Wednesday, January 7, 2015

Microsoft Exchange Virus Scanning API (VSAPI) Removed

Back at the MVP Summit 2012 in Redmond, Microsoft announced to the Exchange MVP community that in Exchange 2013 they are going to pull the Microsoft Exchange Virus Scanning API (VSAPI) from the product.  This API is what allows anti-virus products to scan inside the information store for emails.  This early news came to me with a big smile on my face!

For years I have been advising customers NOT to install anti-virus products which scan the information store as it causes unnecessary load on the information store and has caused database corruption at some of my customers.  Despite my advice, some of my clients go ahead and installed this functionality anyway to meet a "compliance" checkbox which some integrator has flagged in a security audit.

I have always advised customers to perform anti-virus scanning at a transport level (SMTP) and flag emails before they reach the database to improve performance and allow for greater scalability.  It is important to note however, Anti-Virus products are always releasing new definitions and it is possible that a virus was allowed in due to the definitions not being able to detect it initially but being able to detect it at a later date.  Hence, this still proposes a risk to the business and can be caught using third party Anti-Virus products which use the Microsoft Exchange Virus Scanning API (VSAPI) right?  Well yes this is true, however I still do not recommend this.  A better solution is to run cached Exchange mode and allow client side Anti-Virus products to scan the users offline cache "OST file" for viruses on a regular basis and offset this load from your already busy mail servers.  This approach meets the same objective and does not require use of the Microsoft Exchange Virus Scanning API.

One of my customers who went against my advise and refused to disable Information Store scanning due to compliance requirements on Exchange 2010 now has no option but to remove it.   Microsoft Support must have finally had enough of dealing with issues from third party Anti-Virus products causing information store issues just like me!

Have a look at the following screenshot comparing a product GFI MailEssentials 2014 SR2 which has the ability to scan the information store on a Exchange 2010 server compared to an Exchange 2013 server.  Under the Email Security menu on the Exchange 2013 server (on the right), you will se the feature gone for good... not just in GFI but all anti-virus products.


A big thankyou to Microsoft for removing this API - this is one less argument I need to have with my customers!

Lastly, I still always recommend companies AppLock with Microsot AppLocker in Enterprise edition of Windows and do away with definition scanning Anti-Virus solutions, they are a thing of the past.  This is another argument I'm still having with the security compliance guys stuck in the dark ages, but we will save this for another blog post.

4 comments:

  1. I am here to give testimony of how i got back my husband, we got married for over 9 years and we had two kids. thing were going well with us and we where always happy. until one day my husband started to behave in a way i could not understand, i was very confused by the way he treated me and the kids. later that month he did not come back home again and he called me that he want a divorce, i asked him what have i done wrong to deserve this from him, all he was saying is that he want a divorce that he hate me and do not want to see me again in his life, i was mad and also frustrated do not know what to do,i was sick for more than 2 weeks because of the divorce. i love him so much he was everything to me without him my life is incomplete. i told my sister and she told me to contact a spell caster, i never believe in all this spell casting of a thing. i just want to try if something will come out of it. i contacted traditional spell hospital for the return of my husband to me, they told me that my husband have been taken by another woman, that she cast a spell on him that is why he hate me and also want us to divorce. then they told me that they have to cast a spell on him that will make him return to me and the kids, they casted the spell and after 1 week my husband called me and he told me that i should forgive him, he started to apologize on phone and said that he still live me that he did not know what happen to him that he left me. it was the spell that he casted on him that make him come back to me. my family and i are now happy again. Thank you Dr. Aluta for what you have done for me i would have been nothing today if not for your great spell. i want you my friends who are passing through all this kind of love problem of getting back their husband, wife , or ex boyfriend and girlfriend to contact traditionalspellhospital@gmail.com and you will see that your problem will be solved without any delay. He cast spells for different purposes like
    (1) If you want your ex back.
    (2) if you always have bad dreams.
    (3) You want to be promoted in your office.
    (4) You want women/men to run after you.
    (5) If you want a child.
    (6) You want to be rich.
    (7) You want to tie your husband/wife to be yours forever.
    (8) If you need financial assistance.
    (9) Herbal care
    (10) is the only answer to that your problem of winning the lottery
    Contact him today on: traditionalspellhospital@gmail.com

    ReplyDelete
    Replies

    1. buying windows 7 online , windows 7 ultimate valid product key free , office 2016 product key , get product key for windows multipoint server 2010 , windows 7 ultimate genuine product key , key for windows 7 ultimate , free active key window 7 ultimate , windows 10 product key , lSEFgk

      Delete
  2. I recently have a good luck spell cast on me by dr.savior and I want anyone to tell me how it use to work because still I had this spell cast on me different companies has been coming to me for me to work with them and I do not really know which of the companies is the right one for me and I’m so happy because since last 7months I lost my job and I have been looking for job and I was unable to get one for myself till I had this spell cast on me so is there anyone that can advice me on which of the companies that is right for me? And I also thank dr.savior for his help too anyone in need of help with spell I will advise you to contact him on this dr.savior02@gmail.com

    ReplyDelete

  3. IP scan 2.2.1
    fastest and good scanner for ever just put IP range which thing u want its scan and give u result

    http://bicombusiness.blogspot.com/2016/01/ip-scan-221.html

    ReplyDelete