CSV export of MAL does not show the error and its description for Symantec Brightmail Gateway appliances

Products

• Messaging Gateway

Issue/Introduction

CSV export of MAL does not show the error and its description for Symantec Brightmail Gateway appliances version 9.0.1.

 

When you export the contents of Message Audit Logs (MAL) to a CSV file via the "Export MAL" button in the web graphical user interface (GUI) of Symantec Brightmail Gateway appliances version 9.0.1, the "Deliver To" column of the CSV file only contains "Attempted Delivery to", followed by an ip address of the destination mail server. It does not contain the error or its description if the mail delivery has failed.

 

Resolution

This issue has been resolved in the Symantec Messaging Gateway (SMG, formerly known as Symantec Brightmail Gateway or SBG) version 9.5.  Symantec recommends upgrading to the latest version of the product.

 

Note:  In version 9.5, under Status->SMTP->Message Audit Logs, the "Actions" column now says: Deliver message normally.  However, under the message details, after clicking on the recipient address in the "To" column on the same page, under "Delivery" field, the "Details" field now shows the actual error message.  So, now, when the MAL is exported into the CSV file via the "Export CSV" button on the "Message Audit Logs" page, the column "Deliver To" in the CSV file now contains the text "Attempted Delivery to....." along with the IP address of the server and the error message if the delivery of the message fails.

 

The "Deliver message normally" text in the "Actions" column is expected behavior, because the SMG appliance scanned and sent the message on its way and although the downstream MTA server cannot accept the message and produces an error, such as " 554 5.7.1 relay access denied", as far as the SMG is concerned, the message has been delivered successfully to the downstream MTA and thus it displays the action of "Deliver message normally".  And when the downstream MTA rejects the message and the message is returned to the user as "Undelivered Mail", the error text is captured from the downstream MTA and is shown in the "Details" field as described above.