Exchange Best Practices Analyzer

 

Applies to: Forefront Security for Exchange Server

The Microsoft Exchange Best Practices Analyzer collects settings and values from the registry, Active Directory (AD), metabase, and performance monitor. The settings are compared against a set of Best Practice rules. It then generates a report that provides you with recommendations for improving your system.

You can obtain the Exchange Best Practices Analyzer from the Exchange Best Practices Analyzer Download Page.

Among the items that the Exchange Best Practices Analyzer checks are the General Options settings, whether your FSE Services are started, and the following registry settings not available as General Options. For more information about registry values, see the "Registry Key" section in the "Microsoft Forefront Security for Exchange Server User Guide".

InternetTimeout

In order to prevent timeout problems during Transport scanning, you can try increasing the time specified in the InternetTimeout registry value. Since this is a hidden registry value, you must create a new DWORD registry value called InternetTimeout and set the time, in milliseconds. If the value is set too low, it may cause the virus scanner to time out too quickly when processing a single item. If the value is set too high, it may cause the virus scanner to spend too much time processing a single item. We therefore recommend a minimum value of 150000, and a maximum value of 660000.

RealtimeTimeout

In order to prevent timeout problems when scanning the Store, you can try increasing the time specified in the RealtimeTimeout registry value. It is created and set the same way as the InternetTimeout registry key.