WithSecure Standalone E-mail and Server Security Partner Managed Corporate

What is included in WithSecure Standalone E-mail and Server Security Partner Managed Corporate?

Exchange transport protection – Scans inbound, outbound and internal mail for malware and disallowed attachments.
Spam control – Filters incoming mail with adjustable levels, plus safe and blocked sender lists.
Email Quarantine Manager – Release, reprocess or delete held messages from a searchable SQL-based quarantine.
SharePoint protection – Scans documents on upload and download, with optional download blocking.
Server malware protection – Real-time scanning, DeepGuard behaviour analysis, firewall and browsing protection.
Important – No patch management or Exchange Online coverage; EDR licensed separately.

What are the main benefits of WithSecure Standalone E-mail and Server Security Partner Managed Corporate?

WithSecure Standalone E-mail and Server Security is the on-premises Email and Server Security product from the WithSecure Business Suite, formerly sold as F-Secure Email and Server Security, for Windows servers running Microsoft Exchange or SharePoint. In standalone mode, each server is administered locally through its Web Console, without a WithSecure Policy Manager installation.

Direction-based policies – Separate rules for inbound, outbound and internal mail contain internal outbreaks.
Real file type recognition – Detects attachments disguised with harmless-looking extensions before delivery.
Unsafe URL blocking – Drops or quarantines messages whose body links are rated unsafe.
Retrospective mailbox scans – Rechecks mail already stored in mailboxes and public folders on schedule.
Delegated quarantine handling – Authorised staff release or reprocess quarantined mail through a web interface.
Current Exchange support – Version 16.00 supports Exchange Server SE and Windows Server 2025.

Which company size is WithSecure Standalone E-mail and Server Security Partner Managed Corporate suitable for?

The product is aimed at companies that still operate their own Exchange or SharePoint servers on Windows Server, rather than a Microsoft 365 tenant. Standalone administration works best where there are one or a few mail and collaboration servers, because every server is configured separately in its own Web Console. Organisations with many servers are better served by the centrally managed mode through WithSecure Policy Manager, which the same product also supports.

Does WithSecure Standalone E-mail and Server Security Partner Managed Corporate meet the requirements of Swiss cybersecurity legislation?

The revised Information Security Act obliges operators of critical infrastructure, such as energy suppliers, hospitals, financial institutions and public authorities, to report cyberattacks to the Federal Office for Cybersecurity (BACS) within 24 hours of discovery; most companies outside these sectors are not directly affected. For affected operators, the product supports the detection side of this obligation: blocked malware, disallowed attachments and unsafe URLs trigger administrator notifications, and every quarantined item is stored with its reason and time. This gives the IT team concrete facts for a first report, such as which mailbox received a malicious attachment and when. The product does not provide an incident reporting workflow, endpoint telemetry or event correlation across workstations, so determining how far an attack spread requires additional tools. This information does not constitute legal advice; whether your organisation is subject to the reporting obligation should be clarified with a legal specialist or directly with BACS.

Does WithSecure Standalone E-mail and Server Security Partner Managed Corporate meet the requirements of European cybersecurity legislation?

No single product makes an organisation compliant with the NIS 2 Directive, because the directive requires risk-management measures that combine technology, processes and responsibilities. These measures include incident handling, business continuity, supply chain security, vulnerability handling, access control and basic cyber hygiene. The product contributes to cyber hygiene and incident handling on the mail and collaboration layer: it filters malware, spam and unsafe links before delivery and keeps a quarantine record that documents what was blocked. It does not cover backup and recovery, multi-factor authentication, vulnerability or patch management in this edition, or cloud mailboxes in Exchange Online. Organisations in scope of NIS 2 therefore need further measures alongside this product.

Does WithSecure Standalone E-mail and Server Security Partner Managed Corporate help with security questionnaires from large customers?

Partly: it answers the questionnaire items on email and server malware protection, but not those on detection and response or patching. You can confirm that incoming, outgoing and internal mail is scanned for malware, that attachments are filtered by type and real file format, that spam and unsafe links are filtered, that SharePoint content is scanned, and that the Windows servers themselves have real-time malware protection with a firewall. You cannot use it to answer questions about endpoint detection and response, third-party patch management, workstation protection, multi-factor authentication, backups or Microsoft 365 mailbox security. The quickest way to close the patching gap within the same family is Email and Server Security Premium, which adds Software Updater and application control. EDR and workstation protection require additional WithSecure products, which keeps management and support with one vendor.

What is the difference between Email and Server Security and Email and Server Security Premium?

The most decisive difference is patch management: only Premium includes Software Updater, which installs missing security updates for Windows and third-party applications on the server. Premium also adds DataGuard, which protects selected folders against ransomware, and application control for restricting which programs may start. Mail and SharePoint protection, spam control and the quarantine manager are identical in both editions. The retail name of this product does not include Premium, so its feature set corresponds to the standard edition.

Which limitations should you know before buying?

The product protects on-premises Exchange and SharePoint only; mailboxes in Exchange Online or Microsoft 365 are not covered, and WithSecure offers Elements Collaboration Protection for that purpose. It runs on Windows Server 2016, 2019, 2022 and 2025, with no Linux version. In standalone mode, the Web Console manages only the Exchange and SharePoint settings, while the server's antivirus settings are limited to the subset available in the local user interface. The email quarantine requires an existing Microsoft SQL Server instance, which is often overlooked during planning. WithSecure's documentation does not describe any country-specific feature restrictions for this product.

Frequently asked questions about WithSecure Standalone E-mail and Server Security Partner Managed Corporate

Can the product be installed in an Exchange Database Availability Group?

Yes. WithSecure lists Exchange Server 2016 and 2019 Database Availability Groups as supported cluster configurations.

Can it run alongside another antivirus product on the same server?

No. WithSecure requires potentially conflicting antivirus or server security software to be uninstalled before installation, so plan the removal of the previous product as part of the rollout.

Does it scan Outlook data files stored on the server?

Yes. Version 16.00 added a mailbox scanning feature that analyses OST and PST files for infections, which covers archived mail that never passes through the Exchange transport layer.