Exchange 2007 mailbox server on-access scanning

Applies to: Forefront Security for Exchange Server

On-Access protection submits unscanned items to FSE for scanning before they are retrieved by a mail-reading client. When FSE is first installed, all mail up to one day old is scanned when accessed. Each day, FSE adds 24 hours to the "On-Access Cutoff value", so that progressively older and older mail is scanned. Mail that is older than the current value of the On-Access Cutoff is not scanned, even if accessed. This keeps your system from being overwhelmed by the initial scan when FSE is installed. This On-Access cutoff setting enhances performance on Mailbox servers when all messages on the server have not been scanned. That is, larger scale mailbox servers may require decreased protection on the initial installation to assure adequate server performance.