[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 665
  • Last Modified:

SBS2008 Server - Should I use Forefront or a 3rd party Antivirus/Antispam filter software?

I have an SBS 2008 server which runs exchange 2007. It's running perfectly fine.
When I built the server it came with a 120 day trial use of ForeFront.
I'm reading where this product may no longer be supported by Microsoft.

However I have an MSDN subscription and I see several options for forefront 2010 including endpoint. Now I don't know much about forefront so I'm not sure which version to try and see that works for me.

I haven't decided whether to use Forefront from Microsoft thru a subscription cloud-based or just install the program on to the server. Currently I'm using a third-party spam filtering service that I pay for by the month

I am interested in trying forefront
these on the products available to me on MSDN

Forefront Endpoint Protection 2010 (x86 and x64) - DVD (English)
Forefront Unified Access Gateway 2010 with Service Pack 1 (x64) - DVD (English)
Forefront Identity Manager 2010 Language Packs (x86 and x64)
Forefront Threat Management Gateway 2010 Standard (x64) - DVD (English)
Forefront Protection 2010 for Exchange Server (x64) – CD
Forefront Security for Exchange Server with SP2 (x64) – CD
Forefront Client Security (x86 and x64) - CD (English)

Would someone tell me which version of forefront listed above that's available on MSDN I should try
or if someone has a better suggestion for an antivirus and/or anti-spam solution for my SBS2008 server
3 Solutions
Adam FarageEnterprise ArchCommented:
The forefront product line is technically dead, but is still supported until 2017 (2014 for 2010 endpoint protection): http://support.microsoft.com/lifecycle/search/default.aspx?sort=PN&alpha=endpoint+protection&Filter=FilterNO

I would probably either recommend the replacement product (System Center 2012 Endpoint Protection) OR a third party product. I typically recommend a file level antivirus, and then use a spam filter to do malware / antispam filtering, but I have have a positive experience with McAffe Security for Microsoft Exchange suite. Dont look at the actual "end of life" date on the link above, but instead the "end of mainstream support". This is when they stop releasing hotfixes unless it is a security issue (e.g: no more design change requests, no more fixes for bugs, ect).
David AtkinIT ProfessionalCommented:
I wouldn't use forefront.  I would look at a third party external email filter opposed to one that is installed on the server.  We use mxlogic for a number of our sites.  We've found the pricing to be good and the capture rate to be extremely good. It also acts as a mail spooler service so if your SBS is offline your emails remain with mxlogic until exchange is happy to receive emails again.

External email filter would be the route I would go down.
Cris HannaCommented:
While legally you could test forefront on the SBS box you can't use MSDN software to permanently run in a production environment.  So here's how I do this with my clients.  I install a hardware firewall which can do Universal Threat Management (UTM). Scans email, web traffic and prevent network intrusion.  Think of it as the most around the castle (your server and workstations),  Then install something like VIPRE AV on the desktops
agieryicAuthor Commented:
David and Adam, I am a big fan of your recommendations

Cris, I am aware of the restrictions of the MSDN. My plan was just to test and if it works out fine, the client would purchase the needed licenses.  

I do like the idea of the Vipre AV on the workstations. One of my senior Exchange expert mentioned this product as well vs the free version of MSE on the workstations.

I've been a fan of installing AV program on a server that I do not allow to go on the internet other then via WSUS.
I'm not familiar with Universal Threat Management  other then the little I read about it.

It doesn't appear you use Forefront. I may continue to outsource the SPAM filtering for now but perhaps move to Vipre for the workstations to keep them protected (hopefully much better then MSE)
agieryicAuthor Commented:
I appreciate all the input I received. This is very helpful. Thanks!

Featured Post

Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now