Proposed Answer SBS 2011 and Forefront for Exchange 2010?

  • Tuesday, December 21, 2010 9:53 PM
     
     

    Hi

    SBS 2008 included a trial for Forefront Protection for Exchange but this has been striped from the release of SBS 2011.

    Is it possible to install Forefront for Exchange Server 2010 on a SBS 2011 installation?

    Regards
    Per


    PB

All Replies

  • Wednesday, December 22, 2010 8:43 AM
    Moderator
     
     
    Theoretically, I consider that we can install Forefront for Exchange 2010 on SBS 2011.
    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
  • Wednesday, December 22, 2010 4:32 PM
     
     

    Hi

    I gave it a shot and the first problem I found was that if you enable Anti-Spam in FFPE 2010, it will automaticly disable Content Filtering in Exchange 2010. This will make "Spam protection for e-mail" turn red and the status "Critical" in the security section of SBS 2011 Management Console.

    Is there any chance that you can force this error to go away (since you got a better anti-spam from MS)?

    Regards
    Per


    PB
  • Friday, December 24, 2010 12:55 PM
     
     Proposed Answer

    Just like sbs 2008 it is possible to disable the warning but surprising that it is necessary given SBS 2011 is new and this issue existed with sbs 2008 and Forefront 2010.

    To eliminate the error close the sbs console and navigate to c:\program files\Windows Small Busness Server\Data\SHE extensions. Either rename or relocate E12Antispam.xml.  I created a new folder in the SHE extensions folder and moved E!2antispam.xml in it. Restart sbs console and the error will be gone. if fact the entire line about spam filtering is gone.  Hopefully a sbs 2011 patch will fix this problem. when it does, it should ad a new E12antispam.xml and the spam filtering will be restored.  In the meantime, this will get your security status back to green.

     

  • Tuesday, May 17, 2011 5:27 AM
     
     

    is it recommended to install FFPE 2010 on SBS 2011?

    i am in a similar situation. i had FFPE installed on my earlier SBS and now am contemplating if i should go that route again.

    FFPE did a good job but it also added load to the server. so far the integrated anti spam in exchange is doing well as well. 

    so, what to do?


    You can either be part of the problem or be part of the solution.
  • Wednesday, May 02, 2012 4:08 PM
     
      Has Code

    GaryD9, on this thread:

    http://social.technet.microsoft.com/Forums/en-US/smallbusinessserver/thread/67eea70a-5ed8-49ae-ba06-6abb2673f38e

    posted a detailed answer which worked for me, as far as the Console alert goes. It doesn't fix the emailed reports. I'll copy it here incase that thread becomes unavailable:

    the CAUSE of the error is that the MS Exchange "content filter" is turned off in favor of the forefront content filter when forefront is installed.  The SBS console is still looking at the Exchange filter status (which is now off) and is generating an error.  On my SBS 2011 server, the cause of this is a file named "E12AntiSpam.xml" in the "C:\Program Files\Windows Small Business Server\Data\SHExtensions" directory.  Within that file, there is probably a line such as

    $(Get-TransportAgent "Content Filter Agent").Enabled

    The fix can be as simple as changing the line to:
    $(Get-TransportAgent "FSE Content Filter Agent").Enabled

    (just inserting "FSE " in the front of the agent name)

     

     It should be noted that you can't edit this file unless you open it from Notepad after right clicking on the shortcut for Notepad and selecting "Run as Administrator". Also, you won't see any changes until you close and re-open the Windows SBS Console. 

    I'm not sure if that applies to SBS 2011 or if Forefront 2010 will work on SBS 2011, but this may solve the console reporting error. It will NOT (sadly) solve the errors reported by the emailed status reports. It also will not solve issues with warnings about the engines not having updated in the last 5 days which is perfectly normal for the Cloudmark and worm engines. I have a question posted on that issue here:
    http://social.technet.microsoft.com/Forums/en/smallbusinessserver/thread/f373c9f3-e315-426a-87db-d2e0100f63b0

    which, so far, has not attracted any reasonable answers.

    Best of luck and keep us posted? Thanks!