The Messaging Gateway for Service Providers (SMG-SP) conduit log shows errors indicating that some rule sets cannot be downloaded but rules are otherwise being updated as expected.
Messaging Gateway for Service Providers
2017-09-27T15:06:18+02:00 (ERROR:4074.2848696096):  Error from web server 403 - Forbidden : unable to GET: https://aztec.brightmail.com/customer/rules/blrm.vcdiff/4/latest.
2017-09-27T15:06:21+02:00 (ERROR:4074.2848696096):  Error from web server 403 - Forbidden : unable to GET: https://aztec.brightmail.com/customer/rules/spamhunter.vcdiff/4/latest.
The SMG-SP has been configured to download "customer specific" rules but no customer specific rules have bee provisioned or created through submissions. The request for a non-existent rule file is being forbidden by the server which stores rules.
This doesn't harm the operation of SMG-SP or the download of updated spam rules or antivirus definitions. The errors may be addressed, however, by disabling the "customer specific / submission" rules in the conduit configuration section of the bmiconfig.xml.
The url tags with the ruleName="submission" attribute need to have the emabed attribute set to "false" as shown below: