EXCLUSIVE FOR GFI MAILESSENTIALS AI CUSTOMERS

Your security stack works. Your mail server does not. 

Find a Reseller

Your security stack works.
Your mail server does not.

Every vulnerability found since October 2025 is unpatched and stays that way. GFI KerioConnect® closes the exposure without moving your data to the cloud.

After October 31, 2026, there is no patch at any price. 

GFI MailEssentials AI is a gateway. It filters mail before your server ever sees it, so it keeps working throughout migration. Exchange 2016 and 2019 lost support on October 14, 2025, and the last paid patch route closes October 31, 2026. GFI KerioConnect® replaces Exchange on infrastructure you already control.

  1. October 14, 2025 Support ended

    Security updates, fixes and technical support stopped.

  2. Oct 2025 to Apr 2026 ESU Period 1

    A paid contract became the only way to receive any patch.

  3. May to Oct 2026 ESU Period 2

    The final period. A separate purchase, even if you held Period 1.You are here

  4. November 2026 onward No path

    No patches at any price. Every new vulnerability is permanent.

With an Enterprise Agreement

You have until October 31, 2026.

ESU Period 2 is bought as a separate contract through your Microsoft account team, and it covers only Critical and Important updates. It does not entitle you to support cases, Microsoft has not committed to releasing any updates during the period, and eligibility is limited to Exchange 2016 CU23 and Exchange 2019 CU14 or CU15.

Without an Enterprise Agreement

You have had no patch route since October 2025.

Microsoft sells Exchange ESU as a separate contract, purchased only through a Microsoft account team, and it requires an Enterprise Agreement. It is not included in Volume Licensing or Software Assurance, and there is no distributor or CSP route. If you do not hold an EA, every Exchange vulnerability disclosed since October 2025 is still open on your server today.

Show me the fastest way off Exchange

GFI MailEssentials AI is not affected by any of this. It is a gateway that filters mail before your server ever receives it, and it does not patch a mail server. Exchange is the exposure, and it is the only part of your stack that runs out of options in October.

WHERE YOU ARE

Everything ends in October. 

Support ended October 14, 2025. Paid Extended Security Updates bought two more periods. The second is the last one Microsoft will sell.

WHAT MIGRATION ACTUALLY INVOLVES

You are replacing Exchange. Your filtering keeps running.

GFI MailEssentials AI keeps filtering

Anti-spam, antivirus, content filtering and AI-generated compliance rules continue uninterrupted. Only the SMTP integration point changes, repointing from Exchange to GFI KerioConnect®, and GFI supplies a step-by-step guide for it.

Staff keep Outlook

Same inbox, calendar, folders, contacts. Phones stay in sync. Nobody relearns anything.

Mailbox data moves automatically

KEMT migrates email, folders, calendars, contacts and tasks. Rules, signatures, delegate permissions and distribution groups are recreated manually, scoped up front.

Rollback at every stage

Both servers run in parallel. Exchange keeps working until you say otherwise.

What you stop paying Microsoft for

  • Server licenses
  • Per-user CALs
  • Software Assurance

One per-mailbox subscription instead. Ask for a like-for-like quote against your current CAL count and take the comparison to your finance team.

What happens after you submit

  1. Guide within 24 hours. Tailored to your environment by a GFI engineer.
  2. One assessment call. Your GFI MailEssentials AI configuration is documented before anything moves.
  3. Pilot, then cutover. Filtering repoints for pilot users first, then mail routing switches in one to two hours.

BEFORE YOU DECIDE

Four questions GFI MailEssentials AI customers ask first.

  1. October 14, 2025 Support ended

    Security updates, fixes and technical support stopped.

  2. Oct 2025 to Apr 2026 ESU Period 1

    A paid contract became the only way to receive any patch.

  3. May to Oct 2026 ESU Period 2

    The final period. A separate purchase, even if you held Period 1.You are here

  4. November 2026 onward No path

    No patches at any price. Every new vulnerability is permanent.

With an Enterprise Agreement

You have until October 31, 2026.

ESU Period 2 is bought as a separate contract through your Microsoft account team, and it covers only Critical and Important updates. It does not entitle you to support cases, Microsoft has not committed to releasing any updates during the period, and eligibility is limited to Exchange 2016 CU23 and Exchange 2019 CU14 or CU15.

Without an Enterprise Agreement

You have had no patch route since October 2025.

Microsoft sells Exchange ESU as a separate contract, purchased only through a Microsoft account team, and it requires an Enterprise Agreement. It is not included in Volume Licensing or Software Assurance, and there is no distributor or CSP route. If you do not hold an EA, every Exchange vulnerability disclosed since October 2025 is still open on your server today.

Show me the fastest way off Exchange

GFI MailEssentials AI is not affected by any of this. It is a gateway that filters mail before your server ever receives it, and it does not patch a mail server. Exchange is the exposure, and it is the only part of your stack that runs out of options in October.

You are replacing Exchange. 
Your filtering keeps running.

GFI MailEssentials AI keeps filtering

Anti-spam, antivirus, content filtering and AI-generated compliance rules continue uninterrupted. Only the SMTP integration point changes, repointing from Exchange to GFI KerioConnect®, and GFI supplies a step-by-step guide for it.

Staff keep Outlook

Same inbox, calendar, folders, contacts. Phones stay in sync. Nobody relearns anything.

Mailbox data moves automatically

KEMT migrates email, folders, calendars, contacts and tasks. Rules, signatures, delegate permissions and distribution groups are recreated manually, scoped up front.

Rollback at every stage

Both servers run in parallel. Exchange keeps working until you say otherwise.

What you stop paying Microsoft for

  • Server licenses
  • Per-user CALs
  • Software Assurance

One per-mailbox subscription instead. Ask for a like-for-like quote against your current CAL count and take the comparison to your finance team.

What happens after you submit

  1. Guide within 24 hours. Tailored to your environment by a GFI engineer.
  2. One assessment call. Your GFI MailEssentials AI configuration is documented before anything moves.
  3. Pilot, then cutover. Filtering repoints for pilot users first, then mail routing switches in one to two hours.
Contact sales
Exchange 2016 and 2019 security patches stop permanently on October 31, 2026. 0

Under a day

Server live and running in parallel

Zero

Change to GFI Exinda AI

20% off

Plus Eloquens® AI free for one year

36 days left to claim 20% off plus Eloquens® AI free for one year. Order by September 30, 2026, based on order date rather than migration completion.

Support ended October 14, 2025. Paid Extended Security Updates bought two more periods. The second is the last one Microsoft will sell.

Does GFI MailEssentials AI keep working after migration?
Yes. It is a gateway product, so it filters email before the mail server receives it. After migration it filters into GFI KerioConnect® instead of Exchange. Only the SMTP integration point changes. Filtering, quarantine and your policies stay as they are, and GFI provides a step-by-step configuration guide.
Will we lose any emails?
No. KEMT moves email, folders, calendars, contacts and tasks automatically. Rules, signatures, delegate permissions and distribution groups are recreated manually, and your engineer inventories these on the assessment call so the work is scoped before migration starts.
How long does it take, and what if something goes wrong?
GFI KerioConnect® is live and running in parallel in under a day. Full migration takes days for small teams and weeks for larger environments, because the timeline depends on how many mailboxes you have and how many you move per batch. Both servers run side by side throughout, so your existing Exchange server keeps working and rollback is available at every stage.
Can we just buy ESU and decide later?

Only if you hold a Microsoft Enterprise Agreement. Microsoft sells Exchange ESU as a separate contract through your account team. It is not included in Volume Licensing or Software Assurance, and unlike Windows Server ESU there is no distributor or CSP route, so most small and mid-sized organizations cannot buy it at any price.

If you do hold an EA, Period 2 runs to October 31, 2026 and Microsoft has confirmed there is no third period. It covers only Critical and Important updates, Microsoft has not committed to releasing any during the period, eligibility is limited to Exchange 2016 CU23 and Exchange 2019 CU14 or CU15, and it does not let you open support cases. It buys eligibility and time, not a resolution.

How does the GFI MailEssentials AI customer offer work?

As an existing GFI MailEssentials AI customer you get 20% off GFI KerioConnect® plus Eloquens® AI free for one year. Your order needs to be placed by September 30, 2026, and the date that counts is when you order, not when your migration finishes. It does not stack with other offers.

Your GFI MailEssentials AI subscription is unaffected and continues on its existing terms.

Your filtering keeps running either way. Your mail server is the part that runs out of options. A GFI engineer replies within 24 hours.

Get your migration guideBook a call

20% off plus Eloquens® AI free for one year, exclusive to GFI MailEssentials AI customers. Order by September 30, 2026.

GFI MailEssentials AI processes email on-server within your infrastructure. No data leaves your environment. Your organization maintains full control. GDPR, SOC 2 Type II, ISO 27001 compliant.

GFI KerioConnect® is part of a broader GFI stack. Ask your partner about what else fits your environment.

Get your migration guideBook a call

Your filtering keeps running either way. Your mail server is the part that runs out of options. A GFI engineer replies within 24 hours.