In Exchange 2013, does anti spam agent work with Mailbox server?

If yes, can I enable anti spam agent on a server running both Mailbox and Client Access Server?

Anti spam is a CAS feature, it is used for checking emails for spam related stuff.

if the server is having multi role, you can enable it.

Make sure you monitor the performance of the server after enabling it.

I read a article which says

"anti-spam agents in Exchange 2013 run on Mailbox servers"

Is that true? Or I mis-understand something?

It also says

"Even though the script (Install-AntispamAgents.ps1 ) will run without any errors on a CAS server, remember that you cannot enable the anti-spam agents on an Exchange 2013 Client Access server"

I'm sorry Vishwanath, but CAS is a stateless proxy and doesn't analyze emails.

WFG09,

In Exchange 2013, the Client Access server (CAS) role no longer performs any data rendering functionality. The Client Access server is a thin and stateless server that doesnt do any data rendering. Theres never anything queued or stored on the Client Access server.

That leaves the Edge and Mailbox roles which actually are capable.

Anti-Spam deals with emails\mail flow that means it deals with "MSExchange Trasport". Hence its part of the Mailbox Role.

Hence you are correct WFG09, but you should read more on Exchange server to increase the understanding on the product.

Here are some referernces.

Exchange 2013 Client Access Server Role:

http://blogs.technet.com/b/exchange/archive/2013/01/25/exchange-2013-client-access-server-role.aspx

Client Access server:

https://technet.microsoft.com/en-us/library/dd298114(v=exchg.150).aspx

That means I have to separate Client Access server (CSA) role and Mailbox role to different Exchange 2013 server, right?

Can I change the role of Exchange 2013 server after the installation is completed? 

Hi WFG09,

No, you don't need to split the roles. It will work on Edge\Mailbox Only server or Mailbox+CAS role server.

And you can't change role of Ex2013 after installation. You have to do a complete unisntall and fresh new role install.

Thanks Satya, i was little confused while responding, thanks for guiding in right way.