Solved

virus protection exchange server

Posted on 2015-02-09
11
222 Views
Last Modified: 2015-05-19
We have exchange server on our premise.  We also have virus protection, Symantec endpoint protection on our computers.   Is there a way for our exchange server to scan all emails/attachments for viruses?  What type of product does this?  Or do I need to make sure I get a mail scanner on the outlook clients also?
0
Comment
Question by:al4629740
11 Comments
 
LVL 16

Expert Comment

by:Carol Chisholm
ID: 40600091
You don't say what version of Exchange.
(Microsoft used to have a good product called Forefont but they don't sell it any more.)

You can run a separate SMTP filter (like X-Wall).
You can also use a firewall with an SMTP filter addin like SonicWALL that does some of the work before the message gets to your Exchange server
You can buy a black box like Barracuda
You can outsource the preprocessing to Microsoft or McAfee (after all most of your e-mail comes from the Internet.
You should also have the mail filtering turned on on the client endpoints.
0
 

Author Comment

by:al4629740
ID: 40600093
Exchange 2013
0
 

Author Comment

by:al4629740
ID: 40600095
I have Symantec Endpoint for Small Business.  In the cloud version, does it provide mail filtering?
0
Backup Your Microsoft Windows Server®

Backup all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

 
LVL 16

Expert Comment

by:Carol Chisholm
ID: 40600097
So no Forefront.

But all the other suggestions are valid, You should have endpoint protection in the Outlook / web clients and something between your server and the Internet.
0
 
LVL 16

Expert Comment

by:Carol Chisholm
ID: 40600099
http://www.symantec.com/email/

The second section is on on-premise protection

But if you have Symantec on the workstations it might be better to have a different provider elsewhere.
0
 

Author Comment

by:al4629740
ID: 40600100
Does Cisco iron port provide such a function?
0
 
LVL 16

Expert Comment

by:Carol Chisholm
ID: 40600101
0
 
LVL 16

Expert Comment

by:Carol Chisholm
ID: 40600102
Yes Iron Port does that too.
0
 
LVL 16

Accepted Solution

by:
Carol Chisholm earned 300 total points
ID: 40600103
0
 
LVL 25

Assisted Solution

by:Diverse IT
Diverse IT earned 200 total points
ID: 40600203
With security it is always best to have a multi-layered defense. I prefer a modular design. .. anti-malware at the gateway, application layer and the Endpoint. Sometimes it is easy to get sucked into the idea of one centralized solution because it's easy to manage but in security diversity in different layers has benefits. .. you just need to pick wisely.

Gateway, I prefer CGSS from SonicWALL, nothing beats it IMO.

On the application layer for Exchange I prefer Microsoft's EOP (Exchange Online Protection) is the newest version of FOPE aka Forefront but in an SaaS model. One of the benefits of EOP is its integration, among other things like,    
multi-layered, real-time anti-spam and multi-engine anti-malware protection, Transport Rules, Policy based filtering, IP reputation protection, DLP (Data Loss Protection), automated queuing, etc. Some other good options would be MX Logic, now McAfee, although I have not used it since McAfee's buy out so I don't know if they have ruined it like they typically do with all of their products. Another contender, ESET for Exchange, which is far different in design meaning it is an on-premise anti-malware application that scans the mailboxes in the Exchange store before delivery to the client (Outlook). It is a very solid security solution for Exchange however it lacks some of the benefits of online solutions as EOP.

Lastly on the Endpoint side, I prefer ESET. IMO it is the lowest footprint best security Endpoint on the market. Our clients have not been infected in over 12 years with this security schema coupled with security best practices. To clarify although I said diversity has great benefits, diversity between gateway and Endpoint solutions are more important.

Hope that helps. Let me know if you have any questions!
0
 
LVL 28

Expert Comment

by:jhyiesla
ID: 40601206
We use Mimecast as our email anti-spam AV protection.  It's a cloud-based service so it take care of emails before they hit you and it works pretty well. We have been on it for over two years and it has done a good job for us.
0

Featured Post

Courses: Start Training Online With Pros, Today

Brush up on the basics or master the advanced techniques required to earn essential industry certifications, with Courses. Enroll in a course and start learning today. Training topics range from Android App Dev to the Xen Virtualization Platform.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Learn to move / copy / export exchange contacts to iPhone without using any software. Also see the issues in configuration of exchange with iPhone to migrate contacts.
This article aims to explain the working of CircularLogArchiver. This tool was designed to solve the buildup of log file in cases where systems do not support circular logging or where circular logging is not enabled
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
Established in 1997, Technology Architects has become one of the most reputable technology solutions companies in the country. TA have been providing businesses with cost effective state-of-the-art solutions and unparalleled service that is designed…

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question