1. Boris Ulík Technology Solutions Professional Microsoft Slovakia Microsoft ® System Center 2012: System Center Endpoint Protection 2012

2. Agenda

3. A bit of history…

4. 2 System Center 2012 Editions 2 Processors, OSEs 2 Processors, Unlimited OSEs

6.  Built on top of System Center Configuration Manager  Supports all CM topologies and scale  Supports various operating systems Windows® Client and Server  Facilitates easy migration from previous versions and 3rd parties  Protection against all types of malware  Proactive security against zero- day threats  Productivity-oriented default configuration  Integrated management of host firewall  Backed by Microsoft Malware Protection Center  Unified experience for desktop administrators  Simple, operation-oriented policy administration  Historical reporting for security administrators

7. Top customer ask is role separation across 2 personas: security versus desktop admin CM 2012 provides RBA capabilities: permissions on objects, scoped to specific collections –EP object types: EP Client, EP Operations, EP Alerts, EP Policies –Permissions: Create, Modify, Deploy, Read –Scope: Policies, collections e.g., All Users in Japan, All Systems in Germany –New Role: Endpoint Protection Manager Endpoint Protection Administrator  Create new policies  Modify existing policies  Modify Precedence  Assign policy to assigned collection  Configure Alerts for assigned collections  Monitor Endpoint Protection status  Create new policies  Modify existing policies  Modify Precedence  Assign policy to assigned collection  Configure Alerts for assigned collections  Monitor Endpoint Protection status

8. Out-of-box administrative role for Endpoint Protection Manager (Kevin) Kevin only sees what’s relevant to him in console Kevin can: –Create, modify, and delete AM and FW settings –Assign AM and FW settings to collections –Create and modify Endpoint Protection alerts –Create and modify subscriptions to Endpoint Protection alerts –Initiate EP operational actions to scoped collections Meg (Full Administrator) must: CM setup, install EP role, SMTP, deploy the FEP client, and configure SUM and Auto Deployment Rules

9. Signature update Policy configuration EP client installation Silent removal of third-party products EP enabled in the console- EP installation starts on the device EP agent installer deployed with ConfigMgr Client Simplified Client Setup Ease of client setup and deployment No separate deployment needed for endpoint protection client Endpoint Protection agent installer deployed with Configuration Manager client setup Flexible administrative control Administrator can force or suppress any required reboots Configurable option for automatic removal of existing AV client Easy migration from existing solutions and automatic removal of existing clients Symantec McAfee TrendMicro Forefront Client Security or Forefront Endpoint Protection Client Installation Flow

10. Security & Management Concept Improved visibility and response to threats Reduced cost and complexity Centralized management and protection

11. Comprehensive Protection Stack Building on Windows Platform Security Proactive Techniques (Against Unknown Threats) APPLICATION FILE SYSTEM NETWORK Reactive Techniques (Against Known Threats) Behavior Monitoring Vulnerability Shielding (Network Inspection System) Windows Firewall Centralized Management DYNAMIC CLOUD UPDATES Microsoft Malware Protection Center Dynamic Signature Service System Center Endpoint Protection Windows 7 / 8 Data Execution Prevention Address Space Layout Randomization Windows Resource Protection User Account Control Antimalware Dynamic Translation and Emulation Internet Explorer ® 8 SmartScreen Microsoft BitLockerMicrosoft AppLocker

12. Demo

13. © 2011 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.