Performing your initial configuration

 

Applies to: Forefront Protection for Exchange

The following topics describe the configuration steps that should be performed promptly after installing Forefront Protection 2010 for Exchange Server (FPE):

Configuring third-party file-level antivirus programs

Starting the product

Verifying your deployment by using the EICAR antivirus test file

Identifying external and internal addresses

Enabling antispam protection (required only if you did not enable the FPE antispam component during installation)

Scheduling malware scanning of mailboxes and public folders

Note

When you install FPE on Exchange Server 2010 for the first time, or when you add a new server to an existing Exchange Server 2010 configuration, the server account must be added to the Exchange Management Hygiene role group within Active Directory and the credentials replicated across all servers. In most environments, this occurs within a short time. In some environments, however, it might take an hour or more. Until the replication occurs, you cannot perform antispam management, on-demand scanning, or access public folders on that server. To determine whether FPE has this functionality, access the Forefront Management Shell (click Start, point to All Programs, point to Microsoft Forefront Server Protection, and then click Forefront Management Shell), and then type the following Windows PowerShell command: Get-FseExchangeManagementStatus. If ExchangeManagementAvailable is set to true, then these features are available.

Tip

You can use Microsoft Forefront Protection Server Management Console (FPSMC) to configure and manage FPE on multiple servers, after you have installed each instance. This makes management tasks more efficient. You can download FPSMC from the Microsoft Download Center at the following location: Microsoft Forefront Protection Server Management Console (FPSMC) 2010. Documentation for FPSMC can be found in the TechNet library at Forefront Protection Server Management Console.