Support and Best Practices for Microsoft Small Business Server (SBS)
|Article:TECH97861|||||Created: 2009-01-02|||||Updated: 2014-07-30|||||Article URL http://www.symantec.com/docs/TECH97861|
Symantec Mail Security for Microsoft Exchange is to be installed on a SBS.
Is this fully supported?
Are there any concerns?
What best practices are recommended?
Is SMSMSE fully supported on Microsoft Windows Small Business Server?
Microsoft Small Business Server is a standard Windows Operating System image with already bundled and configured Microsoft applications. For further details on Small Business Server click on the following Microsoft link: http://www.microsoft.com/en-us/server-cloud/windows-small-business-server/default.aspx
The following is the certification matrix for SMSMSE with SBS:
|SBS 2003||Supported||Not Supported|
If the version of SMSMSE or SBS you are using is not on the list above determine the underlying Windows Operating System and Exchange version on SBS. Then check the SMSMSE certification matrix to determine if this combination is supported: Symantec Mail Security for Microsoft Exchange certification matrix.
- Make sure that the correct number of threads are calculated.
See Calculating the Number of Scan Processes in Symantec Mail Security for Microsoft Exchange 5.x and 6.x
- Ensure that the correct exclusions are in place on the Server's Antivirus Program
Administrators should add centralized exclusions to ensure that there is no chance that the AV product, which protects the server's file structure, will scan materials that are in use by SMSMSE. The latest releases of Symantec Endpoint Protection (SEP) and Symantec Antivirus (SAV) should automatically detect MS Exchange and SMSMSE and set the correct exclusions. It is wise to create redundant exclusions to guarantee that there will be no interference. See Configuring exclusions when Symantec Mail Security for Microsoft Exchange and either Symantec Endpoint Protection or Symantec AntiVirus Corporate Edition are installed together
- If Symantec Endpoint Protection or Symantec Antivirus is installed, Ensure SMSMSE's LiveUpdate is Configured Correctly
For 32-bit Small Business Servers, SMSMSE's LiveUpdate should be disabled. SEP or SAV will automatically share definitions with SMSMSE. For 64-bit Small Business Servers, ensure that SMSMSE's LiveUpdate is enabled. For details, please see About Enabling LiveUpdate When Symantec Mail Security for Microsoft Exchange 6.0.9 and Symantec Endpoint Protection 11.x Are Installed on a 64-bit Exchange 2007 Server
- Ensure that the SBS has ample resources
The Small Business Server combines many important server roles on one computer (Active Directory Domain Controller, Exchange Server, MS SQL Server, SharePoint server, IIS, WSUS, and so on). Shortages of memory, processing power, and disk space can be common if the server is not configured and maintained well. A lack of resources has the potential to affect SMSMSE.
- Use Microsoft's SBS Best Practices Analyzer to ensure the server is in good health
Underlying issues such as low resources, old driver versions, and network trouble will have an effect on SMSMSE and MS Exchange. Microsoft has made a tool freely available which can analyze a Small Business Server and highlight any such issues. Symantec Technical Support recommends that these tools be run periodically and that server administrators act upon any errors, warnings, or recommendations.
If Symantec Endpoint Protection is installed on the same Small Business Server, please also see:
Best Practices documents for Symantec Endpoint Protection 11.0 on Microsoft Small Business Server
RapidRelease definitions for Symantec Mail Security for Microsoft Exchange (SMSMSE) do not update in networks using Forefront Threat Management Gateway 2010
How to Allow Rapid Release definition updates for Symantec Mail Security for Microsoft Exchange (SMSMSE) when Windows Firewall is enabled.
"Invalid OS version" after successful install of SMSMSE 6.0.8 on Windows 2008 SBS with Exchange 2007
Article URL http://www.symantec.com/docs/TECH97861