Exchange Online Protection Standalone for Exchange 2013 On-premise

hello:
I'm about to deploy Exchange server 2013 on-premise for my company and we are going to subscribe EOP standalone. After reading the description from technet
http://technet.microsoft.com/en-us/library/jj723119(v=exchg.150).aspx , I'm confuse about how am I going to manage user.
1. Do I need to have ADFS,DirSync server ready on my local datacenter to synchronize user with EOP?
2. I just need basic spam filtering feature, will EOP work with Exchange 2013 on-premise without having ADFS & DirSync?
Thanks.

If your deployment is not hybrid then you won;t need Dirsync.
http://technet.microsoft.com/en-us/library/jj723153(v=exchg.150).aspx

Similar Messages

Exchange Online Protection (standalone) permissions are not working as expected

Exchange Online Protection (standalone) permissions are not working as expected.
we provided access to Hygiene Management to some members and they not able to access EOP site.
This is standalone EOP.
ksrugi

Hi,
what roles did you have assigned to them and what error message do you get?
Greetings
Christian
Christian Groebner MVP Forefront

Can Exchange Online Protection work with Exchange 2010 on-premise

I want to keep my current Exchange 2010 server but switch to Exchange Online Protection for anti-spam.
Is that possible?
Without doing any AD/Azure sync?

Yes to both. With directory synchronization you can have the added benefit of blocking mail to nonexistent recipients.
Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."

Bulk User creation Exchange Online Protection standalone

Hi,
We have on premise Exchange 2013 servers and we're planned to go for EOP only for SPAM filtering. I have couple of questions with EOP:
When we create bulk user accounts from a CSV file do we need to Allow users to sign in to EOP?
what will be the EOP address for On-Premise send connector(send emails from the organization)? and how to get it?
is there any proper step by step guide to setup EOP standalone?
Thanks..
Roshan

You don't need to allow sign in today, but in the
future there will be a personal
quarantine for users.
set the value to the MX record given to you during EOP setup, such as <your organization>-com.mail.protection.outlook.com.
(http://community.office365.com/en-us/wikis/exchange/4238.aspx)
http://technet.microsoft.com/en-us/library/jj723153(v=exchg.150).aspx
Mike Crowley | MVP
My Blog --
Planet Technologies

Configure send connector for exchange online protection

Hello Forum members,
I am trying to configure send and receive connectors for Exchange 2010 to route
on-premises mailboxes to Exchange OnLine Protection. The "help" info MS provides
is for Ex 2013 - and the EAC GUI and config does not lend a close fit to using the 2010
Exch Management Console. How can I configure connectors to properly connect to the Exchange Online Protection?
I have seen where the ip addresses are posted, etc. I am unclear how to configure the properties on the SBS 2011/EX 2010 server.
Any tips will help,
Thanks,
Eric H.
Network and Server Installs

Hello Wesleyhe,
You cannot use AD anything with EOP - if you mean exchange on-line protection.
you have to set a smart host on the SBS server to connect to EOP, you may need to add the EOP server ips to your network config
on the SBS server. the smart host line (for the send connector on SBS server) is something like: yourdomainname-com.mail.protection.outlook.com.
Then you need to configure the outside ip for your SBS server access in the EOP admin area.
Hope this helps.
eholz
Network and Server Installs

If the Microsoft Forefront Protection 2010 for Exchange Server can use for exchange server 2013?

if the Microsoft Forefront Protection 2010 for Exchange Server can use for exchange server 2013?

thanks for your reply!
what's protection software can use for exchange server 2013?
Hi,
Most (if not all) of the bigger vendors has a product that supports Exchange 2013, so look them up.
Exchange 2013 has some Anti-Spam and Anti-Malware Protection functionality that you can read about here:
http://technet.microsoft.com/en-us/library/jj150481(v=exchg.150).aspx
Martina Miskovic

Renewal of Forefront Protection 2010 for Exchange Server until EOL

Hello,
We have a Open Value subscription for Forefront Protection for Exchange Server 2010 (FPE) running with an Exchange 2007 server and an Edge Server. We attempted to renew the subscription to FPE and were automatically upgraded to FOPE and now EOP.
Since FPE is not End of Life yet, might it be possible to renew FPE on premises until such time as the product goes End of Life?
thank you,
Dan

Hello,
FPE on premises was available only as a subscription license in OV, OVS. for subscription products thre is not possibility to renew th elicensing if is removed from product list.
you can purchase FOPE(in OVS) or EOP as online subscription. you can use also EOP for on premises Exchnage Server.
on Microsoft document we have th efollowing info:
The following are the primary ways you can use EOP for messaging protection:
In a standalone scenario   EOP provides cloud-based email protection for your "on-premises Microsoft Exchange Server 2013 environment, legacy Exchange Server versions,
or for any other on-premises SMTP email solution."
As a part of Microsoft Exchange Online   By default, EOP protects Microsoft Exchange Online cloud-hosted mailboxes.
In a hybrid deployment   EOP can be configured to protect your messaging environment and control mail routing when you have a mix of on-premises and cloud mailboxes.
note: EOP replaces Microsoft Forefront Online Protection for Exchange (FOPE). All FOPE customers will be transitioned to EOP, as described in the
Forefront Online Protection for Exchange (FOPE) transition center. EOP delivers the protection and control provided by FOPE, and also includes additional features.
What's new in Exchange Online Protection describes some of these features.
thanks
diramoh

Discontinuing Forefront Protection 2010 for Exchange

Hi
Microsoft is discontinuing any further releases of Forefont Protection 2010 for Exchange Server:
http://blogs.technet.com/b/server-cloud/archive/2012/09/12/important-changes-to-forefront-product-roadmaps.aspx
We have a lot of customers with on-premises Exchange Servers, to which we sold Forefont Protection 2010 for Exchange Server.
What is the alternative for that product, Forefront Online Protection?
What is the Scenario, if a customer don't want his mx record to point to Microsoft?
Regards
Peter

Hi,
I'm sorry but yesterday I was working with a customer.
This is going to be a long post :-)
Exchange 2010 has no native antivirus/malware protection. This kind of protection is provided by Forefront Protection 2010 for Exchange.
Those filters provide antispam protection therefore from this point of view I wouldn't consider them a replacement for Groupshield AV protection on Exchange 2010.
This is the fast answer :-)
Let's move to the longer one.
There are going to be a lot of assumptions because I don't know your environment at all and this is something which should be carefully planned and tailored based on your business needs.
Assumptions:
You have an Exchange 2010 Organization
There are no Edge servers
You are following the common scenario with an AV for Exchange (Groupshield) running on Hub and Mailbox servers, Postini for Inbound/Outbound traffic protection from AV and SPAM (MX record pointing to Postini) and an AV for Filesystem running on the Exchange
servers
You are planning to move to Exchange 2013 in the future (let's say 6 months/1 year from now)
You are open to discuss a Microsoft-oriented solution without 3rd party software
We are not going to discuss licensing (we are lucky and someone else will decide for us :-))
We are not going to discuss the differences between Postini/Groupshield/Forefront/Exchange agents because I don't know them well enough to tell you something which would make sense and I'm still discussing if it was better the Commodore 64 or the Amiga
(obviously Commodore 64)
We are looking for a solution which should cover as many scenarios as possible
Short-term objective: Achieve antivirus/antispam protection on Exchange 2010 and get rid of Groupshield (and may be of Postini with it)
Long-term objective: Migrate to 2013 and leverage the antimalware and antispam agents included in the product
Act 1 - Short-term objective:
Inbound/outbound traffic:
The antispam agents can be installed on an Exchange 2010 Hub server but the place where they should be used is the Edge server.
Solution 1: Replace Postini with 2 Exchange 2010 Edge servers (MX record pointing to the Edge servers). Antivirus protection will be provided by Forefront Protection 2010 for Exchange (FPE) . Antispam protection by Exchange 2010 and FPE (which expands the antispam
capabilities of Exchange 2010)
Solution 2: Replace Postini with Forefront Online Protection for Exchange (FOPE)
Internal traffic:
Solution: FPE will replace Groupshield on the Hub servers. No antispam agents installed. FPE will be installed as a Transport Agent
Database Content (aka all that stuff that doesn't pass through transport):
Not all Exchange data are passing through the Hub transport (i.e. Drafts, Calendar, Contacts, Public Folders, etc...)
Solution 1: FPE will replace Groupshield on the Mailbox servers. FPE will leverage the Virus API (VSAPI) to access the content of the Store
Solution 2: The AV installed on your clients has an Outlook plug-in which scans the content of the store client-side
This should provide enough AV/antispam protection and you will have an homogeneous solution where all components are able to interact smoothly (Outlook Junk Mail, Antispam agents, safe senders, safe recipients, etc...) without much effort in terms of 3rd
party plug-ins, different administration consoles, different places where you have to check if the message has been blocked.
I know what is going to be the fate of Forefront but this is to meet our short-term/immediate objectives. From now on we will have until December 2015 to plan our migration to Exchange 2013.
The screen fades to black. Voice-over announces that you migrated to Exchange 2013 :-)
Act 2 - Long-term objective:
Inbound/Outbound traffic:
Solution 1: Leverage the AV and antispam agents on your published MBX/CAS servers
Solution 2: Use FOPE
Internal Traffic:
Solution: Leverage the AV agent on your MBX/CAS servers
Database content:
In Exchange 2013 the VSAPI is dead. Any AV for Exchange will have to use transport agents on Exchange 2013. The only possible exceptions is using Web Services for the On-demand scan of a limited number of mailboxes.
Solution: The AV installed on your clients has an Outlook plug-in which scans the content of the store client-side
The screen fades to black. Credits.
There are a few considerations related to these design changes which demonstrates that IMHO they are a good choice but they would be too long to discuss in this post and they would probably be OT. I'm thinking to write a blog when I'll have some time.
IMPORTANT: These are just my 2 pence. You should discuss this with someone which knows your infrastructure. The above solutions are at best incomplete because there a lot more factors which come into play when choosing a design like this.
My personal advice is to involve your TAM (if you have one) and work with my colleagues to find the solution best suited for your company.
Bye
Gabriele
P.S. Pure self-advertising: If you are in Switzerland you are not far from me :-D
-- Gabriele Tansini [MSFT] This posting is provided "AS IS" with no warranties, and confers no rights"

Exchange Online Protection (EOP) instead of EDGE server ?

Hi, we have Exchange 2010 with HUB server in LAN and EDGE in DMZ. There is an EDGE subscription on HUB and we use EDGE Sync.
We have Forefront Protection 2010 for Exchange (FPE) installed on EDGE. Our license for FPE is coming to end and because FPE is discontinued we want to replace FPE by EOP as SPAM filter and AV for our on-premises Exchange 2010.
What is the best practise in my scenario?
Should I omit EDGE 2010 server and create send and receive connectors on HUB server for direct connection to EOP? Is EOP replaces the EDGE 2010?
or
Uninstall FPE on EDGE 2010 server and create on it send and receive connectors for direct connection to EOP?

Hi,
We can run the Windows Azure AD Sync Tool Configuration Wizard to set up directory synchronization. It would
synchronize user accounts in an on-premises Active Directory environment to Windows Azure Active Directory (AD), where a copy of those accounts are stored in the cloud.
Then we need to set up an Outbound connector and an Inbound connector to enable mail flow between Microsoft Exchange Online Protection (EOP) and your on-premises mail servers. Here are some references about
directory synchronization and mail flow processing through Exchange Online Protection below:
Best Practices for Configuring EOP
http://technet.microsoft.com/en-us/library/jj723164(v=exchg.150).aspx
Set Up Mail Flow Through Exchange Online Protection
http://technet.microsoft.com/en-us/library/jj723133(v=exchg.150).aspx
EOP Features
http://technet.microsoft.com/en-us/library/dn305011(v=exchg.150).aspx
Thanks,
Winnie Liang
TechNet Community Support

Forefront to Exchange Online Protection - Notification Issue

So I guess we converted awhile back to EOP, but I wasn't with the organization. The problem I have is, when I remove the sync tool off our server, I keep getting notifications that things arnt in sync etc. Clearly they are because we are using
the Azure tool now.
I found our group email below in the old system (forefront admin center) but I can't edit it or remove it. Any ideas on how to stop these emails!? Thank you!'

So I guess since I started this thread I will respond to it to help everyone else out. I hadn't gotten a response in a week so decided to take matters into my own hands.
We were migrated over to Exchange Online Protection like I'm assuming you others have. What I ended up doing was logging into the EOP portal and going to service requests or support or whatever on the left hand side. I put in a ticket to Microsoft.
They ended up escalating it to the FOPE team who then reached out to me via email and asked a few other questions to confirm what I was doing.
They ended up taking care of it for me and we havn't gotten any notifications since.
Hope this helps!! Let me know if you have further questions.

Exchange Online Protection and Public Folders

Hi,
We have just been migrated to Exchange Online Protection from FOPE and although users can now manage their own quarantines, they cannot do this for Mail Enabled Public Folders. Is this possible?
Many Thanks

Hi Paul,
I replied to a post from you in another thread. It's easy to miss though, so here's what I said:
"You should tell mail2web that there is an option in Exchange to hide public folders from IMAP clients. I'm an IT manager at a large software company with 50% of our users on Macs. We turned on the option to hide public folders from IMAP clients a while ago, long before the iPhone. It's worked very well and continues to work for iPhone people (like me!).
There was no reason for us to make public folders viewable via IMAP, so hopefully the same will be true for mail2web."
I'm actually really glad that Apple made this change. I want to see most of the folders at the inbox level in Exchange and with the Exchange switch turned on to hide public folders, there's no downside.
Regards,
fh

Cannot load Exchange Online Protection commands in Remote PowerShell

My colleagues and I cannot load the Exchange Online Protection commands in Remote PowerShell.
It just loads the Exchange Online cmdlets.
Where are we going wrong?
PS C:\Users\jmorrison> $UserCredential = Get-Credential
cmdlet Get-Credential at command pipeline position 1
Supply values for the following parameters:
PS C:\Users\jmorrison> $Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://ps.protection.outlook.com/powershell-liveid/
-Credential $UserCredential -Authentication Basic -AllowRedirection
WARNING: Your connection has been redirected to the following URI: "https://outlook.office
365.com/powershell-liveid?PSVersion=4.0&realm={I've removed my domain name for security reasons}.co.uk "
PS C:\Users\jmorrison> Import-PSSession $Session
ModuleType Version
Name
ExportedCommands
Script
1.0        tmp_4fnmyflw.she
{Add-AvailabilityAddressSpac...
PS C:\Users\jmorrison> Get-TransportRule
Get-TransportRule : The term 'Get-TransportRule' is not recognized as the name of a
cmdlet, function, script file, or operable program. Check the spelling of the name, or
if a path was included, verify that the path is correct and try again.
At line:1 char:1
+ Get-TransportRule
+ ~~~~~~~~~~~~~~~~~
+ CategoryInfo
: ObjectNotFound: (Get-TransportRule:String) [], CommandNotF
oundException
+ FullyQualifiedErrorId : CommandNotFoundException

I've moved MX records to EOP and seems to be fine all domain expect few.<o:p></o:p>
I can see that problematic domain has "-" between domain names.<o:p></o:p>
mydomain.com<o:p></o:p>
mydomain-com.mail.protection.outlook.com --> has no problem, however<o:p></o:p>
mydomain.usa.com<o:p></o:p>
mydomain-usa-com.mail.protection.outlook.com having issue <o:p></o:p>
when i checked in mx lookup it says MX record has NO A Record.<o:p></o:p>
any suggestions<o:p></o:p>

Half the engines are not updating wanted to update Forefront Protection 2010 for Exchange Server to newest sevice pack

Running forefront protection 2010 for exchange. The version of Exchange we are running is Exchange Server 2007 sp3 rollup 13. I am seeing that half our engines are not updating for forefront. Currently we are running version 10.1.0746 sp1 for Forefront.
I would like to get this up to the newest version which I think is SP2. Where can I download just the service pack 2 and will I have any problem with the version of exchange I am running. Thanks in advance for any help.
John

Hi,
I guess you are talking about Microsoft Forefront Security for Exchange Server.
You could have a look on the following blog.
http://blogs.technet.com/b/fss/archive/2009/12/10/migrating-from-forefront-security-for-exchange-server-to-forefront-protection-2010-for-exchange-server.aspx
Best Regards,
Joyce
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Microsoft forefront protection 2010 for exchange server is unable to perform the requested function

I get the following error any time I try and change any setting:
Microsoft Forefront Protection 2010 for Exchange Server is unable to perform the requested function. This may be becuase Microsoft ForeFront services are unavailable. Ensure that all Microsoft ForeFront services are running and that Windows Powershell is
functional.
I have installed the latest rollup for SEP. Rollup 5 I think. I have rebooted the server. I have checked the permissions and they are correct.
Any thoughts?

I posted a PowerShell-based workaround in the other thread:
https://social.technet.microsoft.com/Forums/forefront/en-US/1ccb9a5e-4b08-4f6b-a4bd-32cf5f2cd2b0/cannot-save-any-changes-microsoft-forefront-2010-for-exchange-is-unable-to-perform-the-requested?forum=FSENext
Mike Crowley | MVP
My Blog --
Baseline Technologies

Spam notification on Microsoft Forefront Protection 2010 for Exchange Server

Hello
I'm using Microsoft Forefront Protection 2010 for Exchange Server on edge Exchange2010 SP2.
I did know I can't configure any notification for detected spam, because the result would be that the users inbox would be spammed with Forefront notifications instead of the real spam.
http://social.technet.microsoft.com/Forums/forefront/en-US/6c293ded-8e61-44a1-ac25-bb685ecd1c7c/notification-spam-forefront-for-exchange-2010
But I can't find the Forefront notifications in tracking logs.
Is it usual ?
if not, why the Forefront notifications was't send?
Thanks for any ideas.
Hiroko

Hi,
I checked smtp log of our Exchange server.
But I think I can't search the logs.
Could you please tell me the word of error on smtp
log.
Thanks for any ideas.
Hiroko

Exchange Online Protection Standalone for Exchange 2013 On-premise

Similar Messages

Maybe you are looking for