SBS2008 Server - Should I use Forefront or a 3rd party Antivirus/Antispam filter software?

I have an SBS 2008 server which runs exchange 2007. It's running perfectly fine.
When I built the server it came with a 120 day trial use of ForeFront.
I'm reading where this product may no longer be supported by Microsoft.

However I have an MSDN subscription and I see several options for forefront 2010 including endpoint. Now I don't know much about forefront so I'm not sure which version to try and see that works for me.

I haven't decided whether to use Forefront from Microsoft thru a subscription cloud-based or just install the program on to the server. Currently I'm using a third-party spam filtering service that I pay for by the month

I am interested in trying forefront
these on the products available to me on MSDN

Forefront Endpoint Protection 2010 (x86 and x64) - DVD (English)
Forefront Unified Access Gateway 2010 with Service Pack 1 (x64) - DVD (English)
Forefront Identity Manager 2010 Language Packs (x86 and x64)
Forefront Threat Management Gateway 2010 Standard (x64) - DVD (English)
Forefront Protection 2010 for Exchange Server (x64) – CD
Forefront Security for Exchange Server with SP2 (x64) – CD
Forefront Client Security (x86 and x64) - CD (English)

Would someone tell me which version of forefront listed above that's available on MSDN I should try
or if someone has a better suggestion for an antivirus and/or anti-spam solution for my SBS2008 server
LVL 1
Andreas GieryicComputer Networking, OwnerAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Adam FarageEnterprise ArchCommented:
The forefront product line is technically dead, but is still supported until 2017 (2014 for 2010 endpoint protection): http://support.microsoft.com/lifecycle/search/default.aspx?sort=PN&alpha=endpoint+protection&Filter=FilterNO

I would probably either recommend the replacement product (System Center 2012 Endpoint Protection) OR a third party product. I typically recommend a file level antivirus, and then use a spam filter to do malware / antispam filtering, but I have have a positive experience with McAffe Security for Microsoft Exchange suite. Dont look at the actual "end of life" date on the link above, but instead the "end of mainstream support". This is when they stop releasing hotfixes unless it is a security issue (e.g: no more design change requests, no more fixes for bugs, ect).
0
David AtkinTechnical DirectorCommented:
I wouldn't use forefront.  I would look at a third party external email filter opposed to one that is installed on the server.  We use mxlogic for a number of our sites.  We've found the pricing to be good and the capture rate to be extremely good. It also acts as a mail spooler service so if your SBS is offline your emails remain with mxlogic until exchange is happy to receive emails again.

External email filter would be the route I would go down.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Cris HannaCommented:
While legally you could test forefront on the SBS box you can't use MSDN software to permanently run in a production environment.  So here's how I do this with my clients.  I install a hardware firewall which can do Universal Threat Management (UTM). Scans email, web traffic and prevent network intrusion.  Think of it as the most around the castle (your server and workstations),  Then install something like VIPRE AV on the desktops
0
Andreas GieryicComputer Networking, OwnerAuthor Commented:
David and Adam, I am a big fan of your recommendations

Cris, I am aware of the restrictions of the MSDN. My plan was just to test and if it works out fine, the client would purchase the needed licenses.  

I do like the idea of the Vipre AV on the workstations. One of my senior Exchange expert mentioned this product as well vs the free version of MSE on the workstations.

I've been a fan of installing AV program on a server that I do not allow to go on the internet other then via WSUS.
I'm not familiar with Universal Threat Management  other then the little I read about it.

It doesn't appear you use Forefront. I may continue to outsource the SPAM filtering for now but perhaps move to Vipre for the workstations to keep them protected (hopefully much better then MSE)
0
Andreas GieryicComputer Networking, OwnerAuthor Commented:
I appreciate all the input I received. This is very helpful. Thanks!
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Forefront ISA Server

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.