Security and Organizational Governance Anand Lakshminarayanan Senior Product Manager Microsoft Corporation

Provide built-in protection for more secure communications Support organizational governance requirements Add protection against external threats Session Objectives After this session, you will understand how to

 Archive, find, and retrieve information quickly  Avoid penalties for misuse Today’s Business Environment What customers are telling us Organizational governance Protection against external threats  Ensure reliability of mission-critical systems  Stay ahead of increasingly complex threats Secure communications in an Anywhere Access World  Ensure privacy for all communications  Deploy in a secure and cost-effective way

Active Directory PSTN Corporate Network Services Litware Inc. Network Architecture Public Internet Clouds Federated Businesses Exchange Server 2007 Mailboxes Unified Messaging Hub Transport Client Access Office Communications Server 2007 Instant Messaging Voice Conferencing PSTN connectivity Web Access Remote Users InternetPerimeter Network Edge Access Conferencing Audio/Video Edge Transport Clients and Devices

A Day In The Life of an IT Pro CSO wants to learn more about security in Anywhere Access communications Corporate counsel has an unexpected legal discovery request A peer informs you of a large spam and virus outbreak 9:00 am

Active Directory PSTN Perimeter Network Office Communications Server 2007 Corporate Network Instant Messaging Voice Conferencing PSTN connectivity Web Access Exchange Server 2007 Mailboxes Unified Messaging Hub Transport Client Access Clients and Devices Remote Users Federated Businesses Public Internet Clouds Internet Services Litware Inc. Network Architecture Edge Access Conferencing Audio/Video Edge Transport

SECURE COMMUNICATIONS WITH REMOTE USERS demo

Security For Anywhere Access Remote User ISPInternet NAT DMZ Corporate Network

Sign In DMZ Remote User NAT ISPInternet Corporate Network Access Edge Server Front End Server

Connection Setup DMZ Remote User NAT ISPInternet Corporate Network Access Edge Server Front End Server Corporate User

Media Connection DMZ Remote User NAT ISPInternet Corporate Network Access Edge Server Front End Server A/V Edge Server Corporate User

Media Connection Remote User NAT ISPInternet Corporate Network Front End Server DMZ Access Edge Server A/V Edge Server Corporate User

External Access DMZ Access Edge Server A/V Edge Server Signaling SIP/TLS/443 SIP/MTLS/5061 Audio/Video STUN/TCP/443 SRTP/TCP/(Range) STUN/UDP/3478 SRTP/UDP/(Range) Signaling SIP/TLS/443 SIP/MTLS/5061 Audio/Video STUN/TCP/443 SRTP/TCP/(Range) STUN/UDP/3478 SRTP/UDP/(Range ) Corporate Network Internet

Communications Security Wrap Up User AuthenticationRemote AccessEncryption IM Voice Conferencing

CSO wants to learn more about security in Anywhere Access communications Corporate counsel has an unexpected legal discovery request A peer informs you of a large spam and virus outbreak 1:00 pm A Day In The Life of an IT Pro

Active Directory PSTN Perimeter Network Office Communications Server 2007 Corporate Network Instant Messaging Voice Conferencing PSTN connectivity Web Access Exchange Server 2007 Mailboxes Unified Messaging Hub Transport Client Access Clients and Devices Remote Users Federated Businesses Public Internet Clouds Internet Services Litware Inc. Network Architecture Edge Access Conferencing Audio/Video Edge Transport

SPAM  Full text indexing of and attachments, IM and Bloomberg mail  Governance tools for supervising, escalating, and tracking messages  Access message archive via the Web for real time functionality  Archive repository benefits from upstream spam and virus protection features Microsoft Exchange Hosted Archive Message archiving for organizational governance and legal discovery Internet Corporate Network Access for Auditors, Outside Counsel Access for End Users & Admin EHS Global Data Center Network Filtered Inbound Filtered Outbound  Copy via journaling COPY   COPY

LEGAL DISCOVERY MADE SIMPLE demo

Archive Search and Retrieval for DiscoveryCustom Policies IM Voice Conferencing Organizational Governance Wrap Up

A Day In The Life of an IT Pro CSO wants to learn more about security in Anywhere Access communications Corporate counsel has an unexpected legal discovery request A peer informs you of a large spam and virus outbreak 4:30 pm

Active Directory PSTN Perimeter Network Office Communications Server 2007 Corporate Network Instant Messaging Voice Conferencing PSTN connectivity Web Access Exchange Server 2007 Mailboxes Unified Messaging Hub Transport Client Access Clients and Devices Remote Users Federated Businesses Public Internet Clouds Internet Services Litware Inc. Network Architecture Edge Access Conferencing Audio/Video Edge Transport

On-Premise Software Firewall Mailbox Server Hub Transport Server Edge Transport Server Client Access Server DMZ Antivirus and Anti-spam protection for Exchange Server 2007 Roles SMTP Internet Firewall Antivirus and anti-spam protection for Exchange Server 2007 Server Roles On-Premise Software Mailbox Server Hub Transport Server Client Access Server SMTP Internet Hosted Service Comprehensive Antivirus, Anti-Spam Protection Choice of protection: “Software + Services” or On-Premise

Microsoft Exchange Hosted Filtering Multilayer spam and virus protection and policy enforcement Junk Quarantine Anti-spam Antivirus Policy Disaster Recovery Admin Console Corporate Network Messaging Admin Employees Inbound Filtered About 85% of is junk Legitimate Outbound Filtered Incorporated Microsoft Technologies Junk

ENHANCED PROTECTION FROM EXTERNAL THREATS demo

AntivirusAnti-spam Automatic Updates IM Voice*N/A Conferencing*N/A Protection From External Threats Wrap Up * Microsoft Forefront Security for Office Communications Server 2007 coming in 2008

Key Takeaways Provide built-in protection for more secure communications Support organizational governance requirements Add protection from external threats In this session you learned how to

Q & A

Resources Technical Communities, Webcasts, Blogs, Chats and User Groups Technical Communities, Webcasts, Blogs, Chats and User Groups Visit the OCS 2007, and Exchange Server 2007 Tech Centers Visit the OCS 2007, and Exchange Server 2007 Tech Centers Trial Software and Virtual Labs Trial Software and Virtual Labs

Thank you