Understanding Virus Filtering Settings in FOPE
Applies to: Forefront Online Protection for Exchange
Topic Last Modified: 2012-04-12
Forefront Online Protection for Exchange (FOPE) maintains partnerships with a number of anti-virus engines. By default, your organization will always have at least two anti-virus engines enabled.
In the event of a virus outbreak, the first anti-virus engine that comes out with an update will be turned on for all customers. Once an update is released for the new virus, the default virus engines will be turned on again.
The anti-virus engines scan all text files and all of the text within the body of each message. Any text file or message body that contains the complete code for a known virus will be blocked. The virus engines also examine each message for partial virus code and will attempt to block these email messages as well.
At times, there may not enough text to fully scan a message, and the message can be identified as inactive or non-malicious, possibly be allowed. This can apply to mailer-daemons, bounces, or damaged virus attachments that only contain a small portion of the original virus code.
For more information on the Virus filtering service, see Understanding Antivirus Protection in the Filtering Service Features section.