SBS2008 Server - Should I use Forefront or a 3rd party Antivirus/Antispam filter software?

Posted on 2014-08-20
Last Modified: 2014-08-27
I have an SBS 2008 server which runs exchange 2007. It's running perfectly fine.
When I built the server it came with a 120 day trial use of ForeFront.
I'm reading where this product may no longer be supported by Microsoft.

However I have an MSDN subscription and I see several options for forefront 2010 including endpoint. Now I don't know much about forefront so I'm not sure which version to try and see that works for me.

I haven't decided whether to use Forefront from Microsoft thru a subscription cloud-based or just install the program on to the server. Currently I'm using a third-party spam filtering service that I pay for by the month

I am interested in trying forefront
these on the products available to me on MSDN

Forefront Endpoint Protection 2010 (x86 and x64) - DVD (English)
Forefront Unified Access Gateway 2010 with Service Pack 1 (x64) - DVD (English)
Forefront Identity Manager 2010 Language Packs (x86 and x64)
Forefront Threat Management Gateway 2010 Standard (x64) - DVD (English)
Forefront Protection 2010 for Exchange Server (x64) – CD
Forefront Security for Exchange Server with SP2 (x64) – CD
Forefront Client Security (x86 and x64) - CD (English)

Would someone tell me which version of forefront listed above that's available on MSDN I should try
or if someone has a better suggestion for an antivirus and/or anti-spam solution for my SBS2008 server
Question by:agieryic
    LVL 19

    Assisted Solution

    by:Adam Farage
    The forefront product line is technically dead, but is still supported until 2017 (2014 for 2010 endpoint protection):

    I would probably either recommend the replacement product (System Center 2012 Endpoint Protection) OR a third party product. I typically recommend a file level antivirus, and then use a spam filter to do malware / antispam filtering, but I have have a positive experience with McAffe Security for Microsoft Exchange suite. Dont look at the actual "end of life" date on the link above, but instead the "end of mainstream support". This is when they stop releasing hotfixes unless it is a security issue (e.g: no more design change requests, no more fixes for bugs, ect).
    LVL 21

    Accepted Solution

    I wouldn't use forefront.  I would look at a third party external email filter opposed to one that is installed on the server.  We use mxlogic for a number of our sites.  We've found the pricing to be good and the capture rate to be extremely good. It also acts as a mail spooler service so if your SBS is offline your emails remain with mxlogic until exchange is happy to receive emails again.

    External email filter would be the route I would go down.
    LVL 35

    Assisted Solution

    by:Cris Hanna
    While legally you could test forefront on the SBS box you can't use MSDN software to permanently run in a production environment.  So here's how I do this with my clients.  I install a hardware firewall which can do Universal Threat Management (UTM). Scans email, web traffic and prevent network intrusion.  Think of it as the most around the castle (your server and workstations),  Then install something like VIPRE AV on the desktops
    LVL 1

    Author Comment

    David and Adam, I am a big fan of your recommendations

    Cris, I am aware of the restrictions of the MSDN. My plan was just to test and if it works out fine, the client would purchase the needed licenses.  

    I do like the idea of the Vipre AV on the workstations. One of my senior Exchange expert mentioned this product as well vs the free version of MSE on the workstations.

    I've been a fan of installing AV program on a server that I do not allow to go on the internet other then via WSUS.
    I'm not familiar with Universal Threat Management  other then the little I read about it.

    It doesn't appear you use Forefront. I may continue to outsource the SPAM filtering for now but perhaps move to Vipre for the workstations to keep them protected (hopefully much better then MSE)
    LVL 1

    Author Closing Comment

    I appreciate all the input I received. This is very helpful. Thanks!

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Highfive + Dolby Voice = No More Audio Complaints!

    Poor audio quality is one of the top reasons people don’t use video conferencing. Get the crispest, clearest audio powered by Dolby Voice in every meeting. Highfive and Dolby Voice deliver the best video conferencing and audio experience for every meeting and every room.

    Get an idea of what you should include in an email disclaimer with these Top 5 email disclaimer tips.
    Set OWA language and time zone in Exchange for individuals, all users or per database.
    In this video we show how to create an email address policy in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Mail Flow…
    The video tutorial explains the basics of the Exchange server Database Availability groups. The components of this video include: 1. Automatic Failover 2. Failover Clustering 3. Active Manager

    761 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    10 Experts available now in Live!

    Get 1:1 Help Now