Replace Exchange before the patches run out.

WHAT MIGRATION ACTUALLY INVOLVES

You are changing the server. 
Your staff is not changing anything.

Find a Reseller

Replace Exchange 
before the patches run out.

Ready to reduce your risk?

Choose the path that fits your timeline.

Support ended October 14, 2025. Since then the only route to a security patch has been a separate paid contract, bought through a Microsoft account team and requiring an Enterprise Agreement. That program ends October 31, 2026 with no extension. GFI KerioConnect® replaces Exchange on your own server. Your staff keeps Outlook.

Zero
Retraining. Staff keeps Outlook

BEFORE YOU DECIDE

Four questions IT admins ask first.

GFI KerioConnect® runs on your own server, keeps your staff in Outlook, and is live in under a day. A GFI engineer replies within 24 hours.

Get your migration guide
⚠️ Confirmed & Unpatched
CVE-2025-64666 Dec 9, 2025

Elevation of privilege: attacker gains admin rights over your server

CVE-2025-64667 Dec 9, 2025

Spoofing: attacker impersonates trusted senders in your business

CVE-2026-21527 Feb 10, 2026

Spoofing: attacker forges emails as if they came from you

⚠️ This list will grow. None will be fixed.

Will we lose any emails?
No. KEMT moves email, folders, calendars, contacts and tasks automatically. Rules, signatures, delegate permissions and distribution groups are recreated manually, and your engineer inventories these on the assessment call so the work is scoped before migration starts.
How long does it take, and what if something goes wrong?
GFI KerioConnect® is live and running in parallel in under a day. Full migration takes days for small teams and weeks for larger environments, because the timeline depends on how many mailboxes you have and how many you move per batch. Both servers run side by side throughout, so your existing Exchange server keeps working and rollback is available at every stage.
Can we just buy ESU and decide later?

Only if you hold a Microsoft Enterprise Agreement. Microsoft sells Exchange ESU as a separate contract through your account team. It is not included in Volume Licensing or Software Assurance, and unlike Windows Server ESU there is no distributor or CSP route, so most small and mid-sized organizations cannot buy it at any price.

If you do hold an EA, Period 2 runs to October 31, 2026 and Microsoft has confirmed there is no third period. It covers only Critical and Important updates, Microsoft has not committed to releasing any during the period, eligibility is limited to Exchange 2016 CU23 and Exchange 2019 CU14 or CU15, and it does not let you open support cases. It buys eligibility and time, not a resolution.

Do we need specialist staff to run it?
No. GFI KerioConnect® uses a web dashboard, and there are no Microsoft server licenses, CALs or Software Assurance to track. If you manage Exchange today, you can manage this.
How does the 30% migration discount work?

It applies to new subscribers migrating to GFI KerioConnect® from Exchange. Your order needs to be placed by September 30, 2026, and the date that counts is when you order, not when your migration finishes. It does not stack with other offers.

Already a GFI customer? A different offer applies to you, on its own page: GFI MailEssentials AI customers or GFI Exinda AI customers.

30% off
New subscribers migrating from Exchange

Known unpatched vulnerabilities UNPATCHED
CVE-2025-64666
Elevation of Privilege
Dec 9, 2025
CVE-2025-64667
Spoofing
Dec 9, 2025
CVE-2026-21527
Spoofing
Feb 10, 2026

30% off Exchange migrations

Microsoft stopped patching Exchange 2016 and 2019. GFI KerioConnect® gets you off in under a day.

Support ended October 14, 2025. Since then the only route to a security patch has been a separate paid contract, bought through a Microsoft account team and requiring an Enterprise Agreement. That program ends October 31, 2026 with no extension. GFI KerioConnect® replaces Exchange on your own server. Your staff keeps Outlook.

Under a day
Server live and running in parallel

Zero
Retraining. Staff keeps Outlook

30% off
New subscribers migrating
from Exchange

Staff keep Outlook

Same inbox, calendar, folders, contacts. Phones stay in sync. Nobody relearns anything.

Mailbox data moves automatically

KEMT migrates email, folders, calendars, contacts and tasks. Rules, signatures, delegate permissions and distribution groups are recreated manually, scoped up front.

Rollback at every stage

Both servers run in parallel. Exchange keeps working until you say otherwise.

You manage less, not more

Web dashboard, and a GFI engineer with you throughout. If you manage Exchange today, you can manage this.

What you stop paying Microsoft for

  • Server licenses
  • Per-user CALs
  • Software Assurance

One per-mailbox subscription instead. Ask for a like-for-like quote against your current CAL count and take the comparison to your finance team.

What happens after you submit

  1. Guide within 24 hours. Tailored to your environment by a GFI engineer.
  2. One assessment call. You agree the plan. Nothing starts until you are comfortable.
  3. Pilot, then cutover. A test group moves first. Mail routing switches in one to two hours.
Will we lose any emails?
No. KEMT moves email, folders, calendars, contacts and tasks automatically. Rules, signatures, delegate permissions and distribution groups are recreated manually, and your engineer inventories these on the assessment call so the work is scoped before migration starts.
How long does it take, and what if something goes wrong?
GFI KerioConnect® is live and running in parallel in under a day. Full migration takes days for small teams and weeks for larger environments, because the timeline depends on how many mailboxes you have and how many you move per batch. Both servers run side by side throughout, so your existing Exchange server keeps working and rollback is available at every stage.
Can we just buy ESU and decide later?

Only if you hold a Microsoft Enterprise Agreement. Microsoft sells Exchange ESU as a separate contract through your account team. It is not included in Volume Licensing or Software Assurance, and unlike Windows Server ESU there is no distributor or CSP route, so most small and mid-sized organizations cannot buy it at any price.

If you do hold an EA, Period 2 runs to October 31, 2026 and Microsoft has confirmed there is no third period. It covers only Critical and Important updates, Microsoft has not committed to releasing any during the period, eligibility is limited to Exchange 2016 CU23 and Exchange 2019 CU14 or CU15, and it does not let you open support cases. It buys eligibility and time, not a resolution.

Do we need specialist staff to run it?
No. GFI KerioConnect® uses a web dashboard, and there are no Microsoft server licenses, CALs or Software Assurance to track. If you manage Exchange today, you can manage this.
How does the 30% migration discount work?

It applies to new subscribers migrating to GFI KerioConnect® from Exchange. Your order needs to be placed by September 30, 2026, and the date that counts is when you order, not when your migration finishes. It does not stack with other offers.

Already a GFI customer? A different offer applies to you, on its own page: GFI MailEssentials AI customers or GFI Exinda AI customers.

Contact sales
Exchange 2016 and 2019 security patches stop permanently on October 31, 2026. 0
Exchange 2016 and 2019 security patches stop permanently on October 31, 2026. 0

After October 31, 2026, there is no patch at any price.

Book a call

30% off for new subscribers migrating from Exchange. Order by September 30, 2026.

You are changing the server. Your staff is not changing anything.

EXCHANGE 2016 AND 2019

WHERE YOU ARE NOW

Everything ends in October.

Support ended October 14, 2025. Paid Extended Security Updates bought two more periods. The second is the last one Microsoft will sell.

  1. October 14, 2025 Support ended

    Security updates, fixes and technical support stopped.

  2. Oct 2025 to Apr 2026 ESU Period 1

    A paid contract became the only way to receive any patch.

  3. May to Oct 2026 ESU Period 2

    The final period. A separate purchase, even if you held Period 1.You are here

  4. November 2026 onward No path

    No patches at any price. Every new vulnerability is permanent.

With an Enterprise Agreement

You have until October 31, 2026.

ESU Period 2 is bought as a separate contract through your Microsoft account team, and it covers only Critical and Important updates. It does not entitle you to support cases, Microsoft has not committed to releasing any updates during the period, and eligibility is limited to Exchange 2016 CU23 and Exchange 2019 CU14 or CU15.

Without an Enterprise Agreement

You have had no patch route since October 2025.

Microsoft sells Exchange ESU as a separate contract, purchased only through a Microsoft account team, and it requires an Enterprise Agreement. It is not included in Volume Licensing or Software Assurance, and there is no distributor or CSP route. If you do not hold an EA, every Exchange vulnerability disclosed since October 2025 is still open on your server today.

Show me the fastest way off Exchange

Every Exchange 2016 and 2019 security update since October 2025 has been available only to ESU contract holders. After October 2026, no fix will be available to anyone at any price.

Under a day
Server live and running in parallel

Everything ends in October.

Support ended October 14, 2025. Paid Extended Security Updates brought two more periods. The second is the last one Microsoft will sell.

Get your migration guideFind a Reseller

30% off for new subscribers migrating from Exchange. Order by September 30, 2026.

Book a call

Privacy Policy

Order by September 30, 2026 to claim the 30% migration discount, based on order date rather than migration completion. 0 days left to claim the 30% migration discount. Order by September 30, 2026, based on order date rather than migration completion. The 30% migration discount closed on September 30, 2026. Talk to us about your options before Microsoft stops patching Exchange on October 31, 2026.