Intra-Org Encryption

All mail traveling within an Exchange Server 2007 organization is encrypted by default. Transport Layer Security (TLS) is used for server-to-server traffic, Remote Procedure Call (RPC) is used for Outlook connections, and Secure Socket Layers (SSL) is used for Client Access traffic (Outlook Web Access, Exchange ActiveSync, and Web Services). This prevents spoofing and provides confidentiality messages in transit.

Opportunistic TLS Encryption

If the destination SMTP server supports TLS (via the “STARTTLS” SMTP command) when sending outbound e-mail from Exchange Server 2007, Exchange Server will automatically encrypt the outbound content using TLS. In addition, inbound e-mail sent to Exchange Server 2007 from the internet will be encrypted if the sending server supports TLS (Exchange Server 2007 automatically installs SSL certificates).

Transport Rules

Exchange Server 2007 includes a policy engine based on rules that execute on Hub Transport servers. With Transport Rules, administrators and compliance officers can establish and enforce regulatory or corporate policies on internal or outbound e-mail, voice mail, or fax. For example, using a wizard in the Exchange Management Console or the command line in Exchange Management Shell, rules can be written that would prohibit communication between members of distinct distribution lists, append a disclaimer to any message being sent externally, or BCC the compliance officer anytime a specific phrase appears in the subject or content of a message..

Flexible Journaling

Journaling is flexible in Exchange Server 2007. Journaling can be triggered per database, per distribution list, or per user. All messages can be journaled, or just those sent internally or externally.

Archive Integration

Journaled messages can be archived to any SMTP address, including an Exchange mailbox or Windows SharePoint Services site.

Local Continuous Replication

Availability can be increased using continuous replication of data across multiple disks on a single server. This establishes a second copy of the production database on the local server that is kept up-to-date automatically. In the event of a disk failure or data corruption, switching over to the copy database provides a less costly and less complex recovery solution for the administrator..

Standby Continuous Replication

Availability can be increased using replication between geographically dispersed data centers in combination with LCR and CCR. Data recorded on the source server node is copied to a destination server node (the standby server) and multiple destination servers can be created for a single source server. In the event of a disk failure, data corruption, or complete site failure, the administrator can switch to the standby server preventing data loss and enabling a seamless transition for users, providing a less costly and less complex recovery solution for the administrator.

Database Portability

In the case of a complete server failure, an empty dial tone mailbox database can be created on a new server, enabling users to send and receive e-mail while recovery is underway. A backup of the mailbox database can then be recovered into the dial tone database even though the original database in the backup was created on a different server..

Calendar Attendant

The Calendar Attendant reduces scheduling conflicts by limiting calendar items (request, declines, accepts) in the inbox to the latest version. The Calendar Attendant also marks meeting requests as tentative on recipient calendars until users can act on the request and relies on the Exchange Server 2007 free/busy Web service for always up-to-date availability information..

Scheduling Assistant

The Scheduling Assistant helps users efficiently schedule meetings by providing visual guidance on the best and worst dates and times to meet based on meeting invitees and required resources. .

Search

Information can be quickly found from a mobile device using the search capability of Exchange ActiveSync. When executing a search from a mobile device, both the local device store and the user’s entire Exchange mailbox are queried. Results found through the over-the-air search of the Exchange mailbox can be rapidly retrieved to the device. This capability enables access to information sent or received days, weeks, or even months before, regardless of the storage limitations of the mobile device..

Rich Experience on a Breadth of Devices

Users can get a familiar experience on a range of mobile devices without requiring the organization to deploy expensive third-party software or services. The Exchange Server 2007 ActiveSync protocol is licensed for use by Windows Mobile, Nokia, Symbian, Motorola, Sony Ericsson, Palm, and DataViz. Given the breadth of partners, device choice continues to expand.

LinkAccess

When a user receives a link to a Windows SharePoint Services site or file share while using a mobile device, Exchange Server 2007 uses LinkAccess to retrieve and display the document, no VPN or tunnel required.

Outlook 2007 Experience

Self-Service Support

The Outlook Web Access 2007 Options menu allows users to quickly and easily resolve many of the most common sources of helpdesk calls on their own. OWA users can request a Unified Messaging voice mail PIN reset, issue a remote wipe request to their mobile device should it be lost or stolen, and add senders to their safe or block list all within Outlook Web Access. Service Pack 1 (SP1) includes a confirmation from Exchange when the remote wipe request is successfully completed..

Search

Exchange Server 2007 mailboxes are fully indexed by default, allowing users to quickly search for information from Outlook Web Access. Re-indexing is significantly faster than Exchange Server 2003, and search spans both content within the e-mail itself and data contained in attachments.

Remote Document Access: WebReady Document Viewing

Outlook Web Access 2007 can transcode a variety of document types – including Microsoft Word, Microsoft Excel, Microsoft PowerPoint, and PDF files – from their native format into HTML so that they can be viewed in a client browser even if the application that created the document is not installed on the client. This allows users to be productive from almost any machine and keeps viewed documents safe, even on kiosk machines, since HTML documents are purged by Outlook Web Access at logoff or session timeout. Service Pack 1 (SP1) includes support for Microsoft Office 2007 file formats.

Voice Messaging System

Voice mail can now be stored in the mailbox and accessed from a unified inbox in Outlook, Outlook Web Access, on a mobile device, or from a standard telephone. This unification improves employee productivity by simplifying access to the most common types of communications. It also dramatically reduces cost by removing the need for a standalone voice mail system and by taking advantage of any existing investments in Active Directory. Exchange Server 2007 Unified Messaging can be connected with a legacy private branch exchange (PBX) infrastructure through an IP gateway, or can be directly connected with certain IP PBX installations..

Speech-Enabled Automated Attendant

The Attendant answers calls using an automated operator, with customizable menus (e.g. “press 1 for sales”), and global address list directory lookups (e.g. “who would you like to contact?”). Callers can interact with the Automated Attendant through touch tone menus or their voice using speech recognition..

Outlook Voice Access

Users can access their Exchange mailbox using a standard telephone, available anywhere. Through touch tone or speech-enabled menus, they can hear and act on their calendar, listen to e-mail messages (translated from text to speech), listen to voice mail messages, call their contacts, or call users listed in the directory..

New Voice Mail Alerts

When combined with Office Communication Server 2007 (OCS), users can get an indicator on their Office Communicator client or OC-enabled desktop phone that a new voice mail message is in their inbox.

Exchange Management Console

Improves the graphical user interface for management. Management actions are easily discovered through the action pane, and the navigation tree is simplified to three levels deep. Exchange management and troubleshooting tools are integrated in the toolbox. The Exchange Management Console is built upon the Exchange Management Shell; actions taken in the Console are also available, and visible, through the command line shell.

Extended Integration with Active Directory

Use of Active Directory sites helps automate new server discovery and configuration within the organization. The topology of an Exchange Server 2007 environment is defined and managed through Active Directory, alongside other servers in the infrastructure.

Exchange Troubleshooting Tools

In addition to the deep integration of Exchange Best Practices Analyzer, Exchange Server 2007 provides several troubleshooting tools within the toolbox in the Exchange Management Console. These tools are kept up-to-date with the latest information and capabilities through integration with Microsoft Update. Included in the toolbox are the Exchange Mail Flow Troubleshooter, Exchange Database Troubleshooter, and the Exchange Performance Troubleshooter. The Exchange Mail Flow Troubleshooter can diagnose and help remediate inbound and outbound e-mail failures. The Exchange Database Troubleshooter isolates database mounting failures, is used to manage recovery storage groups, and walks the administrator through dial tone recovery. Finally, the Exchange Performance Troubleshooter identifies the cause of Outlook or Exchange performance problems and advises on remediation.

Flexible Permission Model

Permissions become more granular and straightforward to manage in the Exchange Server 2007 environment. The permissions model enables a set of new, predefined administrator “roles.”

Server Roles

Exchange Server 2007 is a modular system of five server roles–Edge Transport, Hub Transport, Mailbox, Client Access, and Unified Messaging – that reduces the time required for installation; minimizes manual, post-install configuration by the administrator; and limits the surface area available for attack to increase security. Administrators also gain the flexibility to deploy only the features and services necessary on a given server and manage accordingly. All server roles, with the exception of Edge Transport, can be deployed on a single server, and only the Hub Transport and Mailbox server roles are required for Exchange Server 2007 installation.

Exchange Best Practices Analyzer

Embedded in the Exchange Server 2007 setup process and available through the Exchange Management Console toolbox, the Exchange Best Practices Analyzer can be used to proactively examine the topology and individual servers for configuration discrepancies that may lead to service outages and reliability problems in the future. The Analyzer surfaces warnings or error messages to the administrator and information on how to address the warning or error. It is recommended that the Exchange Best Practice Analyzer be run periodically against an Exchange environment to ensure optimal configuration.

Single Migration Engine

Exchange Server 2007 provides a single, comprehensive tool for administrators to perform intra or inter-organizational migrations, minimizing migration complexity.

Native x64

As a native 64-bit application, Exchange can access more memory, ensuring high performance and reliability as mailbox sizes and the number of user accounts per server increase.

Storage Optimization

With reduced input/output (I/O) requirements (up to 75 percent reduction in I/O per second) enabled by the larger memory caches available on x64 systems, Exchange Server 2007 makes better use of existing storage systems and also allows administrators to use low-cost options like Direct Attached Storage, even in demanding, enterprise environments.

Simplified Routing and Optimized Bandwidth

Message routing is automatically determined, and mail is delivered using the most direct route by default. Administrators can also configure schedule and priority to optimize bandwidth usage.

Web Services Application Programming Interface (API)

Developers now have a simple way to embed information from the Exchange Server 2007 mailbox or calendar within line-of-business or other custom applications. The Exchange Web Services API provides a single, documented, standards-based API to be called from any client, language, or platform.

Free/Busy Web Service

The Free/Busy Web Service offers a flexible, extensible way to access free/busy information in Exchange Server 2007. Used by clients such as Outlook, Outlook Web Access, and mobile devices based on Exchange ActiveSync, the Free/Busy Web Service allows developers to embed free/busy information in line-of-business or custom applications

• Edge Transport server role

• Anti-spam: Connection Filtering

• Anti-spam: Sender and Recipient Filtering

• Anti-spam: Safe Sender List Aggregation

• Anti-spam: Sender ID

• Anti-spam: Content Filtering

• Anti-spam: Outlook E-Mail Postmark

• Anti-spam: Spam Assessment

• Anti-spam: Service Resilience

• Anti-spam: Anti-spam Stamp

• Anti-spam: Two-Tiered Spam Quarantine

• Anti-spam: Consolidated Management

• Antivirus Extensibility: Attachment Filtering

• Antivirus Extensibility: Edge Protocol Rules

• Antivirus Extensibility: Antivirus Stamp

• Antivirus Extensibility: Deep Integration for Antivirus Scanning

Spam Control: GFI EmailEssentials

Anti-spam software for Exchange
Every day businesses receive thousands of fraudulent, inappropriate and offensive emails. Deleting spam is time consuming, email server performance is affected and the security of your network is at risk from malicious emails. With over 60 awards to its name, 70,000 satisfied customers and unbeatable price-performance, GFI MailEssentials for Exchange/SMTP/Lotus is a best-of-breed anti-spam package that is easy to set up, that captures over 98% of spam and that also eliminates the need to install and update anti-spam software on each desktop.

GFI MailEssentials uses various techniques such as Bayesian filtering to achieve such a high spam detection rate whilst its white-listing technology guarantees what is possibly the lowest level of false positives in the industry. This technology enables the software to automatically adapt to your email environment and constantly tune and improve spam detection.

GFI MailEssentials also detects and blocks phishing emails, and stops the latest in spam threats, such as attachment spam. GFI MailEssentials also adds email management tools to your mail server: disclaimers, mail monitoring, Internet mail reporting, list server, server-based auto replies and POP3 downloading

Email anti-virus software protecting against email viruses, exploits and trojans
The need to monitor email messages for dangerous, offensive or confidential content has never been more evident. The most deadly viruses, able to cripple your email server and corporate network in minutes, are being distributed worldwide via email in a matter of hours. Products that perform single vendor anti-virus scanning do not provide sufficient protection. Worse still, email has become the means for installing backdoors (trojans) and other harmful programs to help potential intruders break into your network. Products restricted to a single anti-virus engine will not protect against email exploits and attacks of this kind.

Your only defense is to install comprehensive granular user-based email content policy and anti-virus software to safeguard your mail server and network. GFI MailSecurity acts as an email firewall and provides mail security by protecting you from email viruses, exploits and threats, as well as email attacks targeted at your organization.

GFI