Feature | New or Updated | Description |
|---|
Edge Transport server role | | This server role is for perimeter network deployment. It supports Simple Mail Transfer Protocol (SMTP) routing, provides anti-spam filtering technologies and support for antivirus extensibility. The Edge Transport server should be isolated from the Active Directory directory services, but can still leverage Active Directory for recipient filtering by using Active Directory Application Mode (ADAM). EdgeSync in Exchange Server 2007 publishes pertinent organization information, encrypted, to the Edge Transport server for use in robust recipient filtering and respects Microsoft Outlook safe sender lists on the Edge. Communications between the Edge Transport server and the internal network in an Exchange Server 2007 organization are encrypted by default. Edge Transport includes anti-spam technologies that protect at many layers. |
Anti-spam: Connection Filtering | | Exchange Server 2007 provides an integrated, IP based block-and-allow list based on sender reputation. Lists are automatically updated as new versions become available. Administrators can establish additional IP allow-or-deny lists as needed. |
Anti-spam: Sender and Recipient Filtering | | Sender reputation is dynamically analyzed and updated. When the Edge Transport server spots specific trends from a given domain, it can impose certain actions to either quarantine or reject incoming messages. Sender ID is also used to verify that each e-mail message originates from the Internet domain from which it claims to come from based on the sender's SMTP server IP address. Once a Sender ID record has been verified, the results can be cross-referenced to past traffic patterns and sender reputation, creating an associate weight into the domain reputation. Finally, recipients are validated, and administrators have the ability to block messages sent to non-existent user accounts or internal-only distribution lists |
Anti-spam: Safe Sender List Aggregation | | Via EdgeSync, the Edge Transport server respects Outlook 2003 and Outlook 2007 safe sender lists to help reduce false positives. |
Anti-spam: Sender ID | | Exchange Server 2007 embeds support for Sender ID, an e-mail industry initiative designed to verify that each e-mail message originates from the Internet domain from which it claims to come based on the sender's SMTP server IP address. Sender ID helps prevent domain spoofing and protect legitimate senders’ domain names and reputation and helps recipients more effectively identify and filter junk e-mail and phishing scams. |
Anti-spam: Content Filtering | | Content is analyzed using the Intelligent Message Filter (IMF), Exchange Server's implementation of Microsoft SmartScreen content filtering technology. SmartScreen is based on Microsoft Research's patented machine-learning technology. Anti-phishing capabilities are also built-in to the IMF to help detect fraudulent links or spoofed domains and protect users from these types of online scams. When used with Outlook 2007, a phishing warning or block appears in the user interface. Customers are protected from emerging spam attacks through the automatic filter updates for Exchange Server 2007, which are published on a frequent basis. Should the administrator require additional control, the Edge Transport server enables customization, including the ability to add words or phrases to the filter. |
Anti-spam: Outlook E-Mail Postmark | | Exchange 2007 verifies Outlook E-mail Postmarks attached to messages sent from Outlook 2007. The Outlook E-mail Postmark can reduce false positives for messages from legitimate senders that have little to no reputation. |
Anti-spam: Spam Assessment | | In addition to scanning message content, the IMF consolidates guidance from Connection, Sender/Recipient, Sender Reputation, Sender ID verification, and Outlook E-mail Postmark validation to apply a Spam Confidence Level (SCL) rating to a given message. Administrators can preconfigure actions on the message based on this SCL rating. Actions may include deliver to the inbox or junk mail folder, deliver to the spam quarantine, or reject outright and no deliver. |
Anti-spam: Service Resilience | | The Edge Transport server role controls the inbound SMTP message receipt rate for increased availability. This control, coupled with the ability to detect open proxy machines, can aid in preventing denial of service attacks. Tar pitting is supported to slow the server response for certain SMTP communication patterns, minimizing exposure to directory harvest attacks. |
Anti-spam: Anti-spam Stamp | | Messages filtered by the Edge Transport server role are stamped with information, including why the message was considered spam and which combination of filters and reputation services (IP, domain, sender, recipient, content) determined its spam assessment. Administrators may use this information in an aggregate way to understand the effectiveness of filtering across their multilayered approach and tune appropriately. |
Anti-spam: Two-Tiered Spam Quarantine | | The Exchange Server 2007 environment enables two-tiered spam quarantine. First, administrators have access to a Spam Quarantine housed in the perimeter network. Using Outlook, administrators can access the Spam Quarantine to search for messages, release to the recipient, or reject and delete. Messages with borderline SCL ratings (borderline definition configured by the administrator) may be released to the end user's junk mail folder in Outlook, and are converted to plain text for further protection. |
Anti-spam: Consolidated Management | | Management of the Edge Transport Server role and corresponding rules is consistent with the rest of the Exchange environment and can be performed using the Exchange Management Console graphical interface or the Exchange Management Shell for automation. Finally, the administrator can leverage notifications through Microsoft Operations Manager (MOM) or reports within Exchange to analyze the effectiveness of their anti-spam filters. |
Antivirus Extensibility:Attachment Filtering | | To effectively protect against worms delivered via e-mail, the administrator can strip attachments based on their size, content or file type. Zip file manifests can be examined as well for offending file types. |
Antivirus Extensibility: Edge Protocol Rules | | As a reactive defense mechanism, protocol rules provide a layer of protection before antivirus signature updates become available. Administrators can filter on known text patterns in malware carriers and drop the connection. |
Antivirus Extensibility: Antivirus Stamp | | Messages scanned in the Exchange environment can be assigned an antivirus stamp. This stamp identifies which engine did the scanning, which signature was used, and when the message was last scanned. |
Antivirus Extensibility: Deep Integration for Antivirus Scanning | | Antivirus solutions can be more tightly integrated in the Exchange Server 2007 environment. Antivirus solutions have access to the Multipurpose Internet Mail Extensions (MIME) parsers and can scan the message stream in transport (on Edge Transport or Hub Transport servers). Catching viruses in transport helps prevent their delivery and storage in Exchange mailboxes. |
Hosted Filtering Integration | | Exchange Server 2007 provides integration with Exchange Hosted Services, offering off-site protection against spam and viruses. |
