You did not become an IT admin to babysit a server that stopped getting patches.

THE FACTS

Three CVEs since October 2025. None will be fixed.

COMPARE YOUR OPTIONS

Three paths off Exchange. Here is how they compare.

Find a Reseller

You did not become an IT admin to babysit a server that stopped getting patches.

Ready to reduce your risk?

Choose the path that fits your timeline.

Choose based on where you want your email to live and how much control you want to keep.

Microsoft 365

Move to Microsoft cloud.

Where it runs
Microsoft cloud infrastructure. They manage everything.
Microsoft dependency
Permanent. Ongoing subscription required.
Migration support
You hire a consultant or handle it internally.
Pricing
Per person, per month. Ongoing.

Exchange Server SE

Stay on Exchange. New version.

Where it runs
Your own server. In-place upgrade from Exchange 2019.
Microsoft dependency
Yes. Ongoing subscription required.
Migration support
In-place upgrade available. Simpler than M365 migration.
Pricing
Server license plus per-user CALs. Both ongoing subscriptions.
GFI KerioConnect® deployment options
🖥️

Self-host on your hardware

Traditional on-premise deployment. Full control.

☁️

Self-host on a cloud VM

AWS, Azure, or any cloud VM you manage.

🤝

GFI hosting partner

Certified partners (US and EU). You stay hands-off.

🏦 Banking 🛡️ Insurance 🏥 Healthcare 🏭 Manufacturing 🏛️ Government ⚖️ Legal

Exchange 2016 and 2019 stopped receiving security patches in October 2025. GFI KerioConnect® replaces Exchange on your own server. Your staff keeps Outlook. All data moves automatically. Migration runs in the background while you keep working.

150+
countries deployed

HOW MIGRATION WORKS

You are changing the server. Your staff is not changing anything.

Everything below happens on the server side. Your people keep using Outlook the entire time.

Replace Exchange on your terms. A GFI engineer responds within 24 hours.

Go to form ↑
⚠️ Confirmed & Unpatched
CVE-2025-64666 Dec 9, 2025

Elevation of privilege: attacker gains admin rights over your server

CVE-2025-64667 Dec 9, 2025

Spoofing: attacker impersonates trusted senders in your business

CVE-2026-21527 Feb 10, 2026

Spoofing: attacker forges emails as if they came from you

⚠️ This list will grow. None will be fixed.

Microsoft 365

Move to Microsoft cloud.

Where it runs
Microsoft cloud infrastructure. They manage everything.
Microsoft dependency
Permanent. Ongoing subscription required.
Migration support
You hire a consultant or handle it internally.
Pricing
Per person, per month. Ongoing.

Exchange Server SE

Stay on Exchange. New version.

Where it runs
Your own server. In-place upgrade from Exchange 2019.
Microsoft dependency
Yes. Ongoing subscription required.
Migration support
In-place upgrade available. Simpler than M365 migration.
Pricing
Server license plus per-user CALs. Both ongoing subscriptions.
GFI KerioConnect® deployment options
🖥️

Self-host on your hardware

Traditional on-premise deployment. Full control.

☁️

Self-host on a cloud VM

AWS, Azure, or any cloud VM you manage.

🤝

GFI hosting partner

Certified partners (US and EU). You stay hands-off.

🏦 Banking 🛡️ Insurance 🏥 Healthcare 🏭 Manufacturing 🏛️ Government ⚖️ Legal
📧

Staff keep Outlook

Same inbox, calendar, folders, contacts. Nobody relearns anything.

📱

Phones stay in sync

ActiveSync and CalDAV/CardDAV. All devices stay connected.

📁

All data moves automatically

KEMT migrates everything. Rules and signatures need manual setup.

🔧

You manage less, not more

Web dashboard. If you manage Exchange today, you can manage this.

Rollback at every stage

Both servers run in parallel. Exchange keeps working until you say otherwise.

🖥️

GFI AppManager™ is optional

Free. One dashboard for all GFI products. Use it if you want it, skip it if you don't.

<1d
GFI KerioConnect® live

20%
off  Exchange migrations

Known unpatched vulnerabilities UNPATCHED
CVE-2025-64666
Elevation of Privilege
Dec 9, 2025
CVE-2025-64667
Spoofing
Dec 9, 2025
CVE-2026-21527
Spoofing
Feb 10, 2026

Will we lose any emails?

No. The Kerio Exchange Migration Tool (KEMT) moves all emails, folders, calendars, contacts, and tasks automatically. Rules and signatures need manual setup.

How long does migration take?

GFI KerioConnect® is live in under a day. Full migration: days for small teams, weeks for larger environments. Your GFI engineer scopes this precisely on the assessment call.

Do staff have to do anything?

No. They keep using Outlook. Same inbox, same folders. Migration happens in the background.

What if something goes wrong?

Both servers run in parallel. Your existing Exchange server keeps working. Rollback is available at every stage of the process.

Do we need specialist staff?

No. GFI KerioConnect® uses a web dashboard. If you manage Exchange today, you can manage this.

Already a GFI MailEssentials AI or GFI Exinda® AI customer?

You get 30% off GFI KerioConnect® plus Eloquens® AI free for year one.

20% off Exchange migrations

Microsoft stopped patching Exchange 2016 and 2019. GFI KerioConnect® gets you off in under a day.

Will we lose any emails?

No. The Kerio Exchange Migration Tool (KEMT) moves all emails, folders, calendars, contacts, and tasks automatically. Rules and signatures need manual setup.

How long does migration take?

GFI KerioConnect® is live in under a day. Full migration: days for small teams, weeks for larger environments. Your GFI engineer scopes this precisely on the assessment call.

Do staff have to do anything?

No. They keep using Outlook. Same inbox, same folders. Migration happens in the background.

What if something goes wrong?

Both servers run in parallel. Your existing Exchange server keeps working. Rollback is available at every stage of the process.

Do we need specialist staff?

No. GFI KerioConnect® uses a web dashboard. If you manage Exchange today, you can manage this.

Already a GFI MailEssentials AI or GFI Exinda® AI customer?

You get 30% off GFI KerioConnect® plus Eloquens® AI free for year one.

Go to form ↑

Ready to move off Exchange?

Choose the path that fits your timeline.

Exchange 2016 and 2019 stopped receiving security patches in October 2025. GFI KerioConnect® replaces Exchange on your own server. Your staff keeps Outlook. All data moves automatically. Migration runs in the background while you keep working.

< 1 day
GFI KerioConnect® live

150+
countries deployed

20%
off Exchange migration

Microsoft ended all security support for Exchange 2016 and 2019 in October 2025. These vulnerabilities are permanent. The list will grow.

CVE-2025-64666
Elevation of privilege: attacker gains admin rights over the server
Dec 9, 2025 Unpatched
CVE-2025-64667
Spoofing: attacker impersonates trusted senders
Dec 9, 2025 Unpatched
CVE-2026-21527
Spoofing: attacker forges emails as your organization
Feb 10, 2026 Unpatched

Compliance auditors are noticing

Unsupported infrastructure is being flagged as a policy violation in regulated industries.

Cyber insurers are asking

Unpatched Exchange now appears on renewal questionnaires from major carriers.

About Microsoft ESU: Microsoft offers a paid Extended Security Update program through April 2026. After that date, all Exchange 2016 and 2019 servers become permanently unpatched regardless of ESU enrollment.
📧

Staff keep Outlook

Same inbox, calendar, folders, contacts. Nobody relearns anything.

📱

Phones stay in sync

ActiveSync and CalDAV/CardDAV. All devices stay connected.

📁

All data moves automatically

KEMT migrates everything. Rules and signatures need manual setup.

🔧

You manage less, not more

Web dashboard. If you manage Exchange today, you can manage this.

Rollback at every stage

Both servers run in parallel. Exchange keeps working until you say otherwise.

🖥️

GFI AppManager™ is optional

Free. One dashboard for all GFI products. Use it if you want it, skip it if you don't.

Five steps. Your email keeps flowing the entire time.

Both systems run in parallel. Your GFI engineer scopes the timeline during the assessment call. Small deployments complete in days. Larger environments take weeks.

01

Request your migration guide

Submit the form. A GFI engineer reaches out to confirm your setup and sends a guide tailored to your environment within 24 hours.

02

Migration assessment call

One call with a GFI engineer. You agree a plan together. Nothing starts until you are comfortable with the scope and timeline.

03

Install GFI KerioConnect® alongside Exchange

GFI KerioConnect® installs next to your existing server. Both run in parallel. Your staff continues working in Outlook without interruption.

04

Pilot group migrates first

A small test group moves via KEMT. You verify emails, calendars, contacts, and folders are intact before the rest follow.

05

Full migration. Exchange retired.

Remaining staff migrates in batches. Mail routing cuts over to GFI KerioConnect® (typically one to two hours). Exchange is decommissioned.

Throughout the entire migration

Outlook keeps working for every staff member All data preserved automatically Phones and tablets stay in sync Both servers run in parallel Rollback available at every stage

Six questions IT admins ask first.

Three paths off Exchange. 

Microsoft ended all security support for Exchange 2016 and 2019 in October 2025. These vulnerabilities are permanent.

01

Request your migration guide

Submit the form. A GFI engineer sends a guide tailored to your environment within 24 hours.

02

Migration assessment call

One call with a GFI engineer. You agree a plan together. Nothing starts until you are comfortable.

03

Install alongside Exchange

GFI KerioConnect® installs next to your existing server. Both run in parallel. Staff keeps working in Outlook.

04

Pilot group migrates first

A small test group moves via KEMT. You verify everything is intact before the rest follow.

05

Full migration. Exchange retired.

Remaining staff migrates in batches. Mail routing cuts over (typically one to two hours). Exchange is decommissioned.

Throughout the entire migration

Outlook keeps working for every staff member All data preserved automatically Phones and tablets stay in sync Both servers run in parallel Rollback available at every stage

BEFORE YOU MIGRATE

Contact sales