How to Configure Exchange 2007 Anti-Spam Automatic Updates

After Enabling Auto updates, we need to make sure our Exchange 2007 Anti-Spam have those updates

To check:
From cmdlet run get-antispamupdates

This show you the currently installed update version.
UpdateMode : Automatic
LatestContentFilterVersion : 3.3.8414.660
SpamSignatureUpdatesEnabled : True
LatestSpamSignatureVersion : 3.3.8611.1336
IPReputationUpdatesEnabled : True
LatestIPReputationVersion : 3.3.8611.063
MicrosoftUpdate : Configured

You can then compare that to the latest version shown at:
http://catalog.update.microsoft.com/v7/site/Rss.aspx?q=exchange+server+2007+anti-spam&lang=en

If you find that its not updated or not properly configured you need to run:
Enable-AntispamUpdates -Identity SERVER01 -IPReputationUpdatesEnabled $True -MicrosoftUpdate RequestNotifyDownload -UpdateMode Automatic -SpamSignatureUpdatesEnabled $True

Then open Windows Update to check new updates

More info:
http://technet.microsoft.com/en-us/library/aa997658(EXCHG.80).aspx
http://technet.microsoft.com/en-us/library/bb125199(EXCHG.80).aspx

Anti-Spam for Exchange Server 2007 with Hub Transport

Symptoms:
After Installing new Exchange 2007 server with Hub Transport, you realized it is not Anti-Spam Enabled. Many information and Best Practice only refer to Edge Transport. What if you don't have any budged to created Edge server or you only run small organization but must have Anti-Spam mechanism?

Solution:
Actually the Anti-Spam features can be installed directly into the Hub Transport module on the Exchange Server using Power Shell.
1. Run the Install-AntispamAgents.ps1 script. This script is located in the %system drive%/Program Files/Microsoft/Exchange Server/Scripts
2. Restart the Microsoft Exchange Transport service:
Restart-Service MSExchangeTransport
3. Specify the internal SMTP servers by using the InternalSMTPServers parameter on the Set-TransportConfig cmdlet
set-transportconfig –internalsmtpserver x.x.x.x
4. Check 'Server Configuration\Hub Transport', notice the 'Anti-spam Updates Enabled' set to 'True'. If it's not you need to run:
Enable-AntispamUpdates -SpamSignatureUpdatesEnabled $true -UpdateMode Automatic
5. Add quarantine mailbox for administrator to check, deleted, and send again (Approved) quarantined email
6. Do required configuration (SCL and custom configuration) for Anti-Spam features:
- Content Filtering
- IP Allow List
- IP Allow List Providers
- IP Block List
- IP Block List Providers
- Recipient Filtering
- Sender Filtering
- Sender ID
- Sender Reputation

More info: http://technet.microsoft.com/en-us/library/bb201691.aspx