RE: AV on exchange 2010
Depends on your AV product. Exchange-aware antivirus generally is just HT and MBX though. DAMIEN SOLODOW Systems Engineer 317.447.6033 (office) 317.447.6014 (fax) HARRISON COLLEGE From: Jason Benway [mailto:benw...@jsjcorp.com] Sent: Wednesday, July 06, 2011 2:39 PM To: MS-Exchange Admin Issues Subject: AV on exchange 2010 We are running scanmail from Trend on our exchange 2003 cluster. With Exchange 2010 it looks like scanmail gets installed on all roles Edge MX/HT/CAS I'm not planning on having an edge server because we have another antispam product that processes incoming and outgoing emails. Are most people installing email AV on the MX,HT, and CAS even if they are on different servers? Thanks,jb --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
Re: AV on exchange 2010
Edge Server role is not just for AV/spam. It's for providing a secure link for OWA/Activesync, also. Jason Benway benw...@jsjcorp.com 7/6/2011 11:38 AM We are running scanmail from Trend on our exchange 2003 cluster. With Exchange 2010 it looks like scanmail gets installed on all roles Edge MX/HT/CAS I'm not planning on having an edge server because we have another antispam product that processes incoming and outgoing emails. Are most people installing email AV on the MX,HT, and CAS even if they are on different servers? Thanks,jb --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: AV on exchange 2010
No... that's a misunderstanding. Edge is only for message hygiene. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, July 06, 2011 4:42 PM To: MS-Exchange Admin Issues Subject: Re: AV on exchange 2010 Edge Server role is not just for AV/spam. It's for providing a secure link for OWA/Activesync, also. Jason Benway benw...@jsjcorp.com 7/6/2011 11:38 AM We are running scanmail from Trend on our exchange 2003 cluster. With Exchange 2010 it looks like scanmail gets installed on all roles Edge MX/HT/CAS I'm not planning on having an edge server because we have another antispam product that processes incoming and outgoing emails. Are most people installing email AV on the MX,HT, and CAS even if they are on different servers? Thanks,jb --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: AV on exchange 2010
I missed that feature of the edge server. I thought it was for external smtp features only. I thought the updated ISA server was to secure OWA/activesync ? -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, July 06, 2011 4:42 PM To: MS-Exchange Admin Issues Subject: Re: AV on exchange 2010 Edge Server role is not just for AV/spam. It's for providing a secure link for OWA/Activesync, also. Jason Benway benw...@jsjcorp.com 7/6/2011 11:38 AM We are running scanmail from Trend on our exchange 2003 cluster. With Exchange 2010 it looks like scanmail gets installed on all roles Edge MX/HT/CAS I'm not planning on having an edge server because we have another antispam product that processes incoming and outgoing emails. Are most people installing email AV on the MX,HT, and CAS even if they are on different servers? Thanks,jb --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
Re: AV on exchange 2010
http://technet.microsoft.com/en-us/library/bb124701.aspx On Wed, Jul 6, 2011 at 5:05 PM, Michael B. Smith mich...@smithcons.comwrote: No... that's a misunderstanding. Edge is only for message hygiene. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, July 06, 2011 4:42 PM To: MS-Exchange Admin Issues Subject: Re: AV on exchange 2010 Edge Server role is not just for AV/spam. It's for providing a secure link for OWA/Activesync, also. Jason Benway benw...@jsjcorp.com 7/6/2011 11:38 AM We are running scanmail from Trend on our exchange 2003 cluster. With Exchange 2010 it looks like scanmail gets installed on all roles Edge MX/HT/CAS I'm not planning on having an edge server because we have another antispam product that processes incoming and outgoing emails. Are most people installing email AV on the MX,HT, and CAS even if they are on different servers? Thanks,jb --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist -- smsadm --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: AV on exchange 2010
Ok ok - you can also do address rewriting. Which almost no one uses. :-P Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: sms adm [mailto:sms...@gmail.com] Sent: Wednesday, July 06, 2011 5:35 PM To: MS-Exchange Admin Issues Subject: Re: AV on exchange 2010 http://technet.microsoft.com/en-us/library/bb124701.aspx On Wed, Jul 6, 2011 at 5:05 PM, Michael B. Smith mich...@smithcons.commailto:mich...@smithcons.com wrote: No... that's a misunderstanding. Edge is only for message hygiene. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.govmailto:jhea...@dfg.ca.gov] Sent: Wednesday, July 06, 2011 4:42 PM To: MS-Exchange Admin Issues Subject: Re: AV on exchange 2010 Edge Server role is not just for AV/spam. It's for providing a secure link for OWA/Activesync, also. Jason Benway benw...@jsjcorp.commailto:benw...@jsjcorp.com 7/6/2011 11:38 AM We are running scanmail from Trend on our exchange 2003 cluster. With Exchange 2010 it looks like scanmail gets installed on all roles Edge MX/HT/CAS I'm not planning on having an edge server because we have another antispam product that processes incoming and outgoing emails. Are most people installing email AV on the MX,HT, and CAS even if they are on different servers? Thanks,jb --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist -- smsadm --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
Re: AV on exchange 2010
Wasn't correcting, just directing :) I just googled Microsft Edge Server and this was one of the links. Thought it would be useful Thx On Wed, Jul 6, 2011 at 5:37 PM, Michael B. Smith mich...@smithcons.comwrote: Ok ok – you can also do address rewriting. Which almost no one uses. :-P* *** ** ** Regards, ** ** Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com ** ** *From:* sms adm [mailto:sms...@gmail.com] *Sent:* Wednesday, July 06, 2011 5:35 PM *To:* MS-Exchange Admin Issues *Subject:* Re: AV on exchange 2010 ** ** http://technet.microsoft.com/en-us/library/bb124701.aspx On Wed, Jul 6, 2011 at 5:05 PM, Michael B. Smith mich...@smithcons.com wrote: No... that's a misunderstanding. Edge is only for message hygiene. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, July 06, 2011 4:42 PM To: MS-Exchange Admin Issues Subject: Re: AV on exchange 2010 Edge Server role is not just for AV/spam. It's for providing a secure link for OWA/Activesync, also. Jason Benway benw...@jsjcorp.com 7/6/2011 11:38 AM We are running scanmail from Trend on our exchange 2003 cluster. With Exchange 2010 it looks like scanmail gets installed on all roles Edge MX/HT/CAS I'm not planning on having an edge server because we have another antispam product that processes incoming and outgoing emails. Are most people installing email AV on the MX,HT, and CAS even if they are on different servers? Thanks,jb --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist -- smsadm --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist -- smsadm --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: AV on Exchange?
Our Exchange 2003 boxes seem to cope with Antigen's multiple scan engines OK. And load is a very bad reason for getting rid of AV on those boxes. It is a good reason for getting beefier boxes, though. Sometimes new trojans get past the first line of defense and into your information store. And then the patterns get updated. Desktop AV patterns might be updated rather less frequently than the scanner used on your Mailbox servers (e.g. McAfee still has only daily updates).. For example, just yesterday we has some stuff get past ClamAV and McAfee's uvscan on our gateway boxes, only to be clobbered by more up to date patterns in Microsoft and Sophos's scanners. It's also a lot easier to be certain that email viruses are contained if you're scanning your exchange stores on access. Only a handful of servers to verify as properly working vs thousands of desktop PCs. So my answer would be that the right strategy is defense in depth. At the gateway, on your mail servers, and on the desktop. Cheers, Phil -- Phil Randal Networks Engineer Herefordshire Council Hereford, UK From: Maglinger, Paul [mailto:[EMAIL PROTECTED] Sent: 11 August 2008 20:31 To: MS-Exchange Admin Issues Subject: RE: AV on Exchange? Both, but I don't like the performance hit I'm taking on the Exchange server. From: Matt Plahtinsky [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2008 1:46 PM To: MS-Exchange Admin Issues Subject: AV on Exchange? Do you put AV on your Exchange server or let your gateway scanners do all the work? I'm not talking about file based AV b/c everyone knows it would be just silly not to put that on your server. If you would have ask me a year ago whether or not I would recommend putting AV on exchange I would have said with out a question YES. Over the last year I have seen a ton of places only relying on their SMTP gateway scanner and the desktop scanners. So if your a shop tight on money it begs the question can you do without or its that just a BIG no no. What do you guys do? Matt ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
Re: AV on Exchange?
Gateways only. - Postini (hosted by ISP) - ProofPoint AntiVirus - McAfee SCM Gateway - Sean On Mon, Aug 11, 2008 at 10:45 AM, Matt Plahtinsky [EMAIL PROTECTED]wrote: Do you put AV on your Exchange server or let your gateway scanners do all the work? I'm not talking about file based AV b/c everyone knows it would be just silly not to put that on your server. If you would have ask me a year ago whether or not I would recommend putting AV on exchange I would have said with out a question YES. Over the last year I have seen a ton of places only relying on their SMTP gateway scanner and the desktop scanners. So if your a shop tight on money it begs the question can you do without or its that just a BIG no no. What do you guys do? Matt ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
RE: AV on Exchange?
Both From: Matt Plahtinsky [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2008 11:46 AM To: MS-Exchange Admin Issues Subject: AV on Exchange? ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
Re: AV on Exchange?
Ditto. On Mon, Aug 11, 2008 at 1:49 PM, Don Andrews [EMAIL PROTECTED]wrote: Both -- *From:* Matt Plahtinsky [mailto:[EMAIL PROTECTED] *Sent:* Monday, August 11, 2008 11:46 AM *To:* MS-Exchange Admin Issues *Subject:* AV on Exchange? -- Sherry Abercrombie Any sufficiently advanced technology is indistinguishable from magic. Arthur C. Clarke ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
RE: AV on Exchange?
Both, and from different vendors. Roger Wright Network Administrator Evatone, Inc. 727.572.7076 x388 _ From: Matt Plahtinsky [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2008 2:46 PM To: MS-Exchange Admin Issues Subject: AV on Exchange? Do you put AV on your Exchange server or let your gateway scanners do all the work? I'm not talking about file based AV b/c everyone knows it would be just silly not to put that on your server. If you would have ask me a year ago whether or not I would recommend putting AV on exchange I would have said with out a question YES. Over the last year I have seen a ton of places only relying on their SMTP gateway scanner and the desktop scanners. So if your a shop tight on money it begs the question can you do without or its that just a BIG no no. What do you guys do? Matt ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
RE: AV on Exchange?
I haven't put A/V on Exchange Stores for years. From: Matt Plahtinsky [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2008 11:46 AM To: MS-Exchange Admin Issues Subject: AV on Exchange? Do you put AV on your Exchange server or let your gateway scanners do all the work? I'm not talking about file based AV b/c everyone knows it would be just silly not to put that on your server. If you would have ask me a year ago whether or not I would recommend putting AV on exchange I would have said with out a question YES. Over the last year I have seen a ton of places only relying on their SMTP gateway scanner and the desktop scanners. So if your a shop tight on money it begs the question can you do without or its that just a BIG no no. What do you guys do? Matt ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
RE: AV on Exchange?
Both, but I don't like the performance hit I'm taking on the Exchange server. From: Matt Plahtinsky [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2008 1:46 PM To: MS-Exchange Admin Issues Subject: AV on Exchange? Do you put AV on your Exchange server or let your gateway scanners do all the work? I'm not talking about file based AV b/c everyone knows it would be just silly not to put that on your server. If you would have ask me a year ago whether or not I would recommend putting AV on exchange I would have said with out a question YES. Over the last year I have seen a ton of places only relying on their SMTP gateway scanner and the desktop scanners. So if your a shop tight on money it begs the question can you do without or its that just a BIG no no. What do you guys do? Matt ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
RE: AV on Exchange?
Ditto. From: Roger Wright [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2008 3:07 PM To: MS-Exchange Admin Issues Subject: RE: AV on Exchange? Both, and from different vendors. Roger Wright Network Administrator Evatone, Inc. 727.572.7076 x388 _ From: Matt Plahtinsky [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2008 2:46 PM To: MS-Exchange Admin Issues Subject: AV on Exchange? Do you put AV on your Exchange server or let your gateway scanners do all the work? I'm not talking about file based AV b/c everyone knows it would be just silly not to put that on your server. If you would have ask me a year ago whether or not I would recommend putting AV on exchange I would have said with out a question YES. Over the last year I have seen a ton of places only relying on their SMTP gateway scanner and the desktop scanners. So if your a shop tight on money it begs the question can you do without or its that just a BIG no no. What do you guys do? Matt ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
