How to Install
ForeFront Protection 2010 for Exchange Servers
Prepared by Ian Matthews Written April 20, 2010, Last
Updated April 21, 2010
NOTE: This is MY cookbook for ForeFront 2010
installs and you should use with caution.
As usual my instructions are provided without warrenty or guarentee of
any sort.
So you have installed your Exchange 2007 or 2010
server and you want to get the latest Microsoft AntiVirus and AntiSpam
running. Well, it isn't hard but it is completely different from
AntiGen or ForeFront 9 or 10. Lets get to it:
-
Run Windows Update and patch everything
-
Manually stop all Microsoft Exchange services now
using Services Control Manager.
-
Insert the Forefront disk or just start the Forefront
install .exe/.msi from where ever you have it
-
Click through the obvious
screens and select ENABLE ANTISPAM when prompted
-
The first time Forefront starts
it takes a minute... so don't sweat it!
-
Be carefull NOT to install the
ONLINE version after you install the LOCAL version of Forefront (unless
you already have an account with a Forefront provider)
-
You will be prompted to enter
your licence key when Forefront starts up. Note that if you are using a
TechNet/MSDN version of Forefront, your CD Key will give you three years
of coverage and you do NOT need to enter a licence key.
Open the Forefront Protection
Administration Console.
-
In the Policy Management view,
in the Global Settings – Engine Options pane, click Update All Engines
Now
-
Wait a few minutes for engines
to update.
-
Start all Microsoft Exchange
services using the Service Control Manager.
-
I would (and did) set
notifications on a number of items.
Below are are a few screen shots of other items I
changed from their defaults.
-
-
By this time your Engine Updates should be complete
and you might want to look at the status of all of the engines:
And that is about it!
Every once in a while you should check your
MONITORING, SERVER SECURITY VIEWS, FILTERING DETAILS and QUARENTINE to
see what up.
Don't be surprised to see your Outlook JUNK MAIL
folder go to zero items. Microsofts internal numbers are ONE peice
of spam for each mailbox every THREE YEARS. You won't get that
number, but so far it has been working very well for me.
