Exchange 2010 and ForeFront Protection Installation RRS feed

  • Question

  • Hello All,

    We are planning to install ForeFront 2010 on Exchange 2010 servers. But we are not sure where we should install it. Our environment is:

    4 Exchange 2010 Server:


    2 Servers have CAS and HT role

    2 Servers have mailbox role in a DAG

    Do we need to install ForeFront on all exchange servers?



    Thursday, October 27, 2011 4:35 PM


  • Microsoft Forefront Protection 2010 for Exchange Server (FPE) can be deployed on Exchange Edge Transport, Hub Transport, Mailbox server, or combined Hub/Mailbox roles.

    For some organizations, scanning at the Edge Transport and Hub Transport servers may be sufficient and appropriate to address their security needs and mail flow requirements. For others, it may make sense to also add Mailbox server scanning as part of their antimalware, filtering, and antispam scanning strategy.


    Jasjit Singh Dhindsa | ITIL v3 | IASA Foundation Certified | MCITP:Exchange 2010 | Exchange 2007 | MCTS:OCS 2007 | Exchange 2010 | Exchange 2007 | MCSA:Messaging | Security | MCSE:Messaging | Security
    • Marked as answer by Yassar Thursday, October 27, 2011 5:38 PM
    Thursday, October 27, 2011 4:41 PM