run exchange 2007 without an exchange Antivirus

[chazzy2501]

I'm being forced to purchase my own AV solution for exchange. I believe I could install a standard server AV onto exchange and just make sure it has exceptions for the exchange database.

 

Exchange AVs are priced on a per mailbox licence and since I have over a 1000 I don't want to pay! Filtering is already done upstream by the swgfl (I think, as I've never ever had a report of a virus in my emails!)

 

Sound Idea?

[sukh]

I always advise to use a AV scanner for the DB. A virus can start from within your network rather than come through. Unless you network is securely locked down and you have AV on all your desktops and port 25 blocked then that would ease my mind. Still, if user credentials have been leaked and one decides to send an authenticated email virus, it wont be too good. You just need to factor that in the risk.

 

Other than that, you dont need a DB level AV scanner. Most cloud screening/3rd partys catch 100% of AV, and 99.9% of AS. If your concern is AV only then I would think that you can assume it's OK not to have AV for DB. Keep a file level scanner and exclude the usual process, file, services etc...

 

In fact, even MSFT is retiring FPE 2010 in a few years.