Antispam Protection: Exchange IMF or Forefront?

With Exchange 2007, customers will have two Exchange server-based Microsoft options for blocking spam: the built-in Intelligent Message Filter (IMF) or Forefront Security for Exchange Server 2007 (FSE), a fee-based Exchange 2007 add-on which can block spam in addition to providing antivirus protection for e-mail. This decision may also be influenced by whether the customer has purchased the new Exchange 2007 Enterprise Client Access Licenses (CALs), which give users the right to use certain new Exchange 2007 features, such as unified messaging. These CALs, if purchased with Software Assurance, give the organization rights to run FSE at no extra charge.

Which Is Best for Antispam?

For spam protection, FSE offers a few benefits not provided by the Exchange 2007 IMF. While the IMF uses only heuristic rules to look for patterns that classify the likelihood that a message is spam, FSE not only uses heuristics but also connects multiple times a day to Microsoft to download signatures of known spam and IP addresses of known spammers. This information allows it to identify some spam deterministically rather than relying on heuristics alone.