We are using Exchange 2007 CCR, with two separate Hub Transports and two separate Edge Transports on our DMZ. We use Forefront on all servers for Anti-virus (currently running 4 engines) and we use Forefront on the Edge Transports to filter for SPAM using Microsoft's engine and various Blacklists.
The anti-virus protection has been excellent. The only email related viruses we've gotten is when someone falls for a Phishing scheme and clicks on a link. Well, I shouldn't say "we've gotten"...our desktop software has prevented the installation of the virus at that point...so far. But that brings me to the weakness of Forefront. Seems like a lot of SPAM gets through: we get calls to the help desk several times a week...especially when users get an email from themselves to themselves. (No matter how many company wide emails we send telling users to just delete email they don't recognize they still call the Help Desk.) We could set the parameters a little higher, like 6 instead of 7, but we already get 3 or 4 false positives a month. We quarantine everything to a mailbox for 7 days, and get an average of about 700 messages a day sent there. This does not include SPAM bounced because of fake addresses (ADAM on the Edge Transport checks for legit addresses) or emails bounced due to Black Listing. If I had my preference I think I might look in to a dedicated device in the stream before the Edge server for handling SPAM. ________________________________ From: Steve Hart [mailto:sh...@wrightbg.com] Sent: Wednesday, April 08, 2009 8:35 PM To: MS-Exchange Admin Issues Subject: RE: Forefront? We've used Antigen from the Sybari days and use Forefront today. AFAIK, there's no spam prevention in Forefront and the anti-spam agents in Antigen were pretty weak. For AV and file filtering though, we love it. We haven't had an email born virus in the seven years since we first rolled it out. We also filter 20 or so file extensions that we really don't need. ________________________________ From: Matt Moore [mailto:mattmoore...@hotmail.com] Sent: Wednesday, April 08, 2009 5:24 PM To: MS-Exchange Admin Issues Subject: Re: Forefront? We've been using it for about 2 months now. The jury is out. Mom bugs the crap out of me on a daily basis because pc's go to sleep and it takes too long for them to wake up and mom sends out a communication error and an update not done for that machine. If you're thinking green and you turn the PC's off at night it's a flood of warnings. It's huge pain for me because mom is tied into our helpdesk software and it generats a helpdesk ticket for each comm error mom has. Other than that it seems to work pretty good. Very good on the malware side. AV well I just don't see many viruses anymore with good AV and multiple scanners on incomming email so I'm guessing it working....... Matt ----- Original Message ----- From: Bill Lambert<mailto:blamb...@concuity.com> To: MS-Exchange Admin Issues<mailto:exchangelist@lyris.sunbelt-software.com> Sent: Wednesday, April 08, 2009 4:11 PM Subject: Forefront? Hello all... I'm tired of using multiple products to protect desktops and email from spam, viruses and spyware. I've taken a look at the MS Forefront product line and it looks like a pretty good solution. I have Exchange 2003 and XP clients. Can anyone comment on its effectiveness, installation, management and use both at the admin and user levels? Any other recommendations are welcome as well. Thanks. Bill Lambert Windows System Administrator Concuity A healthcare division of Trintech, Inc. Phone 847-941-9206 Fax 847-465-9147 [cid:image001.gif@01C9BDD4.4D5B3830] NASDAQ: TTPA The information contained in this e-mail message, including any attached files, is intended only for the personal and confidential use of the recipient(s) named above. If you are not the intended recipient (or authorized to receive information for the recipient) you are hereby notified that you have received this communication in error and that any review, dissemination, distribution, or copying of this message is strictly prohibited. If you have received this communication in error, please contact the sender by reply email and delete all copies of this message. Thank you. ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja ~
<<inline: image001.gif>>