Security for Exchange
Bitdefender Security for Exchange provides antimalware, antispam, antiphishing, attachment and content filtering seamlessly integrated with the Microsoft Exchange Server, to ensure a secure messaging and collaboration environment and increase productivity. Using award-winning antimalware and antispam technologies, it protects the Exchange users against the latest, most sophisticated malware, and against attempts to steal users' confidential and valuable data.
Security for Exchange is designed to protect the entire Exchange organization to which the protected Exchange Server belongs. This means it protects all active mailboxes, including user/room/equipment/shared mailboxes.
Security for Exchange works by deploying Bitdefender Endpoint Security Tools with an Exchange role on Microsoft Exchange Servers with the purpose of protecting the Exchange users from email-borne threats.
Note
Bitdefender Endpoint Security Tools with an Exchange role protects both the server machine and the Microsoft Exchange solution. In addition to Microsoft Exchange protection, the license also covers the endpoint protection modules installed on the server.
This module is an add-on available with a separate license key. The Security for Exchange license capacity equals to 150% of the total number of Security for Endpoints license seats. In case the number of active mailboxes in your organization exceeds the number of mailboxes covered by the license, you will receive a notification to extend your license.
Components
Security for Exchange is dependent on the following components:
GravityZone Control Center
Security agent (Bitdefender Endpoint Security Tools installed on Windows, Linux, & Mac endpoints)
Configure and install the feature
To start using this features, follow the steps below:
Important
If your Exchange Servers already have the BEST agent deployed, you can use a Reconfigure agent task to add the module to the endpoint. If no agent is installed, you will need to use an installation package to deploy BEST on your endpoints along with all required modules.
Below we have included both procedures.
Log in to GravityZone Control Center.
Go to the Installation Packages page from the left side menu.
Click the Create button in the upper-right side of the screen.
Type in the Name and Description for the new installation package.
Select the modules you wish to deploy.
Note
Make sure you include the Exchange Protection module.
The Bitdefender Exchange Protection module integrates with Microsoft Exchange Server through transport agents in order to filter the email traffic for malware, spam and custom attachment, and content detection rules.
These agents are installed when deploying the module, and will automatically be assigned these priorities on the Exchange Server:
Agent name
Priority
Endpoint SMTP Scan Agent
14
Endpoint Routing Scan Agent
15
These priorities should not be changed manually, otherwise the product will not function as designed or it may stop functioning.
Click Save.
Select the newly created package from the list of packages and click Send download links.
Enter the email addresses of the recipients and click Send.
Policies are used to enable and configure features both on endpoints and in terms of general functionality. Apply the following changes to the policy of your choice:
Log in to GravityZone Control Center.
Go to the Policies page from the left side menu.
You can either:
Under Exchange Protection > General and create your user groups. You can use the groups to apply different scanning and filtering policies to different user categories.
Continue to the Settings section and finish configuring the General policy page.
Move down to the Antimalware page and configure the required settings.
Continue to the Antispam page and configure the settings.
Go to the Content Control page and finish configuring the policy.
Important
Email traffic is processed by the Security for Exchange filters in the following order:
Antispam filtering
Content Control > Content filtering
Content Control > Attachment filtering
Antimalware filtering
Save your policy.
If you created a new policy, apply it on the endpoints where the feature is deployed:
Go to the Network page from the left side menu.
Select the endpoints you want to apply the policy to.
Click the
Assign Policy button at the upper side of the table.Select the policy you want to apply.
Click Finish.
Note
For more information, refer to Assigning device policies
If you have edited an existing policy, make sure it is applied to all endpoints where the feature is deployed.
This will ensure that the feature is enabled and configured to best suit your company's needs.
Test out the new feature
Depending on your policy, Security for Exchange will redirect, reject, delete, or quarantine detected emails. You can periodically check your company's quarantine and run reports to see what emails have been detected and what actions have been taken.
Alternatively, you can set up a specific test scenario, and send an email to one of your protected email accounts.