Applies to: Exchange Server 2013

Topic Last Modified: 2012-09-18

You can configure Microsoft Exchange Server 2013 to rescan email messages already scanned for malware by the hosted email filtering service. Enabling this functionality provides another layer of defense against malware because the cloud-hosted filtering only scans inbound and outbound messages. Internal messages are scanned by the built-in anti-malware protection capabilities of Exchange 2013. By default, messages scanned in the cloud are not resubmitted for malware scanning on-premises.

Note:
This topic only applies to Microsoft Exchange Server 2013 customers who are using cloud-hosted email filtering.

What do you need to know before you begin?

  • Estimated time to complete: 15 minutes

  • You can't use the Exchange admin center (EAC) to perform this procedure. You can only use the Shell.

  • You need to be assigned permissions before you can perform this procedure or procedures. To see what permissions you need, see the “Anti-malware” entry in the Anti-Spam and Anti-Malware Permissions topic.

  • For information about keyboard shortcuts that may apply to the procedures in this topic, see Keyboard Shortcuts in the Exchange Admin Center.

Tip:
Having problems? Ask for help in the Exchange forums. Visit the forums at: Exchange Server, Exchange Online, or Exchange Online Protection

Use the Shell to rescan messages already malware scanned by the hosted filtering service

  1. To rescan messages already malware scanned by the hosted filtering service, run the following command:

    Copy Code 
    Set-MalwareFilteringServer -ForceRescan $true
    Note:
    To return to the default setting of not rescanning messages, re-set the above parameter to $false.

How do you know this step worked?

To verify that your Exchange 2013 server is rescanning messages for malware, run the following command and confirm that it returns a value of True:

Copy Code 
Get-MalwareFilteringServer | Format-List ForceRescan