Forefront Protection 2010 for Exchange Server (FPE) offers flexibility in choosing which message queues to scan with the transport scan: inbound, outbound, or internal. By default, FPE scans all inbound, outbound, and internal e-mail messages.

This topic is a how to. Please keep it as clear and simple as possible. Avoid speculative discussions as well as a deep dive into underlying mechanisms or related technologies.

When you choose what kind of transport antimalware scanning you want to set up, your choice will also apply to any filtering options that are associated with the transport scan.

To select inbound, outbound, or internal scanning:

1. Open the Forefront Protection 2010 for Exchange Server Administrator Console, click Policy Management, and under Global Settings, click Scan Options.

2. In the Global Settings - Scan Options pane, under the Scan Targets – Transport section, there are three Target types check boxes for making queue selections:

   • Inbound—Selecting the Inbound check box (the default) configures FPE to scan all e-mail messages entering the Edge Transport or Hub Transport. Messages are designated as inbound if the message originated from or relayed through an external server. If the Exchange servers within that site or organization are not running FPE, this is an effective way to protect them from infected e-mail messages coming from the Internet.
   • Outbound—Selecting the Outbound check box (the default) configures FPE to scan all outgoing e-mail messages that leave your Exchange site or Exchange organization via the Edge Transport or Hub Transport. Messages are designated as outbound if at least one recipient has an external address.
   • Internal—Selecting the Internal check box (the default) configures FPE to scan all internal mail. Messages are designated as internal if they originate from inside your domain and all the recipients are located inside your domain.

3. Click Save after making any changes to your queue selections.