How to view Exchange Web Service (EWS) subscriptions created by Symantec Email Submission Client (SESC)

Products

• Mail Security for Microsoft Exchange
• Messaging Gateway

Issue/Introduction

 

Resolution

SESC creates EWS push subscriptions which provide for notification from Exchange when users put email into the spam submission folder.  SESC caches this information in a configuration file. This article contains steps to dump the SESC subscription cache to an XML file.

1. Download subscriptionbin.exe to the SESC server.
2. Open a command prompt.
3. Run the tool like this:

subscriptionbin.exe -c <sescinstalldir>\bin\configuration\subscription.bin <outputfilename>

The following is an example where the subscription information is written to c:\temp\subscription.xml:

subscriptionbin.exe -c "c:\program files\symantec\SESC\1.0\bin\configuration\subscription.bin" c:\temp\subscription.xml

NOTE:  Double quotes must be used when there is a space in the path.

The following is an example of data that shows up in the XML output:

<?xml version="1.0"?>
<ArrayOfSubscription xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema">
  <Subscription>
    <SubscriptionID>FwBleDIwMTBkYy4yazhkb21haW4udGVzdBAAAAD+qWvNJOvORrVLDnBlXQQRte+PUOS6zgg=</SubscriptionID>
    <LastNotificationTime>0001-01-01T00:00:00</LastNotificationTime>
    <Mailbox>
      <SmtpAddress>[email protected]</SmtpAddress>
      <Status>DIRECT_SUBMITTER</Status>
      <SubmissionsFolder>
        <FolderID>AAMkAGIzYmI5MGMyLWIyNDEtNGEyOC1hOTg3LWQwODBiMzU1MTFiOAAuAAAAAAD714Oq/ZX8QKfcUvP9vy9EAQB8s+Yae8Y5SZXMWVqW2XvnAAAAoDe2AAA=</FolderID>
        <SubscriptionID>FwBleDIwMTBkYy4yazhkb21haW4udGVzdBAAAAD+qWvNJOvORrVLDnBlXQQRte+PUOS6zgg=</SubscriptionID>
        <Name>Submit Spam to Symantec</Name>
      </SubmissionsFolder>
      <ExchangeServer>
        <Name>EXCHANGE2010-2</Name>
        <DistinguishedName>CN=EXCHANGE2010-2,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=First Organization,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=2k8domain,DC=test</DistinguishedName>
        <ExchangeRoles>Mailbox ClientAccess HubTransport</ExchangeRoles>
      </ExchangeServer>
    </Mailbox>
  </Subscription>
  <Subscription>
    <SubscriptionID>FwBleDIwMTBkYy4yazhkb21haW4udGVzdBAAAAAJ4VvqbKE1RKXWgVgLInM+te+PUOS6zgg=</SubscriptionID>
    <LastNotificationTime>0001-01-01T00:00:00</LastNotificationTime>
    <Mailbox>
      <SmtpAddress>[email protected]</SmtpAddress>
      <Status>DIRECT_SUBMITTER</Status>
      <SubmissionsFolder>
        <FolderID>AAMkADNlNDRmMWJlLWEzZjEtNGZmMC04MzA3LWM5OTVkOGQxNmM2MQAuAAAAAAD5AM5kjdbdSqpKQJLDKNzaAQBW/KRoZ5mwS5X/zNmbCFlPAAAAdOplAAA=</FolderID>
        <SubscriptionID>FwBleDIwMTBkYy4yazhkb21haW4udGVzdBAAAAAJ4VvqbKE1RKXWgVgLInM+te+PUOS6zgg=</SubscriptionID>
        <Name>Submit Spam to Symantec</Name>
      </SubmissionsFolder>
      <ExchangeServer>
        <Name>EX2010DC</Name>
        <DistinguishedName>CN=EX2010DC,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=First Organization,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=2k8domain,DC=test</DistinguishedName>
        <ExchangeRoles>Mailbox ClientAccess HubTransport</ExchangeRoles>
      </ExchangeServer>
    </Mailbox>
  </Subscription>
</ArrayOfSubscription>

Each <Subscription> contains the following information:

Node Name	Description	Example
SubscriptionID	Identifier Microsoft Exchange provided for the Exchange Web Service (EWS) push subscription	AAMkAGIzYmI5MGMyLWIyNDEtNGEyOC1hOTg3LWQwODBiMzU1MTFiOAAuAAAAAAD714Oq/ZX8QKfcUvP9vy9EAQB8s+Yae8Y5SZXMWVqW2XvnAAAAoDe2AAA=
Mailbox/SMTPAddress	SMTP address of the user	[email protected]
Mailbox/Status	Type of submitter.  Direct or moderated	DIRECT_SUBMITTER
Mailbox/SubmissionsFolder/FolderID	Unique identifier of the Exchange folder created for the user	AAMkADNlNDRmMWJlLWEzZjEtNGZmMC04MzA3LWM5OTVkOGQxNmM2MQAuAAAAAAD5AM5kjdbdSqpKQJLDKNzaAQBW/KRoZ5mwS5X/zNmbCFlPAAAAdOplAAA=
Mailbox/SubmissionsFolder/SubscriptionID	Same as SubscriptionID above
Mailbox/SubmissionsFolder/Name	Name of the Exchange folder created	Submit Spam to Symantec
ExchangeServer/Name	Friendly name of the Exchange server for the user	EX2010DC
ExchangeServer/DistinguishedName	DN of the Exchange server for the user	CN=EX2010DC,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=First Organization,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=2k8domain,DC=test

 

Environment

• SESC 1.0