The company JAM Software werden vermutlich viele durch das Tool TreeSize kennen, allerdings hat JAM Software auch ein Produkt mit dem Namen „Exchange Server Toolbox“ im Programm. Laut JAM Software beinhaltet die Exchange Server Toolbox eine rechtssichere und DSGVO/GoBD konforme E-Mail Archivierung, sowie einen Spam-Filter auf SpamAssassin Basis, ein Virenscanner auf Basis von ClamAV und ein Regelsystem für die Automatische E-Mailverarbeitung. Zudem wird die Software recht günstig angeboten, eine Lizenz für 10 Postfächer kostet 169 EUR (inkl. MwSt) und einem Jahr Support, die Lizenz für 50 Benutzer liegt bei 479 EUR inkl. 1 Jahr Support.
The features of the Exchange Server Toolbox have aroused my curiosity, so here is a test in this article. A 30-day demo version is available at the following link:
Installation and configuration of Exchange Server Toolbox
The Exchange Server Toolbox is just under 221 MB in size and is installed directly on the Exchange Server in my test. My test environment only consists of a domain controller, an Exchange 2019 server and a client with Outlook.
The installation can be started without further preparation, the installation of other packages as a prerequisite is not required. Here are a few impressions of the installation:
The Exchange Server Toolbox installs a pre-trained Bayesian database, which I find quite practical, as the learning time should not be quite so long. However, I will take a closer look at the spam filter later.
During the installation of the Exchange Server Toolbox, the Exchange transport service is stopped. However, as the installation only takes about 10 minutes, you can probably get over this:
After the installation of the Exchange Server Toolbox, the basic configuration begins directly, first the ClamAV signatures are updated:
After the signatures for ClamAV have been downloaded, the configuration continues. Here too, only a few details are required at first:
Instead of a standard password, a secure password could have been created here. At least it is pointed out directly where it can be changed:
I find it quite funny that the Exchange Server Toolbox can also handle hMail as a mail server, so the name of the software doesn't quite fit :-)
The service account for the service can be created directly if the installing user has the corresponding authorizations in the Active Directory. However, an existing user or a local account can also be configured:
The Windows firewall is also configured accordingly, and the installation wizard also provides corresponding suggestions:
Der Klick auf den Link des Outlook Add-Ins führt zu einem Ordner auf dem Dateisystem. Der Pfad der geöffnet wird, ist allerdings nicht ganz korrekt, man landet im Unterordner „\bin“ der Exchange Toolbox Installation, das Setup für das Outlook Add-In findet sich aber im überordneten Ordner. Hier habe ich den Support von JAM Software angeschrieben und prompt eine Antwort erhalten: Problem ist bekannt und schon in der aktuellen Beta behoben. Der Support hat in meinem Fall also sehr schnell reagiert:
The installation and initial configuration are completed in around 10 minutes.
The first impression
After starting the Exchange Toolbox for the first time, it quickly becomes clear that the focus of the software is on simplicity. The GUI is clearly laid out and looks very tidy:
Bei den Virenschutz Einstellungen lässt sich nur wenig konfigurieren, dafür gibt es dann allerdings auch keine hohe Lernkurve, dies könnte ein Vorteil sein, wenn man Exchange Server nur „nebenbei“ administriert. Jedoch lässt sich die Exchange Server Toolbox auch mit jedem anderen On-Access Viren-Scanner kombinieren, dies bringt dann weitere Flexibilität und Konfigurationsmöglichkeiten mit sich:
The settings for the anti-spam function of the Exchange Server Toolbox are also very simple at first glance. In the GUI you have the option of configuring black and white lists. In addition, the user can further train the spam filter using the Outlook plug-in.
Falls man sich mit SpamAssassin auskennt, lässt sich unter dem Punkt „Benutzerdefinierte Konfiguration“ eine eigene SpamAssassin Konfiguration ablegen, hier lässt sich dann deutlich mehr konfigurieren als über die GUI (leider aber nur in Textform).
Für Spam oder Viren Mails keine Quarantäne, sondern in der Standardeinstellung wird der Mail nur das Wort „SPAM“ oder „VIRUS“ im Betreff hinzugefügt. Die Regeln lassen sich aber einfach anpassen, sodass Mails entweder komplett abgelehnt, oder in ein eigenes Quarantäne Postfach auf dem Exchange Server umgeleitet werden.
The Exchange Server Toolbox allows you to create rules for emails, similar to the Exchange transport rules. However, the Exchange Server Toolbox rules are much more comprehensive. For example, there is an autoresponder for incoming emails or the option to remove potentially dangerous Office attachments from emails. It is also possible to print emails directly, save attachments in a folder or use variables.
Ganz interessant ist auch das Feature „Verteilte Installation“, es lässt sich eine Exchange Server Toolbox als Masterinstallation definieren, diese verteilt die Konfiguration dann auf weitere Server, beispielsweise Spam-Filter in einer DMZ. So erreichen Spam und Viren erst gar nicht den Exchange Server.
Last but not least, there is also an archiving solution in the Exchange Server Toolbox, which is even GDPR-compliant and can handle multiple clients:
The archive can either be stored directly on the file system or set up in conjunction with an integrated database, as well as MSSQL and mySQL.
To access the archive, users need an Outlook add-in. The add-in can also be used to train the spam filter.
Unfortunately, there is no other way to access the archive, there is no web gui that you can call up via browser or an app for the smartphone. The search in the archive is therefore limited to Outlook.
The first impression is consistently positive. The software can be installed and set up comparatively quickly, after which little effort is required. You shouldn't lose sight of the price either: the software costs just EUR 169 for 10 users, including 12 months of updates and support. Incidentally, the support team responded very quickly during my test and helped me out. I even submitted a few suggestions for improvements, which were processed immediately. It remains to be seen whether the features I wanted will actually make it into the product, but the handling of my request was definitely exemplary.