1. Adwait JoshiJim Harrison Sr. Product ManagerProgram Manager Microsoft Corporation SESSION CODE: SIA308

4. Across on-premises & cloud Integrate and extend security across the enterprise Block from: Enable CostValue SiloedSeamless to: Simplify the security experience, manage compliance Protect everywhere, access anywhere Highly Secure & Interoperable Platform

5. PROTECT everywhere ACCESS anywhere SIMPLIFY security, MANAGE compliance Protect endpoints from emerging threats and information loss, while enabling more secure access from virtually anywhere INTEGRATE and EXTEND security Provides unified administration for desktop management and protection Increases visibility of potentially vulnerable desktops Uses existing System Center Configuration Manager infrastructure Builds on and extends Windows security Enables multi-layered antimalware protection Protects critical data wherever it resides Provides more secure always-on access

6. Enables employees to safely use the Internet without worrying about malware and other threats. Comprehensive Web Security Includes and improves proven network protection technologies of ISA 2006 Next Generation of ISA Server

7. HTTP Anti- virus/spyware URL Filtering HTTPS forward inspection Secure Web Access VoIP traversal (SIP) Enhanced NAT ISP Link Redundancy Logging Improvements Updated firewall client NDIS Filter (Layer-2) Firewall Exchange Edge/FPE integration Anti-Virus Anti-spam Array-based Mgmt E-mail Protection Network Inspection System (GAPA) Flood Mitigation Intrusion Prevention NAP integration with VPN role Supports SSTP VPN Remote Access Scenario UI & Wizards Mixed Arrays Enhanced reporting W2K8 R1 SP2 or R2, native 64-bit Deployment & Management Subscription Svcs: HTTP: AV+URL Filtering Email: AV+Anti-Spam NIS signatures Web Protection 7

8. Authenticating proxy with security Web Anti Malware and URL filtering Inspection of HTTP and HTTPS traffic Secure Web Gateway All-in-one solution for medium businesses and for branch offices Firewall, Proxy, VPN, IPS, Email relay in a single box Unified Threat Management (UTM) Dial-in VPN Site to site VPN Secure Web Publishing Remote Access Gateway Anti Spam Anti Virus Email Filtering Secure Email Relay Management

11. Firewall Service MRS Cache MRS Cache 2 3 4 5 6 7 11 Web Proxy Engine 10 8 9 WWSAPI WinHTTP

13. SOAP Req to HTTPS://10.ds.mrs.microsoft.com GET HTTP://my.kitty.cat.com/calico?gimmenow HTTP://my.kitty.cat.com/calico?gimmenow HTTP://kitty.cat.com/calico?gimmenow HTTP://cat.com/calico?gimmenow HTTP://com/calico?gimmenow In MRS Cache? WWSAPI MRS Cache MRS Cache Nope…

14. WinHTTP CONNECT 10.ds.mrs.microsoft.com:443 POST HTTPS://10.ds.mrs.microsoft.com WinHTTP WWSAPI SOAP Response SOAP Request WinHTTP SSL Tunnel WinHTTP SOAP Response WWSAPI 200 OK

15. URL Categories WWSAPI 403 12233 MRS Cache MRS Cache

17. Too Much MRS Traffic (~1GB/day)

19. SOAP Req to HTTPS://10.ds.mrs.microsoft.com GET HTTP://my.kitty.cat.com/calico?gimmenow WWSAPI WinHTTP POST HTTPS://10.ds.mrs.microsoft.com WinHTTP WWSAPI

27. TMG Update Agent WUA API WinHTTPWinHTTP WU Config WinHTTPWPADSvcWinHTTPWPADSvc

37. Firewall Service Web Proxy Filter Malware Inspection Filter

38. 502; 12210

42. Failed Connection AttemptTMG-01 2/3/2010 7:21:23 AM

45. Learn more & try our solutions at: www.microsoft.com/forefront

46. SIA320 |Business Ready Security: Protecting Endpoints from Advanced Threats with Microsoft's Secure Endpoint Solution SIA301 |Secure Endpoint: DirectAccess and Microsoft Forefront Unified Access Gateway 2010, the Complete Remote Access Solution SIA308 | Secure Endpoint: Advanced Protection from Dynamic Threats, a Microsoft Forefront Threat Management Gateway 2010 Deep Dive SIA309 |Secure Endpoint: What’s in Microsoft Forefront Endpoint Protection 2010 - A Deep Dive into the Features and Protection Technologies SIA325 | Secure Endpoint: Virtualizing Microsoft Forefront Threat Management Gateway (TMG) SIA02-INT | Secure Endpoint: Planning DirectAccess Deployment with Microsoft Forefront Unified Access Gateway SIA07-INT | Secure Endpoint: Architecting Forefront Endpoint Protection 2010 on Microsoft System Center Configuration Manager SIA05-HOL | Microsoft Forefront Threat Management Gateway Overview SIA09-HOL | Secure Endpoint Solution: Business Ready Security with Microsoft Forefront and Active Directory SIA11-HOL | Microsoft Forefront Unified Access Gateway (UAG) and Direct Access: Better Together Red SIA-3 | Microsoft Forefront Secure Endpoint Solution

47. Learn more about our solutions: http://www.microsoft.com/forefront Try our products: http://www.microsoft.com/forefront/trial

48. www.microsoft.com/teched www.microsoft.com/learning http://microsoft.com/technet http://microsoft.com/msdn

50. Sign up for Tech·Ed 2011 and save $500 starting June 8 – June 31 st http://northamerica.msteched.com/registration You can also register at the North America 2011 kiosk located at registration Join us in Atlanta next year