Scanning inbound, outbound, and internal message queues
Applies to: Forefront Protection for Exchange
Forefront Protection 2010 for Exchange Server (FPE) offers flexibility in choosing which message queues to scan with the transport scan: inbound, outbound, or internal. By default, FPE scans all inbound, outbound, and internal e-mail messages.
This selection affects not only transport antimalware scanning, but also any filtering options that are associated with the transport scan.
To select inbound, outbound, or internal scanning
Open the Forefront Protection 2010 for Exchange Server Administrator Console, click Policy Management, and under Global Settings, click Scan Options.
In the Global Settings - Scan Options pane, under the Scan Targets – Transport section, there are three Target types check boxes for making queue selections:
Inbound—Selecting the Inbound check box (the default) configures FPE to scan all e-mail messages entering the Edge Transport or Hub Transport. Messages are designated as inbound if the message originated from or relayed through an external server. If the Exchange servers within that site or organization are not running FPE, this is an effective way to protect them from infected e-mail messages coming from the Internet.
Outbound—Selecting the Outbound check box (the default) configures FPE to scan all outgoing e-mail messages that leave your Exchange site or Exchange organization via the Edge Transport or Hub Transport. Messages are designated as outbound if at least one recipient has an external address.
Internal—Selecting the Internal check box (the default) configures FPE to scan all internal mail. Messages are designated as internal if they originate from inside your domain and all the recipients are located inside your domain.
For more information about configuring internal and external (inbound) addresses in FPE, see Identifying external and internal addresses.
Click Save after making any changes to your queue selections.