Adwait JoshiJim Harrison Sr. Product ManagerProgram Manager Microsoft Corporation SESSION CODE: SIA308

Across on-premises & cloud Integrate and extend security across the enterprise Block from: Enable CostValue SiloedSeamless to: Simplify the security experience, manage compliance Protect everywhere, access anywhere Highly Secure & Interoperable Platform

PROTECT everywhere ACCESS anywhere SIMPLIFY security, MANAGE compliance Protect endpoints from emerging threats and information loss, while enabling more secure access from virtually anywhere INTEGRATE and EXTEND security Provides unified administration for desktop management and protection Increases visibility of potentially vulnerable desktops Uses existing System Center Configuration Manager infrastructure Builds on and extends Windows security Enables multi-layered antimalware protection Protects critical data wherever it resides Provides more secure always-on access

Enables employees to safely use the Internet without worrying about malware and other threats. Comprehensive Web Security Includes and improves proven network protection technologies of ISA 2006 Next Generation of ISA Server

HTTP Anti- virus/spyware URL Filtering HTTPS forward inspection Secure Web Access VoIP traversal (SIP) Enhanced NAT ISP Link Redundancy Logging Improvements Updated firewall client NDIS Filter (Layer-2) Firewall Exchange Edge/FPE integration Anti-Virus Anti-spam Array-based Mgmt Protection Network Inspection System (GAPA) Flood Mitigation Intrusion Prevention NAP integration with VPN role Supports SSTP VPN Remote Access Scenario UI & Wizards Mixed Arrays Enhanced reporting W2K8 R1 SP2 or R2, native 64-bit Deployment & Management Subscription Svcs: HTTP: AV+URL Filtering AV+Anti-Spam NIS signatures Web Protection 7

Authenticating proxy with security Web Anti Malware and URL filtering Inspection of HTTP and HTTPS traffic Secure Web Gateway All-in-one solution for medium businesses and for branch offices Firewall, Proxy, VPN, IPS, relay in a single box Unified Threat Management (UTM) Dial-in VPN Site to site VPN Secure Web Publishing Remote Access Gateway Anti Spam Anti Virus Filtering Secure Relay Management

Firewall Service MRS Cache MRS Cache Web Proxy Engine WWSAPI WinHTTP

SOAP Req to GET In MRS Cache? WWSAPI MRS Cache MRS Cache Nope…

WinHTTP CONNECT 10.ds.mrs.microsoft.com:443 POST WinHTTP WWSAPI SOAP Response SOAP Request WinHTTP SSL Tunnel WinHTTP SOAP Response WWSAPI 200 OK

URL Categories WWSAPI MRS Cache MRS Cache

Too Much MRS Traffic (~1GB/day)

SOAP Req to GET WWSAPI WinHTTP POST WinHTTP WWSAPI

TMG Update Agent WUA API WinHTTPWinHTTP WU Config WinHTTPWPADSvcWinHTTPWPADSvc

Firewall Service Web Proxy Filter Malware Inspection Filter

502; 12210

Failed Connection AttemptTMG-01 2/3/2010 7:21:23 AM

Learn more & try our solutions at:

SIA320 |Business Ready Security: Protecting Endpoints from Advanced Threats with Microsoft's Secure Endpoint Solution SIA301 |Secure Endpoint: DirectAccess and Microsoft Forefront Unified Access Gateway 2010, the Complete Remote Access Solution SIA308 | Secure Endpoint: Advanced Protection from Dynamic Threats, a Microsoft Forefront Threat Management Gateway 2010 Deep Dive SIA309 |Secure Endpoint: What’s in Microsoft Forefront Endpoint Protection A Deep Dive into the Features and Protection Technologies SIA325 | Secure Endpoint: Virtualizing Microsoft Forefront Threat Management Gateway (TMG) SIA02-INT | Secure Endpoint: Planning DirectAccess Deployment with Microsoft Forefront Unified Access Gateway SIA07-INT | Secure Endpoint: Architecting Forefront Endpoint Protection 2010 on Microsoft System Center Configuration Manager SIA05-HOL | Microsoft Forefront Threat Management Gateway Overview SIA09-HOL | Secure Endpoint Solution: Business Ready Security with Microsoft Forefront and Active Directory SIA11-HOL | Microsoft Forefront Unified Access Gateway (UAG) and Direct Access: Better Together Red SIA-3 | Microsoft Forefront Secure Endpoint Solution

Learn more about our solutions: Try our products:

Sign up for Tech·Ed 2011 and save $500 starting June 8 – June 31 st You can also register at the North America 2011 kiosk located at registration Join us in Atlanta next year