• subscribe
January 22, 2002 12:00 AM

Exchange Server Antivirus Software

Windows IT Pro
InstantDoc ID #23564
Stop viruses at your door

Editor's Note: The Buyer's Guide summarizes vendor-submitted information. To find out about future Buyer's Guide topics or to learn how to include your product in an upcoming Buyer's Guide, go to http://www.winnetmag.com/buyersguide. To view previous Buyer's Guides on the Web, go to http://www.winnetmag.com/articles/index.cfm?action=buyersguides. To view this Buyer's Guide, click here.

Gauging just how serious a threat email viruses pose these days is difficult because of the many hoaxes and relatively benign viruses that exist. But a viral infection is never a good thing, and email viruses are especially nefarious because they tend to spread infection as soon as you open the attachment. Although your end users should maintain an antivirus solution on their desktops,ensuring that users' virus scanners are regularly updated—or are even running—is difficult.

The most seamless and transparent way to maintain a virus-free Microsoft Exchange Server environment is to use a server-side virus scanner. A good server-side antivirus application serves as your first line of defense against viruses. An Exchange antivirus program creates a chokepoint at your network's front door, detects infected email and attachments, and cleans or quarantines them before they even enter your network.

The most important criterion in an Exchange antivirus solution is frequent virus-definition updates that you can deploy automatically and painlessly. New viruses appear often, and responsive vendors will issue definition updates within hours of a serious virus outbreak. A virus scanner that isn't promptly updated to detect new strains won't be able to stop new viruses from entering your network. Look for a program that automatically connects every day to the vendor's server to retrieve and install updates.

If you're using Exchange 2000 Server, you'll probably want a solution that supports Microsoft's Virus Scanning API (VS API) 2.0, which ships with Exchange 2000 Service Pack 1 (SP1). An antivirus program that leverages the VS API can scan all incoming and outgoing traffic, providing the highest possible level of integration with Exchange.

Choose a product that includes comprehensive reporting options to keep you updated about what's happening behind the scenes. Look at the native report format that the product uses (in a network environment, HTML is preferred) and the level of detail reports include. Notification options are also important if you work with high-traffic Exchange servers—ideal solutions can notify you through email or Short Message Service (SMS) when they detect any suspicious activity. Finally, flexible and customizable rule sets let you easily tailor the software to your environment.

At the architectural level, packages that use multiple threads provide better performance. If you work with multiple Exchange systems, a single-server scanning solution probably won't do you much good—you'll want a program that can automatically scale up and accommodate server clustering options. In large-scale environments, choose a solution with an HTML-based interface that lets you maintain all servers from one central access point.

Pricing is a major factor in selecting an Exchange antivirus solution. Maintaining a clean network isn't cheap, but different vendors offer different pricing options. Small environments will probably want a program with a tiered site-licensing structure. For a midsized network, a flat-rate or a bulk seat license package is more economical, whereas per-seat licensing is the most economical solution for large installations.

But don't sacrifice features and performance to cost. All the products listed in this Buyer's Guide should keep your network clean, but product-specific features will determine which piece of software best fits your environment. Think of your purchase as a one-time investment that will protect your network for years to come.



ARTICLE TOOLS

Comments
  • Chris N.
    10 years ago
    May 15, 2002

    I agree completely with your article in that a server side AntiVirus solution is a truly effective defense. However I completely disagree with the statement "The most important criterion in an Exchange antivirus solution is frequent virus-definition updates"; this is the LEAST important criterion; the most effective products are those which filter attached files based solely on their extensions. If you eliminate all executable file attachments from all email it becomes impossible to transmit a virus via this vector regardless of how up to date your definition files are. There is also the added benefit of being able to eliminate resource wasting video and audio file attachments using this method. Eliminating stored audio and video alone more than paid for the cost of our file filtering software in a couple of months.

  • Donald E. Hester
    10 years ago
    Mar 18, 2002

    I use Panda Antivirus for Exchange 2000. Be sure to install Service Pack 2 for Exchange 2000, Service Pack 1 still had some issues. It works great! I stopped 35 bugs in the first week.

You must log on before posting a comment.

Are you a new visitor? Register Here