Configure Anti-Spam Automatic Updates

Applies to: Exchange Server 2010

Use the Enable Anti-spam Updates wizard to enable anti-spam updates on computers that have the Microsoft Exchange Server 2010 Edge Transport server role or the Hub Transport server role installed. By using this wizard, you can determine the type of Microsoft Forefront Protection 2010 for Exchange Server anti-spam updates that are retrieved and set the mode by which the anti-spam updates are retrieved.

For computers that are running Exchange Server 2010, anti-spam Automatic Updates functionality relies on the Microsoft Update service framework. To learn more about automatic updates, see Understanding Anti-Spam Updates.

Prerequisites

Forefront Anti-spam Automatic Updates functionality is a premium feature that requires either an Exchange Enterprise Client Access License (CAL) for each user mailbox or a Forefront Protection 2010 for Exchange Server license.

What Do You Want to Do?

• Use the EMC to enable anti-spam updates
• Use the Shell to enable anti-spam updates

Use the EMC to enable anti-spam updates

You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Anti-spam updates" entry in the Transport Permissions topic.

1. In the Exchange Management Console, click Edge Transport.
2. Select the server on which the Exchange Anti-spam Update service is to be configured.
3. In the Action pane, click Enable Anti-spam Updates.
4. In the Enable Anti-spam Updates page of the Enable Anti-spam Updates wizard, configure the following:
   • Update mode
     • Manual Select this option if you want to manually apply content filter updates from Microsoft Update. • Automatic Select this option if you want anti-spam updates retrieved from Microsoft Update to be applied automatically. • Spam signature updates   Spam signature updates may be downloaded several times a day to supplement the content filter accuracy.
     • IP Reputation updates   IP Reputation updates may be downloaded several times a day to improve the accuracy of sender reputation information about IP addresses that are known to send spam.
   • Update service   Select this option to agree to enable Forefront Protection 2010 for Exchange Server anti-spam updates via Microsoft Update. Users must opt in to using Microsoft Update so that Forefront Protection 2010 for Exchange Server anti-spam updates published on Microsoft Update are visible to the Exchange server. If you don't select this option, you cannot enable Forefront Protection 2010 for Exchange Server anti-spam updates via Microsoft Update.
     Click Enable.
5. On the Completion page, review the following, and then click Finish to close the wizard:
   • A status of Completed indicates that the wizard completed the task successfully.
   • A status of Failed indicates that the task wasn't completed. If the task fails, review the summary for an explanation, and then click Back to make any configuration changes.

Use the Shell to enable anti-spam updates

You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Anti-spam updates" entry in the Transport Permissions topic.

You use the Enable-AntispamUpdates cmdlet to enable automatic anti-spam updates. The following examples show how this cmdlet can be used in various ways.

• To enable anti-spam Automatic Updates if the destination computer is already opted in to Microsoft Update, run the following command:

  Enable-AntispamUpdates -Identity SERVER01 -IPReputationUpdatesEnabled $True -UpdateMode Automatic -SpamSignatureUpdatesEnabled $True
  

  In this case, SERVER01 is the server on which you want to enable anti-spam updates.

• To enable anti-spam Automatic Updates and opt in to Microsoft Update, run the following command:

  Enable-AntispamUpdates -Identity SERVER01 -IPReputationUpdatesEnabled $True -MicrosoftUpdate RequestedNotifyDownload -UpdateMode Automatic -SpamSignatureUpdatesEnabled $True
  

  In this case, SERVER01 is the server on which you want to enable anti-spam Automatic Updates. In this example, the MicrosoftUpdate parameter is set to RequestNotifyDownload. This configuration sets the status of the computer as "opted-in" to Microsoft Update. The RequestNotifyDownload configuration also sets the Automatic Updates client to download binaries and other non-anti-spam data and then notify you when the updates are ready to install.

  Important

  The setting of the MicrosoftUpdate parameter does not affect the frequency of anti-spam updates. Anti-spam Automatic Updates are configured only by the UpdateMode parameter.

  Important

  If you have already configured the Windows Automatic Updates client, you must set the Windows Automatic Updates schedule by using the Automatic Updates client. When you set the MicrosoftUpdate parameter, you do not configure the Automatic Updates client schedule if you have already configured the Windows Automatic Updates schedule.

  Note

  The Forefront Protection 2010 for Exchange Server anti-spam update service polls Microsoft Update several times a day to download updates or determine whether the opt-in status has changed. Therefore, it may take up to one hour or more for the opt-in action to be reflected in your system. If you want to verify the modified opt-in status immediately, restart the Microsoft Exchange Anti-spam Update service.

For detailed syntax and parameter information, see Enable-AntispamUpdates.