I have seen a host of errors.:
Event 1023 - Perflib
Windows cannot load the extensible counter DLL MSExchangeIS. The first four bytes (DWORD) of the Data section contains the Windows error code.
Windows cannot load the extensible counter DLL ASP.NET_64_2.0.50727. The first four bytes (DWORD) of the Data section contains the Windows error code.
Windows cannot load the extensible counter DLL ASP.NET_2.0.50727. The first four bytes (DWORD) of the Data section contains the Windows error code.
Event 1008 - MSExchange Mitigation Service
An unexpected exception occurred. Diagnostic information:
Exception encountered while fetching mitigations : System.AggregateException: One or more errors occurred. ---> System.Net.Http.HttpRequestException: An error occurred while sending the request. ---> System.Net.WebException: Unable to connect to the remote server ---> System.Net.Sockets.SocketException: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond 52.109.20.38:443
Event 3025 MSExchangeApplicationLogic
Scenario: GetKillBit. Failed to download killbit list from OMEX server. Exception: System.Net.WebException: Unable to connect to the remote server ---> System.Net.Sockets.SocketException: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond 52.111.246.9:443
Event 4999 MSExchange Common
Watson report about to be sent for process id: 15740, with parameters: E12IIS, c-RTL-AMD64, 15.01.2375.034, M.E.Mitigation.Service, unknown, M.E.M.S.C.U.<GetHttpUrlResponseAsync>d__2.MoveNext, System.AggregateException, 366e-dumptidset, unknown.
ErrorReportingEnabled: True
I assume that the socket errors (1008, 3025) are trying to get out to the internet; so since the computer get to get to the internet, these errors would appear
Here's what I can share about our network. We have vlans and they all point to switches and point to a firewall. The email server is on a vlan where the other computers on the vlan can reach the internet. but the email can not. Other than the 4 KB updates (listed in original post). we don't believe anything else was changed. The fact that the other computers on the same vlan can reach the switches and firewall and internet seem to indicate that the vlan is OK. and the problem is on this one server; it cannot reach the firewall.
Hope that helps.