Manage Subscriptions for Security Components

  • Article

The following security technologies in Windows EBS are licensed by subscription:

  • Forefront Security for Exchange Server, including the e-mail anti-spam services in Exchange Server

  • Malware Inspection Filter in Forefront TMG

You must renew your subscriptions annually to use these technologies to help protect your network infrastructure. If you choose to not renew your subscriptions, or you are using other products to perform these security workloads, you can disable these technologies.

Renew subscriptions

You can use tasks in the Windows EBS Administration Console to link to the subscription-renewal Web site for Forefront Security for Exchange Server and for Forefront TMG.

To renew the subscription for Forefront Security for Exchange Server

  1. Log on to the Management Server by using an account that is a member of the Domain Admins group.

  2. Click Start, click All Programs, click Windows Essential Business Server, and then click Windows Essential Business Server Administration Console.

  3. Click the Security tab, and in the results pane, click E-mail anti-malware. Then in the tasks pane, click Renew subscription. A Web browser opens the subscription renewal Web site.

  4. Review the information on the Web site to renew your subscription.

To renew the subscription for the malware inspection filter in Forefront TMG

  1. Log on to the Management Server by using an account that is a member of the Domain Admins group.

  2. Click Start, click All Programs, click Windows Essential Business Server, and then click Windows Essential Business Server Administration Console.

  3. Click the Security tab, and in the results pane, click Network firewall. Then in the tasks pane, click Renew subscription. A Web browser opens the subscription renewal Web site.

  4. Review the information on the Web site to renew your subscription.

For more information about renewing your subscriptions for the security technologies in Windows EBS, contact your Microsoft Security Partner. To locate your Microsoft Security Partner, see the Microsoft Web site (https://go.microsoft.com/fwlink/?LinkId=128040).

Disable or enable Forefront Security for Exchange Server

To disable or enable Forefront Security for Exchange Server, use the FSCUtility.exe utility on the Messaging Server. Disabling Forefront Security for Exchange Server only removes dependencies that exist between Forefront Security for Exchange Server and the Exchange Server services. It does not uninstall Forefront Security for Exchange Server. After you disable Forefront Security for Exchange Server, you can enable it at any time if you have purchased a subscription license.

For more information about using FSCUtility.exe, see the Microsoft Web site (https://go.microsoft.com/fwlink/?LinkId=128041).

Disable or enable e-mail anti-spam updates

To disable or enable e-mail anti-spam updates in Exchange Server, use the anti-spam filter update cmdlets, Disable-AntispamUpdates and Enable-AntispamUpdates, in the Exchange Management Shell. You run these cmdlets on the Security Server.

For more information about using the anti-spam filter update cmdlets in the Exchange Management Shell, see the Microsoft Web site (https://go.microsoft.com/fwlink/?LinkId=128047).

Disable or enable the malware inspection filter in Forefront TMG

Use the following procedure to disable or enable malware inspection in Forefront TMG.

To disable or enable the malware inspection filter

  1. Log on to the Management Server by using an account that is a member of the Domain Admins group.

  2. Click Start, click All Programs, click Windows Essential Business Server, and then click Windows Essential Business Server Administration Console.

  3. Click the Security tab, click Network firewall, and then in the tasks pane, click Start Forefront Threat Management Gateway console.

  4. In the Windows Security dialog box, type your credentials to connect to the Security Server, and then click OK.

  5. In the console tree, click Web Access Policy, click the Tasks tab, and then click Configure Malware Inspection.

  6. In the Malware Inspection dialog box, click the General tab and do one of the following:

    • To disable global malware inspection, clear the Enable malware inspection check box.

    • To enable global malware inspection, select the Enable malware inspection check box.

    Important

    To inspect the content that is provided by an access rule, you must enable malware inspection on the rule and globally enable the setting.

  7. Click OK.

For more information about configuring malware inspection, see the Forefront TMG Help: On the Security Server, in the Forefront TMG console, press F1.