 00 00 00 00 00
- UnifiedContent::PropertyKeys::RawDataOffset: 3E 3B 00 00 00 00 00 00
id: 6, parent: 0
name: "SPREADSHEET.xlsx"
types: XlsxOfficePackage, Zip
text: not available
properties:
- Parsing::ParsingKeys::ContentType: application/vnd.openxmlformats-officedocument.spreadsheetml.sheet
- Parsing::ParsingKeys::DepthLevel: 1
- Parsing::ParsingKeys::StreamSize: 635727
- Parsing::ParsingKeys::Subject: FW: SUBJECT
- ScanningPipeline::ElapsedTimeKeys::Parsing: 2
- ScanningPipeline::TextExtractionKeys::TextExtractionFailedModules: AdeModule
- ScanningPipeline::TextExtractionKeys::TextExtractionMethod: OutsideInModule
- UnifiedContent::PropertyKeys::ExtractedContentOffset: 00 00 00 00 00 00 00 00
- UnifiedContent::PropertyKeys::RawDataOffset: BB 4C 00 00 00 00 00 00
at Microsoft.Filtering.InteropUtils.ThrowPostScanErrorAsFilteringException(WSM_ReturnCode code, String message)
at Microsoft.Filtering.FilteringService.EndScan(IAsyncResult ar)
at Microsoft.Filtering.FipsDataStreamFilteringService.EndScan(IAsyncResult ar)
at Microsoft.Exchange.MessagingPolicies.Rules.UnifiedContentServiceInvoker.TextExtractionComplete(IFipsDataStreamFilteringService textExtractionService, TextExtractionCompleteCallback textExtractionCompleteCallback, IAsyncResult asyncResult)
--- End of inner exception stack trace ---
at Microsoft.Exchange.MessagingPolicies.Rules.UnifiedContentServiceInvoker.GetUnifiedContentResults(FilteringServiceInvokerRequest filteringServiceInvokerRequest)
at Microsoft.Exchange.MessagingPolicies.Rules.MailMessage.GetUnifiedContentResults()
at Microsoft.Exchange.MessagingPolicies.Rules.MailMessage.GetAttachmentStreamIdentities()
at Microsoft.Exchange.MessagingPolicies.Rules.MailMessage.GetAttachmentInfos()
at Microsoft.Exchange.MessagingPolicies.Rules.MailMessage.get_AttachmentTypes()
at Microsoft.Exchange.MessagingPolicies.Rules.MessageProperty.OnGetValue(RulesEvaluationContext baseContext)
at Microsoft.Exchange.MessagingPolicies.Rules.Property.GetValue(RulesEvaluationContext context)
at Microsoft.Exchange.MessagingPolicies.Rules.IsPredicate.Evaluate(RulesEvaluationContext context)
at Microsoft.Exchange.MessagingPolicies.Rules.AndCondition.Evaluate(RulesEvaluationContext context)
at Microsoft.Exchange.MessagingPolicies.Rules.RulesEvaluator.EvaluateCondition(Condition condition, RulesEvaluationContext evaluationContext)
at Microsoft.Exchange.MessagingPolicies.Rules.TransportRulesEvaluator.EvaluateCondition(Condition condition, RulesEvaluationContext evaluationContext). Message-Id:<e428b1cd53f64e3c88884d5354c4bbe1@SERVER.DOMAIN.NET>'
This is always immediately followed by FIPS ERROR 2213:
A scan request timed out. ID={9a44e9c5-c363-4d63-a1f1-529980224acb}, WorkloadID=<e428b1cd53f64e3c88884d5354c4bbe1@SERVER@DOMAIN.COM>, PID=31296
I have googled this and found one thread that was similar but was not exactly the same issue. Has anyone seen this before and does anyone know how I can resolve this?
Thanks!