Replace Exchange before the patches run out.
WHAT MIGRATION ACTUALLY INVOLVES
You are changing the server.
Your staff is not changing anything.
Find a ResellerReplace Exchange
before the patches run out.
Support ended October 14, 2025. Since then the only route to a security patch has been a separate paid contract, bought through a Microsoft account team and requiring an Enterprise Agreement. That program ends October 31, 2026 with no extension. GFI KerioConnect® replaces Exchange on your own server. Your staff keeps Outlook.
Zero
Retraining. Staff keeps Outlook
Four questions IT admins ask first.
GFI KerioConnect® runs on your own server, keeps your staff in Outlook, and is live in under a day. A GFI engineer replies within 24 hours.
Get your migration guide
⚠️ Confirmed & Unpatched
CVE-2025-64666
Dec 9, 2025
Elevation of privilege: attacker gains admin rights over your server
CVE-2025-64667
Dec 9, 2025
Spoofing: attacker impersonates trusted senders in your business
CVE-2026-21527
Feb 10, 2026
Spoofing: attacker forges emails as if they came from you
⚠️ This list will grow. None will be fixed.
Will we lose any emails?
No. KEMT moves email, folders, calendars, contacts and tasks
automatically. Rules, signatures, delegate permissions and distribution groups are recreated
manually, and your engineer inventories these on the assessment call so the work is scoped
before migration starts.
How long does it take, and what if something goes wrong?
GFI KerioConnect® is live and running in parallel in under a day.
Full migration takes days for small teams and weeks for larger environments, because the
timeline depends on how many mailboxes you have and how many you move per batch. Both servers
run side by side throughout, so your existing Exchange server keeps working and rollback is
available at every stage.
Can we just buy ESU and decide later?
Only if you hold a Microsoft Enterprise Agreement. Microsoft sells Exchange ESU as a separate
contract through your account team. It is not included in Volume Licensing or Software
Assurance, and unlike Windows Server ESU there is no distributor or CSP route, so most small
and mid-sized organizations cannot buy it at any price.
If you do hold an EA, Period 2 runs to October 31, 2026 and Microsoft has confirmed there is
no third period. It covers only Critical and Important updates, Microsoft has not committed to
releasing any during the period, eligibility is limited to Exchange 2016 CU23 and Exchange
2019 CU14 or CU15, and it does not let you open support cases. It buys eligibility and time,
not a resolution.
Do we need specialist staff to run it?
No. GFI KerioConnect® uses a web dashboard, and there are no Microsoft
server licenses, CALs or Software Assurance to track. If you manage Exchange today, you can
manage this.
How does the 30% migration discount work?
It applies to new subscribers migrating to GFI KerioConnect® from Exchange. Your order
needs to be placed by September 30, 2026, and the date that counts is when you order, not when
your migration finishes. It does not stack with other offers.
Already a GFI customer? A different offer applies to you, on its own page:
GFI MailEssentials AI customers
or GFI Exinda AI customers.
30% off
New subscribers migrating from Exchange
CVE-2025-64666
Elevation of Privilege
Dec 9, 2025
30% off Exchange migrations
Microsoft stopped patching Exchange 2016 and 2019. GFI KerioConnect® gets you off in under a day.
Support ended October 14, 2025. Since then the only route to a security patch has been a separate paid contract, bought through a Microsoft account team and requiring an Enterprise Agreement. That program ends October 31, 2026 with no extension. GFI KerioConnect® replaces Exchange on your own server. Your staff keeps Outlook.
Under a day
Server live and running in parallel
Zero
Retraining. Staff keeps Outlook
30% off
New subscribers migrating
from Exchange
📧
Staff keep Outlook
Same inbox, calendar, folders, contacts. Phones stay in sync. Nobody relearns anything.
📁
Mailbox data moves automatically
KEMT migrates email, folders, calendars, contacts and tasks. Rules, signatures, delegate
permissions and distribution groups are recreated manually, scoped up front.
⏪
Rollback at every stage
Both servers run in parallel. Exchange keeps working until you say otherwise.
🔧
You manage less, not more
Web dashboard, and a GFI engineer with you throughout. If you manage Exchange today, you
can manage this.
What you stop paying Microsoft for
- Server licenses
- Per-user CALs
- Software Assurance
One per-mailbox subscription instead.
Ask for a like-for-like quote against your current CAL count and take the comparison to
your finance team.
What happens after you submit
- Guide within 24 hours. Tailored to your environment by a GFI engineer.
- One assessment call. You agree the plan. Nothing starts until you are comfortable.
- Pilot, then cutover. A test group moves first. Mail routing switches in one to two hours.
Will we lose any emails?
No. KEMT moves email, folders, calendars, contacts and tasks
automatically. Rules, signatures, delegate permissions and distribution groups are recreated
manually, and your engineer inventories these on the assessment call so the work is scoped
before migration starts.
How long does it take, and what if something goes wrong?
GFI KerioConnect® is live and running in parallel in under a day.
Full migration takes days for small teams and weeks for larger environments, because the
timeline depends on how many mailboxes you have and how many you move per batch. Both servers
run side by side throughout, so your existing Exchange server keeps working and rollback is
available at every stage.
Can we just buy ESU and decide later?
Only if you hold a Microsoft Enterprise Agreement. Microsoft sells Exchange ESU as a separate
contract through your account team. It is not included in Volume Licensing or Software
Assurance, and unlike Windows Server ESU there is no distributor or CSP route, so most small
and mid-sized organizations cannot buy it at any price.
If you do hold an EA, Period 2 runs to October 31, 2026 and Microsoft has confirmed there is
no third period. It covers only Critical and Important updates, Microsoft has not committed to
releasing any during the period, eligibility is limited to Exchange 2016 CU23 and Exchange
2019 CU14 or CU15, and it does not let you open support cases. It buys eligibility and time,
not a resolution.
Do we need specialist staff to run it?
No. GFI KerioConnect® uses a web dashboard, and there are no Microsoft
server licenses, CALs or Software Assurance to track. If you manage Exchange today, you can
manage this.
How does the 30% migration discount work?
It applies to new subscribers migrating to GFI KerioConnect® from Exchange. Your order
needs to be placed by September 30, 2026, and the date that counts is when you order, not when
your migration finishes. It does not stack with other offers.
Already a GFI customer? A different offer applies to you, on its own page:
GFI MailEssentials AI customers
or GFI Exinda AI customers.
Contact sales
Exchange 2016 and 2019 security patches stop permanently on October 31, 2026.
0
Exchange 2016 and 2019 security patches stop permanently on October 31, 2026.
0
After October 31, 2026, there is no patch at any price.
Book a call30% off for new subscribers migrating from Exchange. Order by September 30, 2026.
You are changing the server. Your staff is not changing anything.
Everything ends in October.
Support ended October 14, 2025. Paid Extended Security Updates bought two more periods. The second is the last one Microsoft will sell.
-
October 14, 2025
Support ended
Security updates, fixes and technical support stopped.
-
Oct 2025 to Apr 2026
ESU Period 1
A paid contract became the only way to receive any patch.
-
May to Oct 2026
ESU Period 2
The final period. A separate purchase, even if you held Period 1.You are here
-
November 2026 onward
No path
No patches at any price. Every new vulnerability is permanent.
With an Enterprise Agreement
You have until October 31, 2026.
ESU Period 2 is bought as a separate contract through your Microsoft account team, and it
covers only Critical and Important updates. It does not entitle you to support cases,
Microsoft has not committed to releasing any updates during the period, and eligibility is
limited to Exchange 2016 CU23 and Exchange 2019 CU14 or CU15.
Without an Enterprise Agreement
You have had no patch route since October 2025.
Microsoft sells Exchange ESU as a separate contract, purchased only through a Microsoft
account team, and it requires an Enterprise Agreement. It is not included in Volume Licensing
or Software Assurance, and there is no distributor or CSP route. If you do not hold an EA,
every Exchange vulnerability disclosed since October 2025 is still open on your server
today.
Show me the fastest way off Exchange
Every Exchange 2016 and 2019 security update since October 2025 has been
available only to ESU contract holders. After October 2026, no fix will be available to anyone at
any price.
Under a day
Server live and running in parallel
Everything ends in October.
Support ended October 14, 2025. Paid Extended Security Updates brought two more periods. The second is the last one Microsoft will sell.
Get your migration guideFind a Reseller30% off for new subscribers migrating from Exchange. Order by September 30, 2026.
Book a call
Order by September 30, 2026 to claim the 30% migration discount, based on order date
rather than migration completion.
0 days left to claim
the 30% migration discount. Order by September 30, 2026, based on order date rather than
migration completion.
The 30% migration discount closed on September 30, 2026. Talk to us about your options before
Microsoft stops patching Exchange on October 31, 2026.