| Event Id | 100 |
| Source | MSExchange Antispam |
| Description | Protocol Analysis Background agent warning. The queue this agent uses is full. This does not affect SRL calculations. Open proxy, reverse DNS, and sender blocking are affected. |
| Event Information | According to Microsoft : Explanation: This Warning event indicates that the work queue that the Protocol Analysis Background agent uses is full. As stated in the event description, sender reputation level (SRL) calculations are not affected. Open proxy, reverse DNS, and sender blocking are affected. Specifically, each connection is processed on a first-in first-out basis. If the queue is full, no new connection data is submitted for processing. Therefore, new connections are delayed until the queue falls below the maximum value. This warning may appear during times when the server is functioning at peak design load. User Action: No user action is required if this event rarely occurs. However, if the warning persists, follow one or more of these steps: 1.Review the Application event log for related events. For example, events that occur immediately before and after this event may provide more information about the root cause of this error. 2.If this event seems to be causing mail flow interruptions or other problems in your Exchange environment. Note:The maximum queue length is controlled by themsExchSenderReputationMaxWorkQueueSize attribute of the Sender Reputation object in the Message Hygiene options of the Transport Settings in the Active Directory directory service. The default value formsExchSenderReputationMaxWorkQueueSize attribute is 1,000.Note:If you are not already doing so, consider running the tools that Microsoft Exchange offers to help administrators analyze and troubleshoot their Exchange environment. These tools can help you make sure that your configuration is in line with Microsoft best practices. They can also help you identify and resolve performance issues, improve mail flow, and better manage disaster recovery scenarios. |
| Reference Links | Event ID 100 from Source MSExchange Antispam |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.