Just trying to find out some information. We have been having problems with AMP queuing for the past 3 - 4 months. Started happening in March 2019 and happens every 6 - 8 weeks. We have opened multiple TACs about this and the solution is that Support either restarts the ESA (we are Cloud) or restarts the AMP services.
It appears that we are hitting a limit as noted in the Message Trace:
Message 14021736 is unscannable by Advanced Malware Protection engine. Reason: Upload Limit Reached
This has been appearing since yesterday on one of our ESAs. Support stopped/started the service last night around 6pm CDT, but it is still happening today. I'm trying to find out the limit and if this limit can be increased. I know that we are running into the following bug: https://community.cisco.com/t5/email-security/amp-file-analysis-service-threatgrid-cloud/td-p/3301440
But if there is a way to increase our capacity to prevent the queuing and impacting emails to our users, I need to explore this.