Hi all...

We have an Exchange 2013 environment with an external Mail Security Appliance (FortiMail),  because of this our Malware Filter was disabled, but the process ScanningProcess.exe (Microsoft Filtering Server Scanning Process) are still running and sometimes hangs the CPU for several minutes scanning attachments.

Is there a method to disable the process and avoid the CPU high use?

(all servers have Exchange 2013 CU7)

Hi,

ScanningProcess.exe is the content scanning component that's used by the Malware agent and DLP.

Please make sure the Malware Filter has been disabled with the following command on each server, it should return a value of False.

Get-TransportAgent "Malware Agent

Are there any DLP policies in your environment?

Best Regards.