Y2K22 script logistics

Question

Since a fix for y2k22 bug not included in last exchange update, i need to run the ms script to repair the malware filter scanner. For logistical purposes, does anyone know the exact procedure the script follows. When and for how long does the transport service go offline while it's doing the updating? Does it shut the services down to flush the data from the folders and then bring them online before it downloads the new malware data, or does the service go offline the entire time and only come back up when the new indexes and whatnot have been downloaded and installed. Trying to get a handle on the timeline so i can plan around mail flow.

Answer 1

Well, If you look at the script, the services restart then the download begins so you would be good there:

function StartServices {
Write-Host "$($env:COMPUTERNAME) Starting services..."
Start-Service FMS
Start-Service MSExchangeTransport
}

    function StartEngineUpdate {
        param($EngineUpdatePath)

        Write-Host "$($env:COMPUTERNAME) Starting engine update..."
        $installPath = Get-ExchangeInstallPath
        $updateScriptPath = Join-Path $installPath "Scripts\Update-MalwareFilteringServer.ps1"
        $fqdn = [System.Net.Dns]::GetHostEntry([string]"localhost").HostName
        $p = @{
            Identity = $fqdn
        }
        if (-not [string]::IsNullOrEmpty($EngineUpdatePath)) {
            $p.EngineUpdatePath = $EngineUpdatePath
        }

Answer 2

I can't recall the specifics, but the transport and FMS service definitely restarts and it can take 15-30 minutes for the new definitions to download. Of course at some point you need to undo any previous change such as disabling anti-malware or transport rules.

I would do this off hours so you can monitor and not be rushed if something goes wrong.