virus protection exchange server

We have exchange server on our premise.  We also have virus protection, Symantec endpoint protection on our computers.   Is there a way for our exchange server to scan all emails/attachments for viruses?  What type of product does this?  Or do I need to make sure I get a mail scanner on the outlook clients also?
al4629740Asked:
Who is Participating?
 
Carol ChisholmCommented:
You don't say what version of Exchange.
(Microsoft used to have a good product called Forefont but they don't sell it any more.)

You can run a separate SMTP filter (like X-Wall).
You can also use a firewall with an SMTP filter addin like SonicWALL that does some of the work before the message gets to your Exchange server
You can buy a black box like Barracuda
You can outsource the preprocessing to Microsoft or McAfee (after all most of your e-mail comes from the Internet.
You should also have the mail filtering turned on on the client endpoints.
0
 
al4629740Author Commented:
Exchange 2013
0
Managing Security Policy in a Changing Environment

The enterprise network environment is evolving rapidly as companies extend their physical data centers to embrace cloud computing and software-defined networking. This new reality means that the challenge of managing the security policy is much more dynamic and complex.

 
al4629740Author Commented:
I have Symantec Endpoint for Small Business.  In the cloud version, does it provide mail filtering?
0
 
Carol ChisholmCommented:
So no Forefront.

But all the other suggestions are valid, You should have endpoint protection in the Outlook / web clients and something between your server and the Internet.
0
 
Carol ChisholmCommented:
http://www.symantec.com/email/

The second section is on on-premise protection

But if you have Symantec on the workstations it might be better to have a different provider elsewhere.
0
 
al4629740Author Commented:
Does Cisco iron port provide such a function?
0
 
Carol ChisholmCommented:
Yes Iron Port does that too.
0
 
Blue Street TechConnect With a Mentor Last KnightsCommented:
With security it is always best to have a multi-layered defense. I prefer a modular design. .. anti-malware at the gateway, application layer and the Endpoint. Sometimes it is easy to get sucked into the idea of one centralized solution because it's easy to manage but in security diversity in different layers has benefits. .. you just need to pick wisely.

Gateway, I prefer CGSS from SonicWALL, nothing beats it IMO.

On the application layer for Exchange I prefer Microsoft's EOP (Exchange Online Protection) is the newest version of FOPE aka Forefront but in an SaaS model. One of the benefits of EOP is its integration, among other things like,    
multi-layered, real-time anti-spam and multi-engine anti-malware protection, Transport Rules, Policy based filtering, IP reputation protection, DLP (Data Loss Protection), automated queuing, etc. Some other good options would be MX Logic, now McAfee, although I have not used it since McAfee's buy out so I don't know if they have ruined it like they typically do with all of their products. Another contender, ESET for Exchange, which is far different in design meaning it is an on-premise anti-malware application that scans the mailboxes in the Exchange store before delivery to the client (Outlook). It is a very solid security solution for Exchange however it lacks some of the benefits of online solutions as EOP.

Lastly on the Endpoint side, I prefer ESET. IMO it is the lowest footprint best security Endpoint on the market. Our clients have not been infected in over 12 years with this security schema coupled with security best practices. To clarify although I said diversity has great benefits, diversity between gateway and Endpoint solutions are more important.

Hope that helps. Let me know if you have any questions!
0
 
jhyieslaCommented:
We use Mimecast as our email anti-spam AV protection.  It's a cloud-based service so it take care of emails before they hit you and it works pretty well. We have been on it for over two years and it has done a good job for us.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.