Support and Best Practices for Microsoft Small Business Server (SBS)

Products

• Mail Security for Microsoft Exchange

Issue/Introduction

Symantec Mail Security for Microsoft Exchange is to be installed on a SBS.

Is this fully supported?
Are there any concerns?
What best practices are recommended?

 

Resolution

Is SMSMSE fully supported on Microsoft Windows Small Business Server?
 

Microsoft Small Business Server is a standard Windows Operating System image with already bundled and configured Microsoft applications.  For further details on Small Business Server click on the following Microsoft link: http://www.microsoft.com/en-us/server-cloud/windows-small-business-server/default.aspx

The following is the certification matrix for SMSMSE with SBS:

	6.5.5	7.0.0
SBS 2003	Supported	Not Supported
SBS 2008	Supported	Supported
SBS 2011	Supported	Supported

 

 

If the version of SMSMSE or SBS you are using is not on the list above determine the underlying Windows Operating System and Exchange version on SBS. Then check the SMSMSE certification matrix to determine if this combination is supported: Symantec Mail Security for Microsoft Exchange certification matrix.

Best Practices

• Make sure that the correct number of threads are calculated.
  See Calculating the Number of Scan Processes in Symantec Mail Security for Microsoft Exchange 5.x and 6.x
   
• Ensure that the correct exclusions are in place on the Server's Antivirus Program
  Administrators should add centralized exclusions to ensure that there is no chance that the AV product, which protects the server's file structure,  will scan materials that are in use by SMSMSE. The latest releases of Symantec Endpoint Protection (SEP) and Symantec Antivirus (SAV) should automatically detect MS Exchange and SMSMSE and set the correct exclusions. It is wise to create redundant exclusions to guarantee that there will be no interference. See Configuring exclusions when Symantec Mail Security for Microsoft Exchange and either Symantec Endpoint Protection or Symantec AntiVirus Corporate Edition are installed together
  
• If Symantec Endpoint Protection or Symantec Antivirus is installed, Ensure SMSMSE's LiveUpdate is Configured Correctly
  For 32-bit Small Business Servers, SMSMSE's LiveUpdate should be disabled. SEP or SAV will automatically share definitions with SMSMSE. For 64-bit Small Business Servers, ensure that SMSMSE's LiveUpdate is enabled. For details, please see About Enabling LiveUpdate When Symantec Mail Security for Microsoft Exchange 6.0.9 and Symantec Endpoint Protection 11.x Are Installed on a 64-bit Exchange 2007 Server
   
• Ensure that the SBS has ample resources
  The Small Business Server combines many important server roles on one computer (Active Directory Domain Controller, Exchange Server, MS SQL Server, SharePoint server, IIS, WSUS, and so on). Shortages of memory, processing power, and disk space can be common if the server is not configured and maintained well. A lack of resources has the potential to affect SMSMSE.
   
• Use Microsoft's SBS Best Practices Analyzer to ensure the server is in good health
  Underlying issues such as low resources, old driver versions, and network trouble will have an effect on SMSMSE and MS Exchange. Microsoft has made a tool freely available which can analyze a Small Business Server and highlight any such issues. Symantec Technical Support recommends that these tools be run periodically and that server administrators act upon any errors, warnings, or recommendations.

Microsoft Windows Small Business Server 2003 Best Practices Analyzer
Windows Small Business Server 2008 Best Practices Analyzer

References
If Symantec Endpoint Protection is installed on the same Small Business Server, please also see:

Best Practices documents for Symantec Endpoint Protection 11.0 on Microsoft Small Business Server
RapidRelease definitions for Symantec Mail Security for Microsoft Exchange (SMSMSE) do not update in networks using Forefront Threat Management Gateway 2010

How to Allow Rapid Release definition updates for Symantec Mail Security for Microsoft Exchange (SMSMSE) when Windows Firewall is enabled.
See also:
"Invalid OS version" after successful install of SMSMSE 6.0.8 on Windows 2008 SBS with Exchange 2007