Recently changed filter to Action: Warn

get-csimfilterconfiguration

Get-CsImFilterConfiguration


Identity           : Global
Prefixes           : {callto:, file:, ftp., ftp:...}
AllowMessage       :
WarnMessage        : Warning: Hyperlinks can contain viruses or otherwise be ha
                     rmful to your computer and data. To protect your computer,
                      click only those hyperlinks from trusted sources.
Enabled            : True
IgnoreLocal        : True
BlockFileExtension : True
Action             : Warn

Filter is working but warnings are tripled during federated IM.

Warning: Hyperlinks can contain viruses or otherwise be harmful to your computer and data. To protect your computer, click only those hyperlinks from trusted sources. 
Warning: Hyperlinks can contain viruses or otherwise be harmful to your computer and data. To protect your computer, click only those hyperlinks from trusted sources.
Warning: Hyperlinks can contain viruses or otherwise be harmful to your computer and data. To protect your computer, click only those hyperlinks from trusted sources.  
www.google.com <http://www.google.com/> 

and doubled during internal IM.

creating 3 identities for pools : fes ,director, edge and enable only fes didn't help.

It looks each pool adds next warning, how to make sure that 1 warning will be added ?

Hi Zullua,

creating 3 identities for pools : fes ,director, edge and enable only fes didn't help.

It looks each pool adds next warning, how to make sure that 1 warning will be added ?

Im a little confused, as I know it can be configured at global or site level.

Can you please tell me how you created 3 identities for the FE, Director, Edge pools ?

Best regards,

Eric

Get-CsImFilterConfiguration

Identity           : Global
Prefixes           : {callto:, file:, ftp., ftp:...}
AllowMessage       :
WarnMessage        : Warning: Hyperlinks can contain viruses or otherwise be ha
                     rmful to your computer and data. To protect your computer,
                      click only those hyperlinks from trusted sources.
Enabled            : False
IgnoreLocal        : True
BlockFileExtension : True
Action             : Warn

Identity           : Service:Registrar:fespool.domain.name
Prefixes           : {callto:, file:, ftp., ftp:...}
AllowMessage       :
WarnMessage        : Warning: Hyperlinks can contain viruses or otherwise be ha
                     rmful to your computer and data. To protect your computer,
                      click only those hyperlinks from trusted sources.
Enabled            : True
IgnoreLocal        : True
BlockFileExtension : False
Action             : Warn

Identity           : Service:EdgeServer:edgepool.domain.name
Prefixes           : {callto:, file:, ftp., ftp:...}
AllowMessage       :
WarnMessage        :
Enabled            : False
IgnoreLocal        : True
BlockFileExtension : False
Action             : Allow

Identity           : Service:Registrar:dirpool.domain.name
Prefixes           : {callto:, file:, ftp., ftp:...}
AllowMessage       :
WarnMessage        :
Enabled            : False
IgnoreLocal        : True
BlockFileExtension : False

Action             : Allow

You can configure it in Control Panel "IM and Precense" -> "URL Filter" -> "New" -> "Pool configuration"

In this configuration receives 2 warnings during Internal IM and 1 warning during fedarated IM, in case FEs Pool IM filter disabled for sure warnings dissapear totally.

Statement:

• If a server (Server1) adds a warning to an instant message that contains an active hyperlink, a subsequent server (Server2) that receives this instant message can still take a different action based on this active hyperlink present in the instant message and block the instant message or add a warning. If Server2 is configured only to add a warning for this URL, the earlier warning added by Server1 is removed, and the warning configured on Server2 is added to the beginning of the instant message.

From:

https://technet.microsoft.com/en-us/library/gg520952(v=ocs.14).aspx

looks is not true.

Please help why there is more than 1 warning ?

• Edited by Zullua Monday, March 02, 2015 1:06 PM

Get-CsImFilterConfiguration

Identity           : Global
Prefixes           : {callto:, file:, ftp., ftp:...}
AllowMessage       :
WarnMessage        : Warning: Hyperlinks can contain viruses or otherwise be ha
                     rmful to your computer and data. To protect your computer,
                      click only those hyperlinks from trusted sources.
Enabled            : False
IgnoreLocal        : True
BlockFileExtension : True
Action             : Warn

Identity           : Service:Registrar:fespool.domain.name
Prefixes           : {callto:, file:, ftp., ftp:...}
AllowMessage       :
WarnMessage        : Warning: Hyperlinks can contain viruses or otherwise be ha
                     rmful to your computer and data. To protect your computer,
                      click only those hyperlinks from trusted sources.
Enabled            : True
IgnoreLocal        : True
BlockFileExtension : False
Action             : Warn

Identity           : Service:EdgeServer:edgepool.domain.name
Prefixes           : {callto:, file:, ftp., ftp:...}
AllowMessage       :
WarnMessage        :
Enabled            : False
IgnoreLocal        : True
BlockFileExtension : False
Action             : Allow

Identity           : Service:Registrar:dirpool.domain.name
Prefixes           : {callto:, file:, ftp., ftp:...}
AllowMessage       :
WarnMessage        :
Enabled            : False
IgnoreLocal        : True
BlockFileExtension : False

Action             : Allow

You can configure it in Control Panel "IM and Precense" -> "URL Filter" -> "New" -> "Pool configuration"

In this configuration receives 2 warnings during Internal IM and 1 warning during fedarated IM, in case FEs Pool IM filter disabled for sure warnings dissapear totally.

Statement:

• If a server (Server1) adds a warning to an instant message that contains an active hyperlink, a subsequent server (Server2) that receives this instant message can still take a different action based on this active hyperlink present in the instant message and block the instant message or add a warning. If Server2 is configured only to add a warning for this URL, the earlier warning added by Server1 is removed, and the warning configured on Server2 is added to the beginning of the instant message.

From:

https://technet.microsoft.com/en-us/library/gg520952(v=ocs.14).aspx

looks is not true.

Please help why there is more than 1 warning ?

• Edited by Zullua Monday, March 02, 2015 1:06 PM

Get-CsImFilterConfiguration

Identity           : Global
Prefixes           : {callto:, file:, ftp., ftp:...}
AllowMessage       :
WarnMessage        : Warning: Hyperlinks can contain viruses or otherwise be ha
                     rmful to your computer and data. To protect your computer,
                      click only those hyperlinks from trusted sources.
Enabled            : False
IgnoreLocal        : True
BlockFileExtension : True
Action             : Warn

Identity           : Service:Registrar:fespool.domain.name
Prefixes           : {callto:, file:, ftp., ftp:...}
AllowMessage       :
WarnMessage        : Warning: Hyperlinks can contain viruses or otherwise be ha
                     rmful to your computer and data. To protect your computer,
                      click only those hyperlinks from trusted sources.
Enabled            : True
IgnoreLocal        : True
BlockFileExtension : False
Action             : Warn

Identity           : Service:EdgeServer:edgepool.domain.name
Prefixes           : {callto:, file:, ftp., ftp:...}
AllowMessage       :
WarnMessage        :
Enabled            : False
IgnoreLocal        : True
BlockFileExtension : False
Action             : Allow

Identity           : Service:Registrar:dirpool.domain.name
Prefixes           : {callto:, file:, ftp., ftp:...}
AllowMessage       :
WarnMessage        :
Enabled            : False
IgnoreLocal        : True
BlockFileExtension : False

Action             : Allow

You can configure it in Control Panel "IM and Precense" -> "URL Filter" -> "New" -> "Pool configuration"

In this configuration receives 2 warnings during Internal IM and 1 warning during fedarated IM, in case FEs Pool IM filter disabled for sure warnings dissapear totally.

Statement:

• If a server (Server1) adds a warning to an instant message that contains an active hyperlink, a subsequent server (Server2) that receives this instant message can still take a different action based on this active hyperlink present in the instant message and block the instant message or add a warning. If Server2 is configured only to add a warning for this URL, the earlier warning added by Server1 is removed, and the warning configured on Server2 is added to the beginning of the instant message.

From:

https://technet.microsoft.com/en-us/library/gg520952(v=ocs.14).aspx

looks is not true.

Please help why there is more than 1 warning ?

• Edited by Zullua Monday, March 02, 2015 1:06 PM

Get-CsImFilterConfiguration

Identity           : Global
Prefixes           : {callto:, file:, ftp., ftp:...}
AllowMessage       :
WarnMessage        : Warning: Hyperlinks can contain viruses or otherwise be ha
                     rmful to your computer and data. To protect your computer,
                      click only those hyperlinks from trusted sources.
Enabled            : False
IgnoreLocal        : True
BlockFileExtension : True
Action             : Warn

Identity           : Service:Registrar:fespool.domain.name
Prefixes           : {callto:, file:, ftp., ftp:...}
AllowMessage       :
WarnMessage        : Warning: Hyperlinks can contain viruses or otherwise be ha
                     rmful to your computer and data. To protect your computer,
                      click only those hyperlinks from trusted sources.
Enabled            : True
IgnoreLocal        : True
BlockFileExtension : False
Action             : Warn

Identity           : Service:EdgeServer:edgepool.domain.name
Prefixes           : {callto:, file:, ftp., ftp:...}
AllowMessage       :
WarnMessage        :
Enabled            : False
IgnoreLocal        : True
BlockFileExtension : False
Action             : Allow

Identity           : Service:Registrar:dirpool.domain.name
Prefixes           : {callto:, file:, ftp., ftp:...}
AllowMessage       :
WarnMessage        :
Enabled            : False
IgnoreLocal        : True
BlockFileExtension : False

Action             : Allow

You can configure it in Control Panel "IM and Precense" -> "URL Filter" -> "New" -> "Pool configuration"

In this configuration receives 2 warnings during Internal IM and 1 warning during fedarated IM, in case FEs Pool IM filter disabled for sure warnings dissapear totally.

Statement:

• If a server (Server1) adds a warning to an instant message that contains an active hyperlink, a subsequent server (Server2) that receives this instant message can still take a different action based on this active hyperlink present in the instant message and block the instant message or add a warning. If Server2 is configured only to add a warning for this URL, the earlier warning added by Server1 is removed, and the warning configured on Server2 is added to the beginning of the instant message.

From:

https://technet.microsoft.com/en-us/library/gg520952(v=ocs.14).aspx

looks is not true.

Please help why there is more than 1 warning ?

• Edited by Zullua Monday, March 02, 2015 1:06 PM

Hi Zullua,

Try this, it seems to work.

PS: I don't have Director role installed, only have one FE server and one Edge Server.

Hi Zullua,

Try this, it seems to work.

PS: I don't have Director role installed, only have one FE server and one Edge Server.

• Marked as answer by Eric_YangKModerator 23 hours 18 minutes ago

Hi Zullua,

Try this, it seems to work.

PS: I don't have Director role installed, only have one FE server and one Edge Server.

• Marked as answer by Eric_YangKModerator Sunday, March 08, 2015 7:59 AM

Hi Zullua,

Try this, it seems to work.

PS: I don't have Director role installed, only have one FE server and one Edge Server.

• Marked as answer by Eric_YangKMicrosoft contingent staff, Moderator Sunday, March 08, 2015 7:59 AM

Hi Zullua,

Try this, it seems to work.

PS: I don't have Director role installed, only have one FE server and one Edge Server.

• Marked as answer by Eric_YangKMicrosoft contingent staff, Moderator Sunday, March 08, 2015 7:59 AM

Hi Zullua,

Try this, it seems to work.

PS: I don't have Director role installed, only have one FE server and one Edge Server.

• Marked as answer by Eric_YangKMicrosoft contingent staff, Moderator Sunday, March 08, 2015 7:59 AM

Hi Zullua,

Try this, it seems to work.

PS: I don't have Director role installed, only have one FE server and one Edge Server.

• Marked as answer by Eric_YangKMicrosoft contingent staff, Moderator Sunday, March 08, 2015 7:59 AM

And there are two sreenshots.

LyncDemo1  is a interna user.

LyncDemo2  is a external user.

LyncDemo3  is a internal user.

Hope it can be helpful.

Best regards,

Eric

And there are two sreenshots.

LyncDemo1  is a interna user.

LyncDemo2  is a external user.

LyncDemo3  is a internal user.

Hope it can be helpful.

Best regards,

Eric

• Marked as answer by Eric_YangKModerator 23 hours 18 minutes ago

And there are two sreenshots.

LyncDemo1  is a interna user.

LyncDemo2  is a external user.

LyncDemo3  is a internal user.

Hope it can be helpful.

Best regards,

Eric

• Marked as answer by Eric_YangKModerator Sunday, March 08, 2015 7:59 AM

And there are two sreenshots.

LyncDemo1  is a interna user.

LyncDemo2  is a external user.

LyncDemo3  is a internal user.

Hope it can be helpful.

Best regards,

Eric

• Marked as answer by Eric_YangKMicrosoft contingent staff, Moderator Sunday, March 08, 2015 7:59 AM

And there are two sreenshots.

LyncDemo1  is a interna user.

LyncDemo2  is a external user.

LyncDemo3  is a internal user.

Hope it can be helpful.

Best regards,

Eric

• Marked as answer by Eric_YangKMicrosoft contingent staff, Moderator Sunday, March 08, 2015 7:59 AM

And there are two sreenshots.

LyncDemo1  is a interna user.

LyncDemo2  is a external user.

LyncDemo3  is a internal user.

Hope it can be helpful.

Best regards,

Eric

• Marked as answer by Eric_YangKMicrosoft contingent staff, Moderator Sunday, March 08, 2015 7:59 AM

And there are two sreenshots.

LyncDemo1  is a interna user.

LyncDemo2  is a external user.

LyncDemo3  is a internal user.

Hope it can be helpful.

Best regards,

Eric

• Marked as answer by Eric_YangKMicrosoft contingent staff, Moderator Sunday, March 08, 2015 7:59 AM

After Call with microsoft, suggested to use Lync 2013 client as workaround for doubled messages, but it didn't help.

Statement of Lync 2010 Client and Server - product developers in case multiple warnings.

As our environment is different than this described in statement I asked again question how we can solve that, and I received answers :

MSFT Engineer:

• If my statement is not enough we can escalate this incident.
• Then similar statement will be send by escalation engineer.
• As before I signalized in our conversation Lync Product group points that this is not error, this product works like this.
• There is option to create Critical Design Change Request, but similar requests, in same case multiple warnings was rejected already by Product group.
• Chance to accept new CDCR is very low.

We gave up, customer accepted doubled warnings, another reason to migrate to Lync 2013.

By Design :*