20% OFF EXCHANGE MIGRATIONS
EXCLUSIVE FOR GFI MAILESSENTIALS AI CUSTOMERS

Your security stack works. Your mail server does not. 

Find a Reseller

Copyright © GFI Software 

Legal

Privacy Policy

Your security stack works.
Your mail server does not.

Every vulnerability found since October 2025 is unpatched and stays that way. GFI KerioConnect® closes the exposure without moving your data to the cloud.

An on-premise mail server that handles email, calendar, contacts, and mobile sync. Installs on your own Windows or Linux hardware and replaces Exchange directly.

GFI KerioConnect® runs on your own server. Mail never leaves your infrastructure. M365 moves everything to Microsoft's cloud.

Small teams under 50 users: around 30 days. Mid-size (50–500): 60–90 days. Larger orgs: up to 5–7 months. Your free assessment gives a tailored estimate.

No, but every day on unsupported Exchange is a day without security patches. The sooner you begin, the sooner the exposure is closed.

Yes. Deploy GFI KerioConnect® in your own environment and run it fully for 30 days before any purchase decision.

Pre-migration assessment, KEMT access, step-by-step documentation, and GFI engineering support throughout. Your local partner is also available at every stage.

MIGRATION QUESTIONS

What IT admins ask before migrating

Exchange stopped getting security patches in October 2025. GFI KerioConnect® replaces Exchange on your own server. GFI MailEssentials AI continues filtering throughout migration. Your staff keeps Outlook.

CVE-2025-64666
Elevation of privilege: attacker gains admin rights over the server
Dec 9, 2025
Unpatched
CVE-2025-64667
Spoofing: attacker impersonates trusted senders
Dec 9, 2025
Unpatched
CVE-2026-21527
Spoofing: attacker forges emails as your organization
Feb 10, 2026
Unpatched

Compliance auditors are noticing

Unsupported infrastructure is being flagged as a policy violation in regulated industries.

Cyber insurers are asking

Unpatched Exchange now appears on renewal questionnaires from major carriers.

About Microsoft ESU: Microsoft offers a paid Extended Security Update program through April 2026. After that date, all Exchange 2016 and 2019 servers become permanently unpatched regardless of ESU enrollment.
Not Affected

GFI MailEssentials AI continues unaffected

GFI MailEssentials AI is a gateway product. It filters email before it reaches your mail server and operates independently of Exchange. Anti-spam, antivirus, content filtering, and AI-generated compliance rules all continue uninterrupted through migration.

📧

Staff keep Outlook

Same inbox, calendar, folders, contacts. Nobody relearns anything.

📱

Phones stay in sync

ActiveSync and CalDAV/CardDAV. All devices stay connected.

📁

All data moves automatically

KEMT migrates everything. Rules and signatures need manual setup.

🛡️

GFI MailEssentials AI keeps working

KEMT moves mailboxes, calendars, contacts and public folders, with partner support available for cutover.

🔧

You manage less, not more

Web dashboard. If you manage Exchange today, you can manage this.

⏪

Rollback at every stage

Both servers run in parallel. Exchange keeps working until you say otherwise.

Five steps. Your email keeps flowing the entire time.

MIGRATION PLAN

Both systems run in parallel. Your GFI engineer scopes the timeline during the assessment call. Small deployments complete in days. Larger environments take weeks.

01

Request your migration guide

Submit the form. A GFI sales engineer reaches out to confirm your setup and sends a guide tailored to your environment within 24 hours.

02

Migration assessment call

One call with a GFI engineer. Your GFI MailEssentials AI configuration is documented. You agree a plan together. Nothing starts until you are comfortable with the scope and timeline.

03

Install GFI KerioConnect® alongside Exchange

GFI KerioConnect® installs next to your existing server. Both run in parallel. GFI MailEssentials AI continues filtering into Exchange. Your staff continues working in Outlook without interruption.

04

Pilot group migrates first

A small test group moves via KEMT. GFI MailEssentials AI repoints to GFI KerioConnect® for pilot users. You verify emails, calendars, contacts, folders, and filtering all work before the rest follow.

05

Full migration. Exchange retired.

Remaining staff migrates in batches. Mail routing cuts over to GFI KerioConnect® (typically one to two hours). GFI MailEssentials AI now filters into GFI KerioConnect®. Exchange is decommissioned.

Throughout the entire migration
✓Outlook keeps working for every staff member
✓All data preserved automatically
✓Phones and tablets stay in sync
✓GFI MailEssentials AI keeps filtering
✓Both servers run in parallel
✓Rollback available at every stage

Replace Exchange on your terms. A GFI engineer responds in 24 hours.

Schedule a migration assessment

GFI KerioConnect® is part of a broader GFI stack. Ask your partner about what else fits your environment.

EXCLUSIVE FOR GFI MAILESSENTIALS AI CUSTOMERS

<1 day

GFI KerioConnect® live

150+

countries deployed

30%

off for GFI MailEssentials AI customers

Ready to move off Exchange?

Choose the path that fits your timeline.

THE FACTS

Three CVEs since October 2025. None will be fixed.

Microsoft ended all security support for Exchange 2016 and 2019 in October 2025. These vulnerabilities are permanent. The list will grow.

COMPARE YOUR OPTIONS

Three paths off Exchange. Here is how they compare.

Choose based on where you want your email to live and how much control you want to keep.

Recommended

GFI KerioConnect®

Replace Exchange. Keep control.

Where it runs
Your hardware, your cloud VM, or a certified GFI hosting partner (US and EU).
Microsoft dependency
None. Completely independent.
GFI MailEssentials AI
Continues as-is. Filters into GFI KerioConnect® instead of Exchange.
Migration support
KEMT migration tool included. GFI engineer support throughout.
Pricing
Per-mailbox. Annual fixed or monthly variable. No Microsoft fees.
30% off + Eloquens® AI free year 1

Microsoft 365

Move to Microsoft cloud.

Where it runs
Microsoft cloud infrastructure. They manage everything.
Microsoft dependency
Permanent. Ongoing subscription required.
GFI MailEssentials AI
Requires reconfiguration for M365 routing.
Migration support
You hire a consultant or handle it internally.
Pricing
Per person, per month. Ongoing.

Exchange Server SE

Stay on Exchange. New version.

Where it runs
Your own server. In-place upgrade from Exchange 2019.
Microsoft dependency
Yes. Ongoing subscription required.
GFI MailEssentials AI
Continues as-is on new Exchange version.
Migration support
In-place upgrade available. Simpler than M365 migration.
Pricing
Server license plus per-user CALs. Both ongoing subscriptions.
GFI KerioConnect® Deployment Options
🖥️

Self-host on your hardware

Traditional on-premise deployment. Full control.

☁️

Self-host on a cloud VM

AWS, Azure, or any cloud VM you manage.

🤝

GFI hosting partner

Certified partners (US and EU). You stay hands-off.

🏦 Banking 🛡️ Insurance 🏥 Healthcare 🏭 Manufacturing 🏛️ Government ⚖️ Legal

HOW MIGRATION WORKS

You are changing the server. Your staff is not changing anything.

Everything below happens on the server side. Your people keep using Outlook the entire time. GFI MailEssentials AI keeps filtering throughout.

See KEMT in action.

The Kerio Exchange Migration Tool moves email, contacts, calendars, and folders from Exchange to GFI KerioConnect® automatically. Free and included with your license.

No. The Kerio Exchange Migration Tool (KEMT) moves all emails, folders, calendars, contacts, and tasks automatically. Rules and signatures need manual setup.
GFI KerioConnect® is live in under a day. Full migration: days for small teams, weeks for larger environments. Your GFI engineer scopes this precisely on the assessment call.
Yes. GFI MailEssentials AI is a gateway product that filters email before it reaches the mail server. After migration, it filters into GFI KerioConnect® instead of Exchange. Only the SMTP integration point changes. GFI provides a step-by-step configuration guide.
Both servers run in parallel. Your existing Exchange server keeps working. Rollback is available at every stage of the process.
No. GFI KerioConnect® uses a web dashboard. If you manage Exchange today, you can manage this.
GFI MailEssentials AI customers migrating from Exchange 2016/2019 to GFI KerioConnect® get 30% off plus Eloquens® AI free for year one. Eloquens® AI responds to common emails automatically, in under 5 minutes, 24/7, in any language.

Microsoft Exchange 2016 and 2019 reached end of support on October 14, 2025. New CVEs will not be patched.

Microsoft Exchange 2016 and 2019 reached end of support on October 14, 2025. New CVEs will not be patched.

Ready to move off Exchange?
Choose the path that fits your timeline

Unpatched
CVE-2025-64666
Elevation of privilege: attacker gains admin rights over the server
Dec 9, 2025
Unpatched
CVE-2025-64667
Spoofing: attacker impersonates trusted senders
Dec 9, 2025
Unpatched
CVE-2026-21527
Spoofing: attacker forges emails as your organization
Feb 10, 2026

Compliance auditors are noticing

Unsupported infrastructure is being flagged as a policy violation in regulated industries.

Cyber insurers are asking

Unpatched Exchange now appears on renewal questionnaires from major carriers.

About Microsoft ESU: Microsoft offers a paid Extended Security Update program through April 2026. After that date, all Exchange 2016 and 2019 servers become permanently unpatched regardless of ESU enrollment.
Not Affected

GFI MailEssentials AI continues unaffected

GFI MailEssentials AI is a gateway product. It filters email before it reaches your mail server and operates independently of Exchange. Anti-spam, antivirus, content filtering, and AI-generated compliance rules all continue uninterrupted through migration.

Three paths off Exchange.

Choose based on where you want your email to live and how much control you want to keep.

Recommended

GFI KerioConnect®

Replace Exchange. Keep control.

Where it runs
Your hardware, your cloud VM, or a certified GFI hosting partner (US and EU).
Microsoft dependency
None. Completely independent.
GFI MailEssentials AI
Continues as-is. Filters into GFI KerioConnect®.
Migration support
KEMT tool included. GFI engineer support throughout.
Pricing
Per-mailbox. Annual or monthly. No Microsoft fees.
30% off + Eloquens® AI free year 1

Microsoft 365

Move to Microsoft cloud.

Where it runs
Microsoft cloud. They manage everything.
Microsoft dependency
Permanent. Ongoing subscription required.
GFI MailEssentials AI
Requires reconfiguration for M365 routing.
Migration support
You hire a consultant or handle internally.
Pricing
Per person, per month. Ongoing.

Exchange Server SE

Stay on Exchange. New version.

Where it runs
Your own server. In-place upgrade from Exchange 2019.
Microsoft dependency
Yes. Ongoing subscription required.
GFI MailEssentials AI
Continues as-is on new Exchange version.
Migration support
In-place upgrade available. Simpler than M365.
Pricing
Server license plus per-user CALs. Both ongoing.
GFI KerioConnect® Deployment Options
🖥️

Self-host on your hardware

Traditional on-premise deployment. Full control.

☁️

Self-host on a cloud VM

AWS, Azure, or any cloud VM you manage.

🤝

GFI hosting partner

Fully managed by a certified GFI partner. US and EU locations.

🏥 Healthcare ⚖️ Legal 🏦 Finance 🏛️ Government 🎓 Education 🏭 Manufacturing
📧

Staff keep Outlook

Same inbox, calendar, folders, contacts. Nobody relearns anything.

📱

Phones stay in sync

ActiveSync and CalDAV/CardDAV. All devices stay connected.

📁

All data moves automatically

KEMT migrates everything. Rules and signatures need manual setup.

🛡️

MailEssentials AI keeps working

Only SMTP integration changes. Filtering, quarantine, and policies stay.

🔧

You manage less, not more

Web dashboard. If you manage Exchange today, you can manage this.

⏪

Rollback at every stage

Both servers run in parallel. Exchange keeps working until you say otherwise.

GFI AppManager™ is optional. Free. One dashboard for all GFI products. Many prefer local management.
01

Request your migration guide

Submit the form. A GFI sales engineer reaches out to confirm your setup and sends a guide tailored to your environment within 24 hours.

02

Migration assessment call

One call with a GFI engineer. Your GFI MailEssentials AI configuration is documented. You agree a plan together. Nothing starts until you are comfortable with the scope and timeline.

03

Install GFI KerioConnect® alongside Exchange

GFI KerioConnect® installs next to your existing server. Both run in parallel. GFI MailEssentials AI continues filtering into Exchange. Your staff continues working in Outlook without interruption.

04

Pilot group migrates first

A small test group moves via KEMT. GFI MailEssentials AI repoints to GFI KerioConnect® for pilot users. You verify emails, calendars, contacts, folders, and filtering all work before the rest follow.

05

Full migration. Exchange retired.

Remaining staff migrates in batches. Mail routing cuts over to GFI KerioConnect® (typically one to two hours). GFI MailEssentials AI now filters into GFI KerioConnect®. Exchange is decommissioned.

Throughout the entire migration
✓Outlook keeps working for every staff member
✓All data preserved automatically
✓Phones and tablets stay in sync
✓GFI MailEssentials AI keeps filtering
✓Both servers run in parallel
✓Rollback available at every stage
Schedule a migration assessmentContact sales

GFI MailEssentials AI processes email on-server within your infrastructure. No data leaves your environment. Your organization maintains full control. GDPR, SOC 2 Type II, ISO 27001 compliant.