Exchange and Forefront Protection Licensing
-
Monday, February 18, 2013 6:09 PM
I'm struggling to determine exactly which license I need. I have the following configured on Server 2008 R2:
Exchange 2010 (hub, mailbox & cas) enterprise edition (I needed enterprise edition due to hardware requirements) ---> Exchange Edge Server (unlicensed) with Forefront Protection for Exchange
Do I need to buy a forefront protection for Exchange license or am I better off using\getting another Exchange 2010 Enterprise license?
I've read on non Ms websites that an Exchange Enterprise license covers you for FPE.
Thanks
All Replies
-
Monday, February 18, 2013 9:12 PM
Hi,
Exchange Enterprise and Exchange Enterprise Cals are two different things. Exchange Enterprise enables you to have more than 5 databases whereas Exchange Enterprise Cals are an addition to the Exchange standard cals. The Exchange Enterprise Cals include archiving, FOPE, UM, EAS policys and FPE, but I don't know if the do contain FPE anymore because Microsoft has discontinued it.
One thing you can do is to buy the Enterprise Cals and see if FPE is still included. If not you can use Forefront Online Protection for Exchange (FOPE), which is the online service from Microsoft that does antispam and antimalware. If you use FOPE you can save the money for the additional Exchange license you need for your Edge server.
Greetings
Christian
Christian Groebner MVP Forefront
-
Monday, February 18, 2013 11:42 PM
Cheers for the response Christian, I believe I don't actually need the enterprise CALs as I'm only interested in OWA (not a full Outlook client).
I guess the question I'm now faced is what is the best option - either FPE (which I've already installed) with updates or FOPE?
All I'm after is OWA for a few thousand users with antivirus and anti spam filtering.
Background info - my actual setup is forest A (account org), forest B (resoure account). If FOPE can help with account synchronization between forests it would persuade me to go down that route...
-
Tuesday, February 19, 2013 12:32 PM
Hi,
ok you have two forests, that makes things a litte bit different. Are the both forests in a bidirectional relationship and do the users of Forest A have a linked mailbox in Forest B?
FOPE doesn't sync anything between your forests it only syncs the mail enables users/groups to FOPE. The Dirsync tool of FOPE can only sync one forest, so you need to sync Forest B to FOPE where are the mailboxes are located.
In your case I would go to FOPE because of the better spam handling. Next thing is that users are able to access their own quarantine which can't be done in FPE.
Greetings
Christian
Christian Groebner MVP Forefront
- Marked As Answer by Nick Gu - MSFTMicrosoft Contingent Staff, Moderator Monday, February 25, 2013 1:40 AM

