Sign in
Microsoft.com
 
Forefront Server Security TechCenter
 
 
 
Forefront Server Security TechCenter > Forefront Server Security Forums > Antigen > Action Required by Dec. 1, 2009
Ask a questionAsk a question
Search Forums:
 

AnswerAction Required by Dec. 1, 2009

  • Wednesday, October 28, 2009 4:40 PMTonaco Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Sign In to Vote
    0
    Sign In to Vote
    <!-- /* Style Definitions */ p.MsoNormal, li.MsoNormal, div.MsoNormal {mso-style-parent:""; margin:0cm; margin-bottom:.0001pt; mso-pagination:widow-orphan; font-size:12.0pt; font-family:"Times New Roman"; mso-fareast-font-family:"Times New Roman";} a:link, span.MsoHyperlink {color:blue; text-decoration:underline; text-underline:single;} a:visited, span.MsoHyperlinkFollowed {color:purple; text-decoration:underline; text-underline:single;} @page Section1 {size:595.3pt 841.9pt; margin:70.85pt 3.0cm 70.85pt 3.0cm; mso-header-margin:35.4pt; mso-footer-margin:35.4pt; mso-paper-source:0;} div.Section1 {page:Section1;} -->

    Hi,
    At 1/12/2009 there is a lot of changes happening, AhnLab, CA, or Sophos engines must disable, SpamCure will stop receiving new definition. I a little bite confused, Andy Day said in this post (http://social.technet.microsoft.com/Forums/en-US/Antigen/thread/ec2ddb78-df0a-49c8-be40-738d0c09ec69/#2e4b2618-5602-4781-801b-cb12729c490e ) that “Cloudmark signature updates occur directly from the Cloudmark website only ” and “FSSMC, which now supports the redistribution of Cloudmark engine updates only ”, my doubt is what is the better way to configure may Antigen 9 SP2 and FSSMC to get the engine/signature/definition and keep my Exchange Server from contacting the Net.

     

    It´s there a best pratice doc?

     

Answers

  • Wednesday, October 28, 2009 5:39 PMChristian Groebner [MVP]MVPUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    Sign In to Vote
    0
    Sign In to Vote
    Hi,

    in the article http://technet.microsoft.com/en-us/library/bb914015.aspx you will find the following statement:

    Managing Cloudmark updates with FSSMC or AEM

    Support for distributing Cloudmark engine updates is available in FSSMC Version 10 Rollup 3. You must have this version installed in order to be able to administer your Cloudmark engine updates using FSSMC. Note that Cloudmark signature updates are not managed by FSSMC because they are distributed directly from the Cloudmark servers. Cloudmark is not supported in Antigen Enterprise Manager (AEM).

    So you have to give the server which uses the cloudmark engine access to the mentioned servers. If you use ISA/TMG as firewall you can specify which servers your exchange can access, so there should be no security risk.

    Greetings

    Christian

    Christian Groebner MVP Forefront
     

All Replies

  • Wednesday, October 28, 2009 5:39 PMChristian Groebner [MVP]MVPUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    Sign In to Vote
    0
    Sign In to Vote
    Hi,

    in the article http://technet.microsoft.com/en-us/library/bb914015.aspx you will find the following statement:

    Managing Cloudmark updates with FSSMC or AEM

    Support for distributing Cloudmark engine updates is available in FSSMC Version 10 Rollup 3. You must have this version installed in order to be able to administer your Cloudmark engine updates using FSSMC. Note that Cloudmark signature updates are not managed by FSSMC because they are distributed directly from the Cloudmark servers. Cloudmark is not supported in Antigen Enterprise Manager (AEM).

    So you have to give the server which uses the cloudmark engine access to the mentioned servers. If you use ISA/TMG as firewall you can specify which servers your exchange can access, so there should be no security risk.

    Greetings

    Christian

    Christian Groebner MVP Forefront