Solved

virus protection exchange server

Posted on 2015-02-09
11
217 Views
Last Modified: 2015-05-19
We have exchange server on our premise.  We also have virus protection, Symantec endpoint protection on our computers.   Is there a way for our exchange server to scan all emails/attachments for viruses?  What type of product does this?  Or do I need to make sure I get a mail scanner on the outlook clients also?
0
Comment
Question by:al4629740
11 Comments
 
LVL 16

Expert Comment

by:Carol Chisholm
Comment Utility
You don't say what version of Exchange.
(Microsoft used to have a good product called Forefont but they don't sell it any more.)

You can run a separate SMTP filter (like X-Wall).
You can also use a firewall with an SMTP filter addin like SonicWALL that does some of the work before the message gets to your Exchange server
You can buy a black box like Barracuda
You can outsource the preprocessing to Microsoft or McAfee (after all most of your e-mail comes from the Internet.
You should also have the mail filtering turned on on the client endpoints.
0
 

Author Comment

by:al4629740
Comment Utility
Exchange 2013
0
 

Author Comment

by:al4629740
Comment Utility
I have Symantec Endpoint for Small Business.  In the cloud version, does it provide mail filtering?
0
 
LVL 16

Expert Comment

by:Carol Chisholm
Comment Utility
So no Forefront.

But all the other suggestions are valid, You should have endpoint protection in the Outlook / web clients and something between your server and the Internet.
0
 
LVL 16

Expert Comment

by:Carol Chisholm
Comment Utility
http://www.symantec.com/email/

The second section is on on-premise protection

But if you have Symantec on the workstations it might be better to have a different provider elsewhere.
0
The curse of the end user strikes again      

You’ve updated all your end user’s email signatures. Hooray! But guess what? They’re playing around with the HTML, adding stupid taglines and ruining the imagery. Find out how you can save your signatures from end users today.

 

Author Comment

by:al4629740
Comment Utility
Does Cisco iron port provide such a function?
0
 
LVL 16

Expert Comment

by:Carol Chisholm
Comment Utility
0
 
LVL 16

Expert Comment

by:Carol Chisholm
Comment Utility
Yes Iron Port does that too.
0
 
LVL 16

Accepted Solution

by:
Carol Chisholm earned 300 total points
Comment Utility
0
 
LVL 24

Assisted Solution

by:diverseit
diverseit earned 200 total points
Comment Utility
With security it is always best to have a multi-layered defense. I prefer a modular design. .. anti-malware at the gateway, application layer and the Endpoint. Sometimes it is easy to get sucked into the idea of one centralized solution because it's easy to manage but in security diversity in different layers has benefits. .. you just need to pick wisely.

Gateway, I prefer CGSS from SonicWALL, nothing beats it IMO.

On the application layer for Exchange I prefer Microsoft's EOP (Exchange Online Protection) is the newest version of FOPE aka Forefront but in an SaaS model. One of the benefits of EOP is its integration, among other things like,    
multi-layered, real-time anti-spam and multi-engine anti-malware protection, Transport Rules, Policy based filtering, IP reputation protection, DLP (Data Loss Protection), automated queuing, etc. Some other good options would be MX Logic, now McAfee, although I have not used it since McAfee's buy out so I don't know if they have ruined it like they typically do with all of their products. Another contender, ESET for Exchange, which is far different in design meaning it is an on-premise anti-malware application that scans the mailboxes in the Exchange store before delivery to the client (Outlook). It is a very solid security solution for Exchange however it lacks some of the benefits of online solutions as EOP.

Lastly on the Endpoint side, I prefer ESET. IMO it is the lowest footprint best security Endpoint on the market. Our clients have not been infected in over 12 years with this security schema coupled with security best practices. To clarify although I said diversity has great benefits, diversity between gateway and Endpoint solutions are more important.

Hope that helps. Let me know if you have any questions!
0
 
LVL 28

Expert Comment

by:jhyiesla
Comment Utility
We use Mimecast as our email anti-spam AV protection.  It's a cloud-based service so it take care of emails before they hit you and it works pretty well. We have been on it for over two years and it has done a good job for us.
0

Featured Post

The problems with reply email signatures

Do you wish that you could place an email signature under a reply? Well, unfortunately, you can't. That great Exchange/Office 365 signature you've created will just appear at the bottom of an email chain. What a pain! Is there really no way to solve this? Well, there might be...

Join & Write a Comment

This process describes the steps required to Import and Export data from and to .pst files using Exchange 2010. We can use these steps to export data from a user to a .pst file, import data back to the same or a different user, or even import data t…
Learn to move / copy / export exchange contacts to iPhone without using any software. Also see the issues in configuration of exchange with iPhone to migrate contacts.
To show how to create a transport rule in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Rules tab.:  To cr…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now