Looking for a best practice solution for virus/spyware/spam protection for a windows 2008 server that is an Exchange server 2010 and a file server as well.

Forefront is developed/supported by Microsoft, so it is likely the best bet. This version is for Exchange 2010: http://technet.microsoft.com/en-us/evalcenter/ee423728.aspx Forefront Client Security should probably be used as the A/V for the file server and the general OS, but you will likely need to ensure that the Exchange DBs, and Logs are not scanned with FCS: http://www.microsoft.com/forefront/clientsecurity/en/us/default.aspx See these articles for recommended exclusions: http://support.microsoft.com/kb/943556/en-us http://technet.microsoft.com/en-us/library/aa997602%28EXCHG.80%29.aspx -- Mike Burr

Does FCS need a management server?

Hi, Thank you for your post here. Yes, FCS (Forefront Client Security) clients can work without any management server. However, FCS will need 1 to 6 management server which takes different roles typically. You may refer to the Protecting home computers section from the FCS deployment guide. Forefront Client Security http://technet.microsoft.com/en-us/library/bb404259.aspx