Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 3007 Source: ServerActiveSync

Exchange mailbox Server response timeout: Server: [<server name>] User: [<user name>@<company name>.com]. Exchange ActiveSync Server failed to communicate with the Exchange mailbox server in a timely manner. Verify that the Exchange mailbox Server is working correctly and is not overloaded.
According to ME2469722, this can occur due to mobile device connections and/or issues with the device software. These problems may be the result of resource depletion on the Exchange server. See the article for more details.
According to some support forums, many instances of this event are caused by the third party software or some network devices affecting the communication between front-end and back-end server.
From a support forum:
We initially deployed a few Apple devices about 6 months ago - iPhones and iPads - and all had been working fine until recently, when this problem surfaced. Following is the response from Microsoft:

"First, it appears the customer is hitting an issue that is caused by Apple’s ActiveSync implementation; we have two bugs opened with Apple at this time for this issue. The Apple device is attempting to sync a large amount of data (typically, this is the contacts folder) but has set a “timeout” period for syncing the data of x minutes (I believe this is 4 minutes, but I may be mistaken). When the sync has not completed in the time allotted, Apple launches another thread re-requesting the full sync. When that thread cannot sync in it’s time allotted, the Apple device launches another thread…and so on. This continues until we run out of resources to satisfy further requests/connections. The user performing the iPhone sync in these dumps is The only workaround, at this time, is to deny the sync request (turn off syncing for the user account); we are awaiting a fix from Apple."
This indicates that some process is affecting the communication betweent he ActiveSync component of Exchange and the the Exchange mailboxes. Some support forum mention that in some cases, a server-level antivirus application may be the culprit.

ME330461 provides generic information on troubleshooting ActiveSync while ME905013 describes various timeout intervals that are configured for the various components involved with ActiveSync.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.