How to Configure GFI Mail Essentials

it is possible

If it is possible,do it :)

Hi

You can install GFI Mail Essentials in two ways.

1º GFI Mail Essentials on a server with Exchange

2º Another machine independent of the Exchange Server

Check GFI Mail Essentials manual

http://www.gfi.com/mes/me12installation.pdf

A  step by step: http://www.howtonetworking.com/others/gfi01.htm

For me the best way(this a personal opinion), is to install in a DMZ machine and act like a mail/host relay.

GFI is one of the best products for Exchange(if not the best).

But always install GFI inside of a Firewall(in your case ISA Server)

How to configure ISA

http://www.isaserver.org/articles/isa2004smtprelayinoutp2.html
http://kbase.gfi.com/showarticle.asp?id=KBID001346

Hope this can help you. Any other assistance, just ask

Jail

Hi BesWay
Finally someone helping me
My current setup all mail dropped on my ISA server which has GFI Mail Essential installed and from there on route to my exchange server
Installed smtp service on ISA created domain for incoming mail (see attachment 1)
Add domain to inbound e-mail domain on general in GFI mail essential
Configured perimeter smtp server like this (not sure about this please advice)
(See attachment 2)

Add exchange ip to relay through smtp service on isa
Set Isas internal ip as ip address of smtp virtual service
Set exchange to use isa internal ip as smart host
Created a publishing rule from external to ip of isa internal ip smtp server Protocol
Created access rule from exchange to local host smtp Protocol
Edit system police smtp allow internal external local host
Tested but still not working
Please advice what I did wrong

attachment 2.

Hi Jack,

Let me install the GFI in my lab test, and I will back to you.

Jail

cool

Hi

Jack like i said, do not install the GFI in your own ISA. Install in a DMZ area(but in a independent machine), or in the Exchange, not on ISA

Give me a couple of hours and I will test this

Jail

Hi Jail
I want to install GFI on isa I know about sites running like this work great.
Dont have DMZ zone.
I will wait for you feedback thanks

Hi Jack

I never try this on ISA, but I will test(but i don't recommend). Installing in the ISA, i preferred that you installed in the Exchange Server. It works great, but will reduce the capacity of the server(CPU and memory, and sometimes Network)

But like I said, let me try first :)

Jail

Hi Jack,

Sorry i have a problem with my Exchange Server test :( need to fixed first.

But regarding the GFI, lets check some issues.

First, before you install the GFI did your Exchange Server send and receive emails from/to outside world?

If so, did your ISA Server was running and have the right rules to work with Exchange Server?

Why is this? Just to bypass any problems with Exchange Server, that are before GFI install, and are Exchange issues, not GFI issues.

If not, i recommend always first to get Exchange Server to work without the GFI, then install the GFI and make the right changes.

Second, if you are using GFI as mail relay(install outside of the Exchange Server), the mail flow will be, Internet - ISA Server - GFI - Exchange Server to receive, and Exchange Server - GFI - ISA Server - Internet to send.

All mail will be from/to GFI, Exchange will "download" the emails from the GFI, and send emails to GFI.

So if you want to install the the GFI in your ISA Server, how can you publish the GFI if is in its own Server? Like I said before, i never test this, but I think this will not work, or will be very difficult to configure ISA Server to work well.

I am fixing my Exchange problem, mean while we can discuss the configuration, or i can answer some of your questions.

Jail

Hi Jail

My exchange works 100%
ISA has the right rules
You create publishing rule to drop on Isa internal interface and set smtp virtual server as is internal ip.
If you use isa with gfi or dedicated server its the same isa is a firewall you can open any ports you like.

All incoming mail is flowing from external to my isa where GFI Mail essential is installed from there it should be forwarded to my exchange.
I configured perimeter smtp server likes this. See attachment or should I click this machine is not a perimeter smtp server and add my exchange ip please advice

perimeter smtp servers config

Hi

If Exchange was running that's good. Then we can focus on ISA - GFI - Exchange

Regarding perimiter, no this is only if the GFI is relayed trough another SMTP Server, this is not the case.

Dont forget that in the Exchange needs to "downloads" the emails from this server.  

So in the Exchange Management Console, Server Configuration, Hub Transport you need to create a Receive Connector, and in the option, Receive email from remote Server, add the GFI IP.

Jail

Hi

I Forget to say that also you need to create a send connector to go trough GFI Server

PS: I need to create a new Exchange Server :( since i have a problem with the old VM Exchange

Jail

Im running exchange 2003 so ISA/GIF is a perimeter SMTP server in my case scenario

Hi BesWay
Problem is 100% GFI mail essential
Why
Removed it from ISA and mail worked 100%
All my inbound outbound mail is realled through ISA which has Microsoft default virtual SMTP server installed meaning problem is not with isa rules as mail works.

Any suggestion as I never configured GFI mail essential before.