Solved

virus protection exchange server

Posted on 2015-02-09
11
233 Views
Last Modified: 2015-05-19
We have exchange server on our premise.  We also have virus protection, Symantec endpoint protection on our computers.   Is there a way for our exchange server to scan all emails/attachments for viruses?  What type of product does this?  Or do I need to make sure I get a mail scanner on the outlook clients also?
0
Comment
Question by:al4629740
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
11 Comments
 
LVL 16

Expert Comment

by:Carol Chisholm
ID: 40600091
You don't say what version of Exchange.
(Microsoft used to have a good product called Forefont but they don't sell it any more.)

You can run a separate SMTP filter (like X-Wall).
You can also use a firewall with an SMTP filter addin like SonicWALL that does some of the work before the message gets to your Exchange server
You can buy a black box like Barracuda
You can outsource the preprocessing to Microsoft or McAfee (after all most of your e-mail comes from the Internet.
You should also have the mail filtering turned on on the client endpoints.
0
 

Author Comment

by:al4629740
ID: 40600093
Exchange 2013
0
 

Author Comment

by:al4629740
ID: 40600095
I have Symantec Endpoint for Small Business.  In the cloud version, does it provide mail filtering?
0
Are You Headed to Black Hat USA 2017?

Getting ready for Black Hat next week? Kick things off with the WatchGuard Badge Challenge and test your puzzle and cipher skills. Do you have what it takes to earn our limited edition Firebox Badge? Get started today - https://crimsonthorn.net

 
LVL 16

Expert Comment

by:Carol Chisholm
ID: 40600097
So no Forefront.

But all the other suggestions are valid, You should have endpoint protection in the Outlook / web clients and something between your server and the Internet.
0
 
LVL 16

Expert Comment

by:Carol Chisholm
ID: 40600099
http://www.symantec.com/email/

The second section is on on-premise protection

But if you have Symantec on the workstations it might be better to have a different provider elsewhere.
0
 

Author Comment

by:al4629740
ID: 40600100
Does Cisco iron port provide such a function?
0
 
LVL 16

Expert Comment

by:Carol Chisholm
ID: 40600102
Yes Iron Port does that too.
0
 
LVL 16

Accepted Solution

by:
Carol Chisholm earned 300 total points
ID: 40600103
0
 
LVL 25

Assisted Solution

by:Diverse IT
Diverse IT earned 200 total points
ID: 40600203
With security it is always best to have a multi-layered defense. I prefer a modular design. .. anti-malware at the gateway, application layer and the Endpoint. Sometimes it is easy to get sucked into the idea of one centralized solution because it's easy to manage but in security diversity in different layers has benefits. .. you just need to pick wisely.

Gateway, I prefer CGSS from SonicWALL, nothing beats it IMO.

On the application layer for Exchange I prefer Microsoft's EOP (Exchange Online Protection) is the newest version of FOPE aka Forefront but in an SaaS model. One of the benefits of EOP is its integration, among other things like,    
multi-layered, real-time anti-spam and multi-engine anti-malware protection, Transport Rules, Policy based filtering, IP reputation protection, DLP (Data Loss Protection), automated queuing, etc. Some other good options would be MX Logic, now McAfee, although I have not used it since McAfee's buy out so I don't know if they have ruined it like they typically do with all of their products. Another contender, ESET for Exchange, which is far different in design meaning it is an on-premise anti-malware application that scans the mailboxes in the Exchange store before delivery to the client (Outlook). It is a very solid security solution for Exchange however it lacks some of the benefits of online solutions as EOP.

Lastly on the Endpoint side, I prefer ESET. IMO it is the lowest footprint best security Endpoint on the market. Our clients have not been infected in over 12 years with this security schema coupled with security best practices. To clarify although I said diversity has great benefits, diversity between gateway and Endpoint solutions are more important.

Hope that helps. Let me know if you have any questions!
0
 
LVL 28

Expert Comment

by:jhyiesla
ID: 40601206
We use Mimecast as our email anti-spam AV protection.  It's a cloud-based service so it take care of emails before they hit you and it works pretty well. We have been on it for over two years and it has done a good job for us.
0

Featured Post

Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

WARNING:   If you follow the instructions here, you will wipe out your VTP and VLAN configurations.  Make sure you have backed up your switch!!! I recently had some issues with a few low-end Cisco routers (RV325) and I opened a case with Cisco TA…
This article is in regards to the Cisco QSFP-4SFP10G-CU1M cables, which are designed to uplink/downlink 40GB ports to 10GB SFP ports. I recently experienced this and found very little configuration documentation on how these are supposed to be confi…
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online. The email signature template has been downloaded from: www.mail-signatures…
There's a multitude of different network monitoring solutions out there, and you're probably wondering what makes NetCrunch so special. It's completely agentless, but does let you create an agent, if you desire. It offers powerful scalability …

623 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question