Unified, Easy-to-Manage Endpoint Security
Microsoft® Forefront Client Security protects
laptops, desktops, and file
servers with integrated protection against
malware. It simplifies
control of endpoint security and provides better visibility into the overall protection of the environment. Defenses are easily managed from the Microsoft Forefront Management Console code-named “Stirling.”
Protect Business Continuity with Improved Management
™
of Endpoint Security
The release of the next generation of Forefront client security protects business
laptops, desktops, and file servers against viruses, spyware, rootkits, and other malware. The solution includes: on Windows firewall activities. The agent incorporates proven technologies already in use on millions of computers worldwide and is backed by efficient and effective
threat response from the Microsoft
Malware Protection Center.
n
A single agent that provides antivirus and antispyware protection, vulnerability
assessment and remediation, and host
firewall management.
Forefront Client Security is designed to
simplify administration and save valuable
time through its single management
console and policy configuration,
central update infrastructure, and
automated endpoint discovery. It also integrates with existing investments in Microsoft technologies.
n
A central management server that enables administrators to configure, update, and report on agent activity across the enterprise.
The two components work together to provide unmatched visibility and control over the security of endpoints throughout your environment. The solution allows you to reduce risk and prevent threats from interrupting business through:
To reduce risk, Forefront Client Security
improves visibility into endpoint security with a dashboard, drill-down investigation capabilities, and state-assessment scans. These tools offer high levels of transparency across the enterprise, giving you the
www.microsoft.com/ forefront/clientsecurity
The Beta 2 release of the
n
Rapid deployment of the latest threat next generation of Forefront
Client Security can help you
improve operational efficiency through improved visibility into the security of Windows® client and server operating systems. Forefront Client Security also lowers deployment
and administration costs by
integrating with your existing
Microsoft infrastructure, information you need to quickly respond to
security incidents and organizational risk. definitions and updates.
n
Detection and remediation
of vulnerabilities.
n
Easy investigation
into security incidents
and alerts.
How Forefront Client Security protects your Windows-based infrastructure
including:
n
Windows Vista®
n
Forefront Client Security
provides comprehensive, unified protection
Windows Update Services
n
SQL Server®
n
Active Directory® with its single agent
that scans for viruses, spyware, and rootkits in real time. It also blocks
generic exploits by
n
Microsoft System Center
Configuration Manager
n
Microsoft System Center Operations Manager managing and reporting
Forefront Client Security provides unified protection of desktops, laptops, and server operating systems.
security policy and enforce necessary
updates using built-in integration with Microsoft Network Access Protection. new endpoints as they come onto the network, making it easy to deploy
security agents and helping to ensure
protection for all endpoints.
Key Features
The Beta 2 release of the next generation
of Forefront Client Security provides unified protection, simplified administration, and critical visibility and control for securing laptops, desktops, and file servers.
n
Controls external devices Help contain
the spread of malware by enabling restrictions against removable storage devices such as USB drives.
Critical visibility and control
n
Assesses your security state Measure
your organization’s risk profile against
security best practices, using security
state scanning and reporting.
Unified protection
Simplified administration
n
Stops malware without impacting
n
Centralizes control Use a single console
to configure, deploy, update, and report on enterprise-wide endpoint security— the same console where you manage
the protection of your messaging and
collaboration servers.
productivity Use single security
agent scans efficiently, protecting endpoints without significantly impacting user productivity.
n
Provides in-depth investigation Drill
down to investigate specific security incidents with a single click in the easyto-use dashboard.
n
Eliminates vulnerabilities
n
Reports on key security trends Use
Detect common vulnerabilities,
n
Simplifies deployment and
updating Take advantage of
integration with System Center
technologies for easy deployment
of agents and signature updates. in-depth historical and trending reports to enhance insight into and control over malware threats. misconfigurations, and missing security updates. Remediate these automatically through defined policies or remotely using the management console.
n
Monitors endpoint security alerts and health Configure security alerts
across enterprise IT roles. Use integrated
health monitoring to help ensure that endpoint protection is performing
correctly at all times.
n
Enforces endpoint compliance Keep
n
Automates endpoint discovery Use
Active Directory integration to discover endpoints in compliance with corporate
Integrated view of endpoint security
For more information about Forefront Client Security, visit www.microsoft.com/forefront/ clientsecurity.
Forefront Client Security Summary Report
System Requirements
2.8 GHz processor; 2 GB of RAM or more; 20 GB of available hard-disk space or more required; Microsoft Windows Server® 2003 Standard Edition with Service Pack 2 or Windows Server 2008 operating system; Microsoft SQL Server 2005 Standard Edition with Service Pack 2 or later (including Database Services, Reporting Services, Workstation Components, and Integration Services); Windows Installer 3.1; Microsoft .NET Framework 3.0; Windows PowerShell™ 1.0; Visual C++® 2005 Redistributable Package with Service Pack 1; Windows Server Update Services 3.0; Microsoft Message Queuing (MSMQ) (part of Microsoft Windows Server 2003); Microsoft CORE XML Services (MSXML) 6.0; Windows Update Agent 3.0; Microsoft System Center Operations Manager 2007 with Service Pack 1.
©2009 Microsoft Corporation. All rights reserved. This document is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, IN THIS SUMMARY.
