Virus Scan is still appropriate. It is not going to protect the flow of mail through Exchange but it definitely will protect the operating system. Since everyone in your company connects through Exchange you definitely want to protect that server. We do have a product that will protect the flow of email from viruses -- McAfee Security for Exchange (formerly Groupshield for Exchange). That primarily protects the flow of email from viruses (spam is a secondary consideration). Having a gateway and/or SaaS solution to protect you from spam/viruses is a great idea you might want to strongly consider deploying MSE on your Exchange boxes as a last line of defense, too.'
VSE protects the OS.
MSE protects the Exchange application.
Both are appropriate.
Sorry for jumping in;
Does MSE protect the server OS also or would you need to install both MSE and VSE together on the same server?
NO, MSE does not protect the OS, only Exchange. MSE is used in Addition to VSE. VSE needs to be properly configured to exclude Exchange related files. Together, the server OS is protected as a multiple lines of defense strategy.
Exchange is an application with access to the Internet that has unique and special data structures that VSE is not designed to scan properly.
VSE is a general purpose protection, designed and tuned for the overall OS protection. VSE is not designed to handle specific internal application structures like those within, for example, Exchange, virtualiztion, or SQL.
MSE is focused on Exchange and knows about these data structures and is tuned to protecting Exchange from infection. MSE does not generally protect outside of Exchange. That is VSE's job. In addition, MSE adds functions that VSE knows nothing about,, such as Spam removal. Though, you may not need this function because you already have a device to handle this, MSE adds Exchange related features that VSE is not able to provide.
MSE covers areas that VSE does not, and VSE covers areas that MSE does not.
I hope this is helpful,