Forefront ve Antigen kullanıcıları için değişen bu yeni tarama motorunu edinmek için yama yüklemek gerekli .
Changes to the Kaspersky antimalware engine mean that Forefront and Antigen server protection customers will need to apply updates to ensure that they remain protected by Kaspersky. The updates will be available from July through Sept. 2010 and must be applied by the end of Jan. 2011 or customers will not receive signature updates and will see errors. Customers who cannot update by that time can avoid problems by deselecting the Kaspersky engine.
Kaspersky Engine Changing
Antigen 9 products for Exchange and Simple Mail Transport Protocol (SMTP) are commonly used to protect Exchange Server 2003 and Windows Server SMTP installations, while the Forefront products for Microsoft application servers protect 2007 and later versions of Exchange Server, SharePoint Server, and Communications Server. These Forefront and Antigen products use multiple scanning engines to improve detection of malware and to ensure that protection continues while signatures are updated. Up to five engines can be selected and Microsoft occasionally adds or deletes engines from the list.
The Kaspersky scanning engine is very commonly used and the current version in the Forefront and Antigen products is Kaspersky 5, but Microsoft plans to upgrade the engine to Kaspersky 8 in all products and discontinue Kaspersky 5 updates by the end of Jan. 2011. The newer Kaspersky engine is faster, has smaller malware signature files, and can protect 64-bit servers.
However, the new Kaspersky engine stores files in subdirectories, which the current Forefront and Antigen products cannot handle. In addition to installing Kaspersky 8, the updates will prepare the Forefront and Antigen products to ensure that the new engine (or any future engines that publish to a subdirectory) will update correctly.
The following products are affected:
• Forefront Protection 2010 for Exchange Server
• Forefront Protection 2010 for SharePoint (32-bit SharePoint installations only)
• Forefront Security for Exchange Server
• Forefront Security for SharePoint
• Forefront Security for Office Communications Server
• Forefront Server Security Management Console
• Antigen 9 for Exchange
• Antigen 9 for SMTP Gateways.
Customers have until Jan. 31, 2011, to install the updates; after that they will not receive signature updates for the Kaspersky 5 engine and will see errors in the Kaspersky log files. A workaround is to deselect the Kaspersky 5 engine as one of the engines used for scanning.
Customers using Antigen 8 products, which also employ the Kaspersky 5 engine, will have to contact Microsoft for details on what actions they should take.
Other Microsoft protection products (Forefront Client Security, Security Essentials, Windows Intune, Forefront Threat Management Gateway, and Forefront Unified Access Gateway) do not use the Kaspersky engine and the updates are not required for those products.
Availability and Resources
The updates will be available for affected products from July 2010 through Sept. 2010. Unlike the other products, Forefront Protection 2010 for Exchange and Forefront Protection 2010 for SharePoint already include Kaspersky 8, but it is not enabled by default. Customers can manually enable Kaspersky 8, a process that will be automatic when the updates are installed.
Kaspersky engine updates for Forefront and Antigen are described in a FAQ available from www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=811263a0-2218-4247-8358-68d345daf6a5.
Enabling Kaspersky 8 in Forefront Protection 2010 for Exchange and Forefront Protection 2010 for SharePoint is described at support.microsoft.com/kb/2284024.