The purpose of this Request for Information (RFI) is to obtain information on the availability of software products for replacing Microsoft Forefront protection for Exchange 2010
The Organization for Security and Co-operation in Europe (OSCE) with its Headquarters in Vienna, Austria is using Microsoft Forefront protection for Exchange 2010 which is currently installed on 11 Exchange 2010 servers and is protecting approximately 4000 Exchange 2010 on premise mailboxes.
Microsoft is going to stop support for Microsoft Forefront Protection for Exchange by the end of 2015 therefore, the OSCE is seeking to identify the potential solution that can replace the existing system.
Our technical requirements for Forefront protection for Exchange 2010 replacement are:
- Full on premise solution (exception only for definition updates)
- Primarily used for Anti-Virus/Anti-Malware
- If Anti-SPAM is a feature, it should be possible to disable it
- Support for Exchange 2010 and Exchange 2013
- Support for Windows Server 2008R2 and 2012R2 Standard and Enterprise
- Support for physical and VMWare 5.5+ virtualized servers
- Has to work on Hub/Transport and Mailbox roles
- Online/Real-Time scanning of mails
- Scheduled Mailbox scanning (on demand)
- Multiple AV scanners to choose from, at least one to be different from CLAM, F-Secure, McAfee
- Update of scanning definitions on regular bases (minimum once per day)
- Central management interface for maintenance and administration of up to 15 Exchange servers with role based access. Alternatively local interfaces on all Exchange servers
- Statistics (Daily, Weekly, Monthly, Yearly) to be run as report and to be scheduled to be sent as mail
- Exclusions for file types, email addresses, etc.
- Quarantine area
- License based on mailboxes or servers
- Minimal performance impact
- Has to be installed on existing Windows 2008R2 Exchange 2010 servers
- Alerting per Mail
- Should not require global Exchange administration permissions to be administered and maintained
- Interface language is English
- Multiyear license
- License for test environment
- Has to be able to work with high volume traffic – 10000+ mailboxes
- Mail pass thru mode - disable all scanning features
- Automatic configuration backup to file or other backup methods
- All in one licensed product, no additional costs for engines, databases, etc.
- Maintenance mode for Exchange updates
- Option to choose behaviour on encrypted mails (blocking, path thru, etc.)
- Check of signatures and mime coding for infection or threats
We are interested to receive technical information on the potential software products available on the market which are fulfilling the above technical requirements. Please send your information at yury.golovkov@osce.org