Installing Forefront Security on a local server
Applies to: Forefront Security for Exchange Server
To install on a local Exchange server, you must log on to the local computer using an account that has administrator rights. Click Next to continue after filling out a screen, unless otherwise directed.
Note
As in most installations, Setup updates shared Microsoft files on your computer. If you are requested to restart your computer, you do not have to do that immediately, but it may be necessary for certain FSE features to work correctly.
To install Forefront Security for Exchange Server on a local server
Run the Setup.exe file, which is available on your CD image or from the self-extracting package available at the Microsoft Volume Licensing Download Center.
The initial setup screen is Welcome. Click Next to continue.
Read the license at the License Agreement screen and click Yes to accept it.
On the Customer Information screen, enter User Name and Company Name, if needed.
On the Installation Location screen, select Local Installation.
On the Installation Type screen, select Full Installation.
Setup checks to see if you have the correct version of the Windows Update Agent. If you do not have the correct version, at the end of the installation you are directed to the Microsoft Update Web site to do the opt-in manually. If you do have the correct version, Setup then checks if Microsoft Update is enabled. If it is not, the Use Microsoft Update dialog box appears, permitting you to enable it.
On the Quarantine Security Settings screen, select the desired setting.
Secure Mode causes all messages and attachments delivered from Quarantine to be re-scanned for viruses and filter matches. This is the default.
Compatibility Mode permits messages and attachments to be delivered from Quarantine without being scanned for filter matches. (Messages and attachments are always scanned for viruses.) Forefront Security for Exchange Server identifies these messages by placing special tag text in the subject line of all messages that are delivered from Quarantine.
On the Engine Updates Required screen, read the warning about engine updates.
If you use a proxy server for scanner updates, select Use Proxy Settings and enter its name or IP address and its port on the Proxy Information screen. This ensures that your proxy server is correctly configured from the start. If you are doing a fresh install, you may enter the proxy information. If this is an upgrade, and proxy data is available in the registry, this screen does not appear and the existing data is preserved. Any changes to existing proxy information can be made in General Options.
Note
If a username and password are required for the proxy server, they must be entered through General Options once FSE has been installed. This must be done immediately, otherwise engine updates will fail.
If the server you are installing to is an Edge or Transport server, you may be asked if you want FSE to enable Anti-Spam Updates. If you have never made any change to the Anti-Spam Updates setting on the Exchange Management Console (that is, the setting is in its default state), you are offered this choice. If you have made a change to that setting, you do not see this option. If you do not enable Anti-Spam Updates during FSE installation, you can turn on updates by clicking Enable Anti-spam Updates in the Action section of the Exchange Management Console.
Note
If you enable Anti-Spam Updates during the installation and subsequently uninstall FSE, updates will be disabled.
On the Choose Destination Location screen, either accept the default destination folder for the product, or click Browse to select a different one.
Default: Program Files(x86)\Microsoft Forefront Security\Exchange Server
On the Select Program Folder screen, choose a program folder for Forefront. At this point, Setup checks for running services.
Default: Microsoft Forefront Server Security\Exchange Server
On the Start Copying Files screen, review the data presented to you. If any changes have to be made, use the Back button to navigate to the screen to be changed. Otherwise, click Next to begin the installation. A progress bar indicates that the files are being copied.
After installation is complete, you can start or restart the Exchange Transport Service, depending on whether it was stopped or running when the installation began. For a clean install, the service was probably still running and needs to be recycled. If you are reinstalling the product, the service had to be stopped before FSE could be uninstalled. If the service was running, the Restart Exchange Transport Service screen appears; if the service was stopped, the Start Exchange Transport Service screen appears. In either case, you can start the Transport service automatically so that Forefront Security for Exchange Server can become active. Click Next to have Setup perform this step or click Skip to manually perform this step at a later time. Until the service has been started or restarted, FSE cannot scan mail being sent or received.
Depending on whether the Exchange Transport Service is being started or restarted (that is, you clicked Next on the prior screen), the Starting Exchange Transport Service screen or the Recycling Exchange Transport Service screen appears. Wait until the status changes to All services started, before clicking Next to continue.
If the Information Store Service was stopped when the install began, the Start Exchange Information Store screen appears. You can start the Information Store service automatically so that Forefront Security for Exchange Server can become active. Click Next to have Setup perform this step or click Skip to manually perform this step at a later time. Until the service has been started, FSE cannot scan mail on the Store. If the Information Store was running when the installation began, this screen does not appear.
If the Information Store Service is being started (that is, you clicked Next on the prior screen), the Starting Exchange Services screen appears. Wait until the status changes to All services started, before clicking Next to continue.
On the InstallShield Wizard Complete screen, you are advised to view the Readme file (recommended). If you opted to use Microsoft Update and you do not have the correct version of the Windows Update Agent, you are directed to a site to obtain it. Click Finish to complete the installation.