Inbound scanning
Applies to: Forefront Protection for Exchange
The basic configuration for inbound mail scanning is shown in the following image.
.jpg "Inbound scan 4")
The following tasks occur for inbound scanning:
Mail is scanned at the Edge Transport server, stamped when identified as safe, and routed into the organization to a Hub Transport server.
Stamped mail from the Hub Transport server is delivered to the Mailbox server without additional scanning.
Benefit: Scanning at the Edge Transport server helps ensure that mail is free of malware after it enters your internal messaging infrastructure. It also reduces the processing load on the Hub Transport and Mailbox servers.
Note
If no Edge Transport server is deployed, the stamp is applied at the Hub Transport server before it is delivered to the Mailbox server. The Hub Transport server can be located on a separate server or with the Mailbox server.