Further to my earlier post regarding Forefront and CA InoculateIT (Exchange 2007 Forefront Event ID 6014) there is an additional step required – to disable scanner update attempts for CA InoculateIT in the Security Administrator. This is to stop the event 6014 repeatedly cropping up in the Event Viewer (CA InoculateIT has been rolled up into the CA Vat engine).

Microsoft Forefront Server Security encountered an error while performing a scan engine update.
   Scan Engine: CAIris
   Update Path: 
   Proxy Settings: Disabled
   Error Code: 0×80004005
   Description: An error occurred while checking if an update was available.

To disable the updates launch Forefront Server Security Administrator then navigate to Settings->Scanner Updates. Click on CA InoculateIT then click the Disable button on the right hand side.