Announcement: New Knowledge Base
4 June 2020: We are pleased to announce the launch of a new Knowledge Base, Changelogs for Business Security Products, where you can find more details, such as bugfixes or new features, about the most recent releases of our business-related products.
Exchange DAG protection questions (storage, Linux, the meaning of dedicated).
A hungarian customer has been using a single-server Exchange setup, but now they want to build an Exchange 2016 DAG with 2 members and continue using FSAV ESS 12.11 on that. They have some questions left even after the reading the cluster deployment guide:
1., How much quarantine storage space requirement should they assume?
So far I only found this guidance: "As a minimum requirement, Quarantine database should have the capacity to store information about all incoming and outgoing mail to and from your organization that would normally be sent during 2-3 workdays."
2., The customer wants to place the quarantine storage area on a Linux-based file server, because they think it would be safer that way.
- I think granting that wish isn't possible, because the implementation document says this: "For the Database Availability Group (DAG) installation, the quarantine storage must be set on a dedicated computer. This computer has to be a member in the same domain with Exchange Servers."
However, Microsoft Corp. insists a Linux computer cannot be a true member of a domain, if "domain" means Active Directory membership. Is Samba imitation good enough for this purpose or worth trying?
- I think any quarantined content is stored in encrypted form by FSAV Exchange protection, so it's harmless even if located on a Windows file server. Thus the customer's worries are unfounded and there is no need for involving a Linux server. Can you confirm this?
3., If they must use a Windows-based server for storing the quarantine, is it really impossible to utilize a DAG member for that purpose and do they really have to provide a dedicated 3rd computer?
I think they need a non-DAG computer for that, because the document says: "For the Database Availability Group (DAG) installation, the quarantine storage must be set on a dedicated computer." However, they really want a confirmation on this issue.
Thanks in advance, Yours Sincerely:
Tamas Feher, 2F 2000 Kft., Hungary.