What is included in WithSecure Standalone E-mail and Server Security Company Managed Corporate?

Exchange transport scanning – Scans message bodies and attachments in real time on Exchange.
Mailbox and folder scans – On-demand scans of user mailboxes and Exchange public folders.
SharePoint protection – Scans content on SharePoint Server 2016 and 2019 web front ends.
Server malware protection – File scanning, DeepGuard behaviour analysis and firewall on the server itself.
Spam Control and quarantine – Marks spam via message header and holds blocked attachments for review.
Important – Manufacturer support ended 31 March 2026; no further security fixes are provided.

What are the main benefits of WithSecure Standalone E-mail and Server Security Company Managed Corporate?

WithSecure Standalone E-mail and Server Security is the on-premises protection for Microsoft Exchange and SharePoint servers that was previously sold as F-Secure Email and Server Security. It runs standalone with its own browser-based Web Console, or it can be connected to WithSecure Policy Manager for central administration of several servers.

Filtering at the server – One infected attachment is cleaned centrally instead of on every workstation.
Internal mail covered – Also scans mail between internal users and content in public folders.
Attachment policies – Strips attachments by file name or extension before they reach mailboxes.
Shared quarantine – Several Exchange servers can use one quarantine database and file share.
Cluster support – Works with Exchange 2016 and 2019 Database Availability Group high-availability setups.
Remote administration – Web Console is reachable over HTTPS from administrator hosts you explicitly permit.

Which company size is WithSecure Standalone E-mail and Server Security Company Managed Corporate suitable for?

Technically, the product covers everything from a single Exchange server administered locally to multi-server and clustered Exchange environments managed through Policy Manager. Because WithSecure ended support on 31 March 2026, it now only makes sense for organisations of any size that already run it and need to keep an existing Exchange 2016 or 2019 environment covered for a short, planned transition period.

Does WithSecure Standalone E-mail and Server Security Company Managed Corporate meet the requirements of Swiss cybersecurity legislation?

Since 1 April 2025, the revised Information Security Act has required operators of critical infrastructure, for example in energy, healthcare, finance, transport and public administration, to report cyberattacks to the Federal Office for Cybersecurity (BACS) within 24 hours of discovery. Most private SMEs are not directly affected, but suppliers to such operators are often asked contractually for comparable measures. The product supports the detection side on the mail server: its quarantine and scan records show which malicious attachments were blocked on Exchange, which helps reconstruct an email-borne incident for a report. It does not detect attacks beyond the Exchange and SharePoint servers, provides no incident response workflow, and since manufacturer support ended on 31 March 2026 it can no longer be presented as a maintained security control. This information does not constitute legal advice; please check your specific obligations with a qualified specialist.

Does WithSecure Standalone E-mail and Server Security Company Managed Corporate meet the requirements of European cybersecurity legislation?

No software product makes an organisation compliant with the NIS 2 Directive, because the directive requires organisational risk-management measures, not individual tools. These measures include incident handling, business continuity and backup, supply chain security, vulnerability handling and disclosure, access control, the use of cryptography, and staff training. The product maps only to a narrow part of this: it filters malware and spam at the Exchange server and keeps quarantined items available for incident analysis. It offers no backup, no multi-factor authentication, no encryption management and no endpoint detection. Its end-of-life status also creates a gap under vulnerability handling, because a security product without vendor security fixes is itself an unpatched component in the environment.

Does WithSecure Standalone E-mail and Server Security Company Managed Corporate help with security questionnaires from large customers?

Only partially, and with one significant caveat. The product lets you answer yes to questions about malware scanning of incoming, outgoing and internal email, attachment filtering by file type, spam filtering, quarantine of suspicious messages, and antivirus protection on the mail and SharePoint servers. It does not cover questions about endpoint detection and response, patch management for third-party software, multi-factor authentication, backup, disk encryption or workstation protection. Most questionnaires also ask whether security software is vendor-supported and current, and since 31 March 2026 the honest answer for this product is no. WithSecure has not announced a direct successor for on-premises Exchange protection: its Server Security 16.01 in the Business Suite line remains supported until 30 September 2028 but has no Exchange-specific scanning, and Elements Collaboration Protection covers Microsoft 365 rather than on-premises Exchange. Organisations that keep Exchange on-premises should therefore plan a replacement from another vendor, while those moving to Microsoft 365 can stay within the WithSecure family.

What is the difference between Email and Server Security and Email and Server Security Premium?

The most decisive difference is Software Updater, which is only included in Premium and installs missing security updates for Windows and third-party applications on the protected server. Premium also adds DataGuard, which protects designated folders against ransomware-style changes, and Application control. Exchange protection, SharePoint protection, Spam Control and Email Quarantine Manager are identical in both editions. Both editions share the same end-of-life date of 31 March 2026.

Which limitations should you know before buying?

WithSecure lists end of life for Email and Server Security 16.00 on 31 March 2026, after which neither security nor non-security fixes are provided and virus definition updates are no longer tested with the product. The version 16.00 documentation covers Exchange Server 2016 and 2019, SharePoint Server 2016 and 2019, and Windows Server 2016 to 2022; Exchange Server Subscription Edition and Windows Server 2025 are not listed. The product protects on-premises servers only and covers neither Exchange Online, Microsoft 365 mailboxes nor workstations. The email quarantine requires a Microsoft SQL Server instance, which larger or multi-server setups need to license separately, and Microsoft Defender Antivirus must be disabled on the protected server. No region-limited features were found, although WithSecure notes that lifecycle terms can vary by region.