Support Forefront Protection 2010 for Exchange 2010 SP3

Hi
I have a simple question: Is there a full support of FPE 2010 (Version 11.0.727.0) for Exchange 2010 SP3 (and Rollup Updates)?
Thomas

Hi,
It seems that FPE 2010 for exchange 2010 SP3 is supported and you need to install the Rollup 4. For more detailed information, please refer to the link below:
Hotfix Rollup 4 for Microsoft Forefront Protection for Exchange
Updates for Microsoft Forefront and Related Technologies
Hope this helps!
Susie

Similar Messages

  • Using the pre-configured SCCM 2012 SP1 endpoint protection templates for Exchange 2010?

    I am looking to update the exclusions for SCCM Endpoint Protect clients performing server AV protection on Exchange 2010 nodes.
    Within SC there are a number of pre-defined templates, including ones for Exchange 2007 / 2010. However when I analyse these they do not appear to list all the exclusions that the Exchange product team define on TechNet -
    http://technet.microsoft.com/en-us/library/bb332342(v=exchg.141).aspx
    So do I;
    1 - Use the template as it has been verified by Microsoft for using with Exchange 2010 and it covers all I need to exclude?
    2 - Edit the template, adding in the additional exclusions as defined by the Exchange product team?
    Would whichever logic I use apply to other templates, such as SQL, SharePoint, etc as well?
    Thank you
    Alan

    As I cut and pasted the xml file I noticed the following comment that I had missed before..........
            <!-- Exchange -->
            <!-- Exchange Server 2010 exclusions are defined in TechNet bb332342 -->
            <!-- Although the exclusions defined in the article work, testing showed that they exceed what is necessary-->
    Still going with adding the full recommended list from TechNet though

  • Mails blocked in queue the moment forefront for exchange 2010 started

    Hi,
    We have newly installed Forfront protection 2010 for Exchange 2010 installed in our exchange 2010 Edge Server.
    Mails got struck in the Queue immediatly after the forefront installations.
    Mailflow works properly one we unhook the forefront from Exchange.
    need to enable the forefront. Got struck in these. How to proceed up further.
    Thanks,
    Pradeep

    Hi,
    Please compare your configuration with the following blog or video. These might help.
    http://araihan.wordpress.com/2010/03/15/forefront-protection-2010-how-to-install-and-configure-forefront-protection-2010-for-exchange-server-2010step-by-step/
    http://www.youtube.com/watch?v=b2BgTmeXwUs
    (Note: Microsoft provides third-party contact information to help you find technical support. This contact
    information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.)
    Best Regards,
    Joyce
    We
    are trying to better understand customer views on social support experience, so your participation in this
    interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

  • Half the engines are not updating wanted to update Forefront Protection 2010 for Exchange Server to newest sevice pack

    Running forefront protection 2010 for exchange. The version of Exchange we are running is Exchange Server 2007 sp3 rollup 13. I am seeing that half our engines are not updating for forefront. Currently we are running version 10.1.0746 sp1 for Forefront.
    I would like to get this up to the newest version which I think is SP2. Where can I download just the service pack 2 and will I have any problem with the version of exchange I am running. Thanks in advance for any help.
    John

    Hi,
    I guess you are talking about Microsoft Forefront Security for Exchange Server.
    You could have a look on the following blog.
    http://blogs.technet.com/b/fss/archive/2009/12/10/migrating-from-forefront-security-for-exchange-server-to-forefront-protection-2010-for-exchange-server.aspx
    Best Regards,
    Joyce
    We
    are trying to better understand customer views on social support experience, so your participation in this
    interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

  • If the Microsoft Forefront Protection 2010 for Exchange Server can use for exchange server 2013?

    if the Microsoft Forefront Protection 2010 for Exchange Server can use for exchange server 2013?

    thanks for your reply!
      what's protection software can use for exchange server 2013?
    Hi,
    Most (if not all) of the bigger vendors has a product that supports Exchange 2013, so look them up.
    Exchange 2013 has some Anti-Spam and Anti-Malware Protection functionality that you can read about here:
    http://technet.microsoft.com/en-us/library/jj150481(v=exchg.150).aspx
    Martina Miskovic

  • Forefront protection for exchange 2010 - updates?

    Installed Exchange EDGE server with Forefront Protection for Exchange 2010.
    Installed hotfix update rollup 4 for forefront (I think it's the latest because I haven't found any newer).
    We have basically left everything on default in forefront, and if we take a look on dashboard in gui we see this error message:
    not all the antimalware engines selected in the forefront adminstration console for scanning have been enabled for updates.
    where should we take a look whats not being updated. Please a little help.
    with best regards,
    bostjanc

    Hi.
    Meanwhile I have also found information that it has been retired
    https://social.technet.microsoft.com/Forums/forefront/en-US/400fa485-edc9-499f-8294-c196496437d8/not-all-of-the-antimalware-engines-enabled-for-updates-successfully-updated-at-the-last-attempt?forum=FSENext
    bostjanc

  • Discontinuing Forefront Protection 2010 for Exchange

    Hi
    Microsoft is discontinuing any further releases of Forefont Protection 2010 for Exchange Server:
    http://blogs.technet.com/b/server-cloud/archive/2012/09/12/important-changes-to-forefront-product-roadmaps.aspx
    We have a lot of customers with on-premises Exchange Servers, to which we sold Forefont Protection 2010 for Exchange Server.
    What is the alternative for that product, Forefront Online Protection?
    What is the Scenario, if a customer don't want his mx record to point to Microsoft?
    Regards
    Peter

    Hi,
    I'm sorry but yesterday I was working with a customer.
    This is going to be a long post :-)
    Exchange 2010 has no native antivirus/malware protection. This kind of protection is provided by Forefront Protection 2010 for Exchange.
    Those filters provide antispam protection therefore from this point of view I wouldn't consider them a replacement for Groupshield AV protection on Exchange 2010.
    This is the fast answer :-)
    Let's move to the longer one.
    There are going to be a lot of assumptions because I don't know your environment at all and this is something which should be carefully planned and tailored based on your business needs.
    Assumptions:
    You have an Exchange 2010 Organization
    There are no Edge servers
    You are following the common scenario with an AV for Exchange (Groupshield) running on Hub and Mailbox servers, Postini for Inbound/Outbound traffic protection from AV and SPAM (MX record pointing to Postini) and an AV for Filesystem running on the Exchange
    servers
    You are planning to move to Exchange 2013 in the future (let's say 6 months/1 year from now)
    You are open to discuss a Microsoft-oriented solution without 3rd party software
    We are not going to discuss licensing (we are lucky and someone else will decide for us :-))
    We are not going to discuss the differences between Postini/Groupshield/Forefront/Exchange agents because I don't know them well enough to tell you something which would make sense and I'm still discussing if it was better the Commodore 64 or the Amiga
    (obviously Commodore 64)
    We are looking for a solution which should cover as many scenarios as possible
    Short-term objective: Achieve antivirus/antispam protection on Exchange 2010 and get rid of Groupshield (and may be of Postini with it)
    Long-term objective: Migrate to 2013 and leverage the antimalware and antispam agents included in the product
    Act 1 - Short-term objective:
    Inbound/outbound traffic:
    The antispam agents can be installed on an Exchange 2010 Hub server but the place where they should be used is the Edge server.
    Solution 1: Replace Postini with 2 Exchange 2010 Edge servers (MX record pointing to the Edge servers). Antivirus protection will be provided by Forefront Protection 2010 for Exchange (FPE) . Antispam protection by Exchange 2010 and FPE (which expands the antispam
    capabilities of Exchange 2010)
    Solution 2: Replace Postini with Forefront Online Protection for Exchange (FOPE)
    Internal traffic:
    Solution: FPE will replace Groupshield on the Hub servers. No antispam agents installed. FPE will be installed as a Transport Agent
    Database Content (aka all that stuff that doesn't pass through transport):
    Not all Exchange data are passing through the Hub transport (i.e. Drafts, Calendar, Contacts, Public Folders, etc...)
    Solution 1: FPE will replace Groupshield on the Mailbox servers. FPE will leverage the Virus API (VSAPI) to access the content of the Store
    Solution 2: The AV installed on your clients has an Outlook plug-in which scans the content of the store client-side
    This should provide enough AV/antispam protection and you will have an homogeneous solution where all components are able to interact smoothly (Outlook Junk Mail, Antispam agents, safe senders, safe recipients, etc...) without much effort in terms of 3rd
    party plug-ins, different administration consoles, different places where you have to check if the message has been blocked.
    I know what is going to be the fate of Forefront but this is to meet our short-term/immediate objectives. From now on we will have until December 2015 to plan our migration to Exchange 2013.
    The screen fades to black. Voice-over announces that you migrated to Exchange 2013 :-)
    Act 2 - Long-term objective:
    Inbound/Outbound traffic:
    Solution 1: Leverage the AV and antispam agents on your published MBX/CAS servers
    Solution 2: Use FOPE
    Internal Traffic:
    Solution: Leverage the AV agent on your MBX/CAS servers
    Database content:
    In Exchange 2013 the VSAPI is dead. Any AV for Exchange will have to use transport agents on Exchange 2013. The only possible exceptions is using Web Services for the On-demand scan of a limited number of mailboxes.
    Solution: The AV installed on your clients has an Outlook plug-in which scans the content of the store client-side
    The screen fades to black. Credits.
    There are a few considerations related to these design changes which demonstrates that IMHO they are a good choice but they would be too long to discuss in this post and they would probably be OT. I'm thinking to write a blog when I'll have some time.
    IMPORTANT: These are just my 2 pence. You should discuss this with someone which knows your infrastructure. The above solutions are at best incomplete because there a lot more factors which come into play when choosing a design like this.
    My personal advice is to involve your TAM (if you have one) and work with my colleagues to find the solution best suited for your company.
    Bye
    Gabriele
    P.S. Pure self-advertising: If you are in Switzerland you are not far from me :-D
    -- Gabriele Tansini [MSFT] This posting is provided "AS IS" with no warranties, and confers no rights"

  • Microsoft forefront protection 2010 for exchange server is unable to perform the requested function

    I get the following error any time I try and change any setting:
    Microsoft Forefront Protection 2010 for Exchange Server is unable to perform the requested function. This may be becuase Microsoft ForeFront services are unavailable. Ensure that all Microsoft ForeFront services are running and that Windows Powershell is
    functional.
    I have installed the latest rollup for SEP. Rollup 5 I think. I have rebooted the server. I have checked the permissions and they are correct.
    Any thoughts?

    I posted a PowerShell-based workaround in the other thread:
    https://social.technet.microsoft.com/Forums/forefront/en-US/1ccb9a5e-4b08-4f6b-a4bd-32cf5f2cd2b0/cannot-save-any-changes-microsoft-forefront-2010-for-exchange-is-unable-to-perform-the-requested?forum=FSENext
    Mike Crowley | MVP
    My Blog --
    Baseline Technologies

  • Spam notification on Microsoft Forefront Protection 2010 for Exchange Server

    Hello
    I'm using Microsoft Forefront Protection 2010 for Exchange Server on edge Exchange2010 SP2.
    I did know I can't configure any notification for detected spam, because the result would be that the users inbox would be spammed with Forefront notifications instead of the real spam.
    http://social.technet.microsoft.com/Forums/forefront/en-US/6c293ded-8e61-44a1-ac25-bb685ecd1c7c/notification-spam-forefront-for-exchange-2010
    But I can't find the Forefront notifications in tracking logs.
    Is it usual ?
    if not, why the Forefront notifications was't send?
    Thanks for any ideas.
    Hiroko

    Hi,
    I checked smtp log of our Exchange server.
    But I think I can't search the logs.
    Could you please tell me the word of error on smtp
    log.
    Thanks for any ideas.
    Hiroko

  • How to test if Spam protection with Forefront for Exchange 2010 works

    Hi there.
    Installed forefront for exchange 2010 on Exchange Edge server.
    We have tested virus protection with creating EICAR, but the question is, is there a way to check if SPAM Works fine, and how to?
    with best regards
    bostjanc

    Hi bostjanc,
    Since this is an issue on the Forefront side, I suggest ask Forefront Forum for help so that you can get more professional suggestions. For your convenience:
    https://social.technet.microsoft.com/Forums/forefront/en-US/home?forum=FOPE
    However, based on my knowledge, use the EICAR antivirus test file is the only built-in method to check whether the Anti-Spam configured correctly.
    You can try to send some test spams to your Exchange server for testing, even if this is a stupid method : )
    Thanks
    Mavis Huang
    TechNet Community Support

  • Microsoft Forefront Protection 2010 for Exchange Server - where to look in GUI

    Hi there!
    We have configured Forefront for Exchange on Edge server.
    We have created a test subject filter and sent a test mail.
    On the Administrator Console under dashboards we see that message was blocked due to spam, but we cannot find in GUI some briefer details regarding this blocked message.
    How can we see in this administration console GUI which exactly message has been blocked?
    Having just dashboards and not being able to open and check every blocked message is a problem.
    Please advice
    With best regards
    bostjanc

    I posted a PowerShell-based workaround in the other thread:
    https://social.technet.microsoft.com/Forums/forefront/en-US/1ccb9a5e-4b08-4f6b-a4bd-32cf5f2cd2b0/cannot-save-any-changes-microsoft-forefront-2010-for-exchange-is-unable-to-perform-the-requested?forum=FSENext
    Mike Crowley | MVP
    My Blog --
    Baseline Technologies

  • Forefront for exchange 2010 - how long?

    Hi there.
    Read this article: http://blogs.technet.com/b/server-cloud/archive/2012/09/12/important-changes-to-forefront-product-roadmaps.aspx
    I would have additional question.
    Our company is MS Gold Partner and we need to renew our yearly license every year around AUGUST.
    We are thinking about changing our SPAM filter external gateway with exchange edge, but as we can see from that article, you Will be unable to renew it license after December 2015.
    I know that Microsoft offers online Forefront protection but that is not option in our case because of data sensitivity.We need an answer how long we Will be able to get updates regarding forefront for exchange 2010 and be licensed ok?
    I guess after 2015 december Forefront Exchange 2010 Will no longer recieve spam updates thru Windows update, right?
    And also engines Will not be updated after that date?
    Is this the correct view and understanding?
    with best regards
    bostjanc

    Hi Bostjanc,
    >>how long we Will be able to get updates regarding forefront for exchange 2010 and be licensed ok?
    I think you must have seen the information below in that blog.
    For current customers, Microsoft will continue to support the subscription through Dec.31, 2015. If customer subcriptions expire before Dec.31, 2015, and annot be renewed because the product is no longer offered, these products will continue to be supported
    through that date in order to provided with customers sufficient time to move to alternative solutions.
    You could also check the following blog.
    License extension for End-of-Life Antigen/Forefront products
    Note: Microsoft provides third-party contact information
    to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.
    If the information above still cannot resolve your questions, please contact Microsoft to get definitive answers.
    Best Regards,
    Joyce
    We
    are trying to better understand customer views on social support experience, so your participation in this
    interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

  • Uninstall Forefront for Exchange 2010

    I have acquired another spam filter appliance that will used instead of Forefront for Exchange 2010.
    How do I uninstall Forefront for Exchange 2010 without any issues while still using Exchange 2010.
    Basically the email will go through the email appliance filter then to Exchange. I want to deactivate or uninstall Forefront for Exchange with impacting my email services. Is it as simple as just uninstalling it?

    Hi,
    About uninstalling Forefront for Exchange 2010, you could check the following article.
    If spam filtering was enabled, the configurations in the corresponding antispam settings in Microsoft Exchange that were leveraged by FPE will be retained by their Exchange antispam counterparts after FPE is uninstalled. These settings include: Connection
    Filtering, Sender ID Filtering, Sender Filtering, and Reciepient Filtering. To change these configuration settings you will need to modify them through the Exchange management console.
    Uninstalling Forefront Protection 2010 for Exchange Server
    Best Regards,
    Joyce
    We
    are trying to better understand customer views on social support experience, so your participation in this
    interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

  • Forefront for Exchange 2010 - no mails in quarantine or incidents list

    I have a client with Forefront 2010 installed on their exchange 2010 server. I see 45 messages that have been blocked as spam in the dashboard - 43 connection, 1 smtp and 1 content.
    The client wants to know which messages are being blocked and which aren't, however when I open up the incidents and quarantine pages there is nothing there.
    They have the antispam configuration set to stamp headers and continue for SCL5 to 9 and it seems to me that things should be in the quarantine.
    I have all the logging options turned on and I've followed the other technet threads about this issue but none of those solutions seem to work on this machine.
    If anyone has any ideas I would really appreciate it!

    Hi,
    Firstly, please make sure if you have enabled the anti-spam filtering engine of FPE. If yes, please refer to the blog below:
    Exchange Content Filter settings are ignored
    Besides, please make sure you have installed all the released hotfix rollups for FPE. Please also make sure that you have enabled "Enable content filtering incident logging" in Advanced Options of Global settings.
    You can deliver quarantined items to specified recipients and set emial notification.
    In addition, only an Administrator can access/manage the quarantine of FPE.
    Please also ensure that you haven't configured FPE to automatically purge quarantined in a short time.
    FPE content filter uses the Cloudmark™ Antispam engine to analyze each e-mail message and stamp it with a SCL.
    When the setting 5 – 9 is selected, all messages with a rating of 5 or higher are treated as suspected spam. 
    Messages with an SCL rating of -1 and 0 will be treated as non-spam. You have the option to Quarantine or Stamp header and continue processing mail with an SCL rating in the 5 – 9 range.
    If the issue persists, you can adjust the SCL setting to a lower value to see if the issue persists.
    The links below would be helpful to you:
    Configuring content filtering
    Configuring e-mail notifications
    How to Manage Quarantined Files in Forefront Protection 2010 for Exchange Server
    (FPE)
    Best regards,
    Susie

  • Cannot save any changes - Microsoft Forefront 2010 for exchange is unable to perform the requested function

    HI, I have Forefront 2010 for Exchange installed for an Exchange 2007 SP2 running on Windows 2003 x64 SP2. Exchange has all roles installed on the same server. 
    When I try to save any change on Forefront I got the following message:
    Microsoft Forefront 2010 for Exchange is unable to perform the requested function. This may be because Forefront services are unavailable. Ensure that all Microsoft Forefront services are running and that WindowsPower Shell is functional
    Well, our FF services are running and PowerShell is functional. I checked some forums and found some problems when there is entries in the IP Allow / Block lists in Exchange UI. I removed those entries but problem remains.
    Any ideas would be appreciated.
    Xavier Villafuerte

    In my case, I was able to work around this issue by using  PowerShell directly.  For example, to run an on-demand scan for all mailboxes, this worked:
    #open EMS
    $aliases = (get-mailbox -result unlimited).alias
    Add-PsSnapin FSSPSSnapin
    set-FseOnDemandScan -MailboxList $aliases
    Start-FseOnDemandScan -EnableVirusScan $true
    Windows 2008 R2 SP1
    Exchange 2010 SP3, RU9
    PowerShell 4.0 present on the machine (though EMS runs PS 2.0)
    Forefront PowerShell cmdlets:
    https://technet.microsoft.com/en-us/library/cc482986.aspx
    Mike Crowley | MVP
    My Blog --
    Baseline Technologies

Maybe you are looking for