cancel
Showing results for 
Search instead for 
Did you mean: 
dontmindme
Level 7

"The Antimalware engine is currently overloaded"

Hi,

As the subject implies i suddenly recieved this errormessage as i tried to access webpages.

Have anyone else recived this message?

0 Kudos
7 Replies
asabban
Level 17

Re: "The Antimalware engine is currently overloaded"

This usually would tell that the AntiMalware Engine (or its wrapper process) are currently too busy to answer further requests. I have not seen this anywhere so far.

Are you able to take a feedback and file a Service Request for this issue?

Best,

Andre

0 Kudos
eelsasser
Level 15

Re: "The Antimalware engine is currently overloaded"

If you have been editing or changing block pages themselves, sometimes the Error Template value on another block page reverts to the first value on the list.

That it, you may have been modifying the "URL Blocked" messages, but the Template Name in the block action inadvertently changed to Antimalware Engine Overloaded.

One thing I like to do for troubleshooting is edit the HTML in the default schema and add the rulename to a comment at the end of the HTML:

<!--
$Rules.CurrentRule.Name$
-->

When you view source of the block page, you can see the name of the rule that triggered it.

0 Kudos
dontmindme
Level 7

Re: "The Antimalware engine is currently overloaded"

Hi,

I will create a case directly as i have other issues with the gateway.

Thanks for the quick answers

0 Kudos
McAfee Employee

Re: "The Antimalware engine is currently overloaded"

Hello Sebastian,

Make sure your rule doesnt use the block page for 'Antimalware overloaded', as that is the default blockpage used when creating a rule (hoping to get that changed).

~jon

0 Kudos
Troja
Level 14

Re: "The Antimalware engine is currently overloaded"

Hi,

i also defined a access_denied.log file where the Rule name is included. So it is ease to figure out which Rule blocked the Request

Response Status Code equals 403

OR

Antimalware.Infected<Gateway Antimalware> equals true

OR

Block.reason matches *blocked*

Thats to LOG File

DateTime.ToWebReporterString
"" ""
Authentication.UserName
"" ""
String.ReplaceIfEquals (IP.ToString (Client.IP), "", "-")
"" ""
String.ReplaceIfEquals (Number.ToString (Response.StatusCode), "", "-")
"" ""
"BlockReason: "
Block.Reason
"" ""
"URL Categories: "
List.OfCategory.ToString (URL.Categories)
"" ""
"Blocking Rule: "
Rules.CurrentRule.Name
"" ""
Request.Header.FirstLine
"" ""
Number.ToString (Block.ID)
"" ""
"URL Reputation: "
String.ReplaceIfEquals (URL.ReputationString, "", "-")
"" ""
"Media Type: "
MediaType.ToString (MediaType.FromHeader)
Header.Get ("Content-Type")
"""
String.ReplaceIfEquals (Number.ToString (Body.Size), "", "-")
" ""
"User Agent: "
Header.Get ("User-Agent")
"" ""
List.OfString.ToString (Antimalware.VirusNames)
""

0 Kudos

Re: "The Antimalware engine is currently overloaded"

hi,

Plz let me know if you find a solution for this i too have the same problem.

regards

0 Kudos
Troja
Level 14

Re: "The Antimalware engine is currently overloaded"

Hi,

take also a look at the mwg error logs. There are 25 Scanning Threads in the default configuration.

There was an LOG entry on my applice where a problem way shown, because there was no free scanning thread available any mor.

cheers, Thorsten

0 Kudos