Dear all I am interested to learn about Ex2010 edge server, I would like to know if anyone has written any blogs with setting up a Edge server. I am interested to learn about the content filters, policies, antivirus and spam detection for example I assume these would be subscription services (are they Microsoft Forefront?). Address re-writing and headers, monitoring traffic, DLP, etc If anyone can advise with useful websites and blogs, I have already taken a look at the Technet Library and I would like to look at some lab tutorials and diagrams.

Edge doesn't have content filters, policies, antivirus or spam detection. Those are all provided by add-on products, usually Forefront Protection for Excahnge. The thing I like best about Edge is that it maintains an hashed copy of AD so mail to nonexistent recipients doesn't have to come into your network. Address rewriting is provided by transport rules and I believe that the Hub Transport role also supports this with or without Edge. Edge itself is actually pretty easy to set up by itself. The process gets much more complicated and the system can get more buggy when you combine Edge and Forefront with TMG.Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."

Hi Mika, Henrik wrote an article series about the Edge 2007: Uncovering the Exchange 2007 Edge Transport Server http://www.msexchange.org/articles_tutorials/exchange-server-2007/planning-architecture/uncovering-exchange-2007-edge-transport-server-part1.html And Exchange team dispel some misconceptions about the E2007, it is worth reading: Exchange anti-spam myths revealed http://blogs.technet.com/b/exchange/archive/2009/11/13/exchange-anti-spam-myths-revealed.aspx Ed, I'm afraid only Edge has Address rewriting feature: You configure Address Rewriting agents on the Receive connector and Send connector on a computer that has the Edge Transport server role installed. Understanding Address Rewriting http://technet.microsoft.com/en-us/library/aa996806.aspx Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com Frank Wang TechNet Community Support

Hi Mika, Henrik wrote an article series about the Edge 2007: Uncovering the Exchange 2007 Edge Transport Server http://www.msexchange.org/articles_tutorials/exchange-server-2007/planning-architecture/uncovering-exchange-2007-edge-transport-server-part1.html And Exchange team dispel some misconceptions about the E2007, it is worth reading: Exchange anti-spam myths revealed http://blogs.technet.com/b/exchange/archive/2009/11/13/exchange-anti-spam-myths-revealed.aspx Ed, I'm afraid only Edge has Address rewriting feature: You configure Address Rewriting agents on the Receive connector and Send connector on a computer that has the Edge Transport server role installed. Understanding Address Rewriting http://technet.microsoft.com/en-us/library/aa996806.aspx Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com Frank Wang TechNet Community Support

My understanding was that the Edge Server can be used as a replacement for the traditional hardware / software hygiene tools that processes mail before is enters the Exchange Servers and when it leaves the Exchange Servers. Such a tool would definalety handle virus scanning / spam detection, content filtering, receipt authentication (with Exchange checking if smtp exists within AD using LDAP). Also possibiley check domain name authentication for inbound mail, the ability to blacklist and whitelist domains, allow some content filtering (add headers, re-write address), DLP, TLS, message tracking, etc.

Your understanding is partially correct as all of those services are possible with an edge server, however on its own the edge will only perform address validation (and then only if it is synchronised with a hub) you will need Forefront Protection and TMG for the other functions. Cheers, Steve

So you could potentially have Forefront on one server, TMG on another server, and Edge on another. Or Combine all Roles and Programs on one server? Or Leave Edge on the perimiter network and have Forefront and TMG on the same server in the production network? I am assuming that you would need to deploy Forefron for Exchange and TMG can also be configured to work with the web proxy?

You would either install FPE on the Edge server or use the TMG to filter email with Edge and FPE installed. This article could be helpful: http://www.msexchange.org/articles_tutorials/exchange-server-2010/migration-deployment/exchange-server-2010-edge-server-microsoft-threat-management-gateway.html

You would either install FPE on the Edge server or use the TMG to filter email with Edge and FPE installed. This article could be helpful: http://www.msexchange.org/articles_tutorials/exchange-server-2010/migration-deployment/exchange-server-2010-edge-server-microsoft-threat-management-gateway.html

Such a tool would definalety handle virus scanning / spam detection, content filtering, receipt authentication (with Exchange checking if smtp exists within AD using LDAP). Also possibiley check domain name authentication for inbound mail, the ability to blacklist and whitelist domains, allow some content filtering (add headers, re-write address), DLP, TLS, message tracking, etc. Hi Mika, Edge server cannot handle virus scanning, you should install Forefront Protection for Exchange Server 2010: For more detailed information about Edge's features: Understanding Anti-Spam and Antivirus Mail Flow http://technet.microsoft.com/en-us/library/aa997242.aspx Frank Wang TechNet Community Support

Hi Mika, Any updates?Frank Wang TechNet Community Support