1. Forefront Server Security

2. Agenda Introduction to Forefront Server Security products
Comprehensive Protection Features
Optimized Performance Features
Simplified Management Features
Forefront Security for Exchange Server
Exchange 2007 Role Support
Premium Anti-spam Services
File filtering
Forefront Security for SharePoint
SharePoint API
Content filtering
Summary

3. Server Security Product Roadmap
Microsoft Forefront
4/20/ :52 PM
Server Security Product Roadmap
Past
Present
Future
Next Generation Client Security
Client
Next Generation Server Security
Server
Integrated Protection & Management
Codenamed ‘Stirling’
(Beta 2)
Talking Points
On December 2006, Forefront Security for Exchange Server replaced the Messaging Security Suite (which is comprised of Antigen for Exchange + Antigen for SMTP Gateways + Antigen Spam Manager).
Messaging Security Suite, Antigen for Exchange, Antigen for SMTP Gateways, Antigen Spam Manager were removed from the Price List as of December 1, 2006.
Forefront Security for Exchange Server is designed for use with Exchange Exchange 2007 can be deployed in multiple roles and Forefront Security for Exchange Server can be deployed at the Exchange Edge role, Exchange Hub Transport (SMTP), as well as at the Exchange Mail Store. It also includes Premium Anti-Spam capabilities.
For this reason, we have consolidated to a single Forefront Security for Exchange Server SKU for Exchange 2007, since it effectively provides the capabilities of all three of the former Antigen for Exchange products (Antigen for Exchange + Antigen for SMTP Gateways + Antigen Spam Manager).
Since customers will likely migrate to Exchange 2007 over a period of time, any customer purchasing Forefront Security for Exchange Server will have downgrade rights to the Messaging Security Suite (Antigen for Exchange + Antigen for SMTP Gateways + Antigen Spam Manager for use with Exchange 2003 (or 2000) servers.
Customers with a current subscription to Antigen for Exchange or Messaging Security Suite are licensed for Forefront Security for Exchange Server. The media will be available through the Volume License Kits, MVLS, and WW Fulfillment.
Standard Volume License Keys will apply to Forefront Security products.
Forefront codename “Stirling”, will be a single product that will deliver comprehensive, coordinated protection across clients, server applications, and the network edge with unified security management and reporting.
The key features and functionality of Forefront codename “Stirling” include:
Comprehensive Protection: On the protection side, “Stirling” integrates a comprehensive set of protection technologies, including anti-malware, anti-spam, content filtering, host firewall, multi- engine protection, network edge protection technologies and others to be announced at a later date.
Unified Management: “Stirling” provides unified security management through a single console with unified policy for managing client, server application and edge security.
Critical Visibility: “Stirling” provides critical visibility into the security state of the organization with one central dashboard for viewing insightful, prioritized reports, including insights into threats and vulnerabilities.
Edge
Next Generation Edge Security & Access
©2006 Microsoft Corporation. All rights reserved.
This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary. 3 3

4. Comprehensive Protection

5. Anti-virus Approaches
Internet
Problem Single Point of Failure
Viruses
Worms
Spam
ISA Server A
SMTP Server A
Single Vendor Single Engine
Some enterprises take a single-vendor approach to virus scanning. This means they will have one vendor scan engine throughout their entire environment – at the gateway, on their mail servers, on their desktop. This is not a best-practices approach and leads to potential vulnerabilities. If that one antivirus lab happens to miss a virus or react slowly to a new outbreak, there is no other protection in the entire enterprise. This means the virus can gain entry via the gateway, infect mailboxes via the mail server, and infect desktops via the mail client. In short order the virus can infect wide portions of the enterprise. A A A
Exchange
Exchange
SharePoint A A A

6. Anti-virus Approaches
Internet
Problem Management/Cost
Viruses
Worms
Spam
ISA Server A B
SMTP Server
Multi-vendor Multi-engine
To protect against this, most industry analysts recommend a layered defense approach, which uses different scanning technologies at different levels. For instance, one vender at the gateway, one on the mail stores and a third on the desktop. The problem with this approach is that it is costly, complex and difficult to manage. C D E
Exchange
Exchange
SharePoint A B C

7. Harnessing the Strength of Multiple Engines
Forefront Server Security products integrate and ship with industry-leading antivirus scan engines from
Each scan job in a Forefront Server Security product can run up to five engines simultaneously
Internal Messaging and Collaboration Servers
Forefront Server Security products combine the efficacy of a multi-layered defense with the ease of use and cost efficiencies of a single vendor solution. It does this by integrating multiple antivirus engines from top worldwide virus labs into a single product, and provides all updates from a single source. This multiple engine approach is available across all Forefront Server Security products. A B C D E

8. The Multiple Engine Advantage
Response time1 (in hours)
The Microsoft multiple-engine solution
Other single-engine solutions
WildList Number
Malware Name
Forefront Set 1
Forefront Set 2
Forefront Set 3
Vendor A*
Vendor B*
Vendor C*
10/2006
Areses!Itw30
0.00**
0.00
Areses!Itw36
Areses!Itw37
52.30
175.45
Areses!Itw41
13.15
194.35
Mytob!Itw590
Rontokbro!Itw36
613.40
Sdbot!Itw1809
9.97
166.07
270.39
Sdbot!Itw1831
65.95
52.23
41.78
59.43
1.00
46.38
Sdbot!Itw1847
56.54
204.79
416.27
29.92
85.32
Stration!Itw101
93.88
23.46
96.85
Stration!Itw102
26.00
28.05
30.83
Stration!Itw42
0.92
3.72
3.12
7.05
Stration!Itw43
2.00
4.80
4.20
8.13
Stration!Itw44
5.60
7.58
Stration!Itw45
3.55
Stration!Itw46
2.75
2.20
6.78
Stration!Itw47
Stration!Itw60
4.64
6.32
11/2006
Rbot!Itw2090
298.64
Sdbot!Itw1814
Sdbot!Itw1866
26.80
35.27
Sdbot!Itw1867
14.00
12.84
23.14
Sdbot!Itw1876
468.60
306.82
430.80
Stration!Itw124
0.38
0.66
1.88
8.80
12/2006
Bagle!Itw137
4.01
13.83
Bagle!Itw141
17.15
Puce!Itw1
Rbot!Itw2038
Sdbot!Itw1889
128.28
255.20
63.96
Rapid response to new threats
Fail-safe protection through redundancy
Diversity of antivirus engines and heuristics
-- Research from AVTest.org
-- Tested In-the-Wild viruses from 10/06 – 12/06
-- 96 total viruses tested
-- 29 viruses showed significant variations in detection times
-- Forefront engine sets performed much better when compared to three leading competitors
Tested vs. both released engines and beta engines (this data includes the beta engines)
= Less than 5 hours
= 5 to 24 hours
= More than 24 hours
* Includes beta signatures
** 0.00 denotes proactive detection
1 Source: AV-Test.org 2007 ( 8 8

9. Optimized Performance

10. Optimized Performance Controls
Engines used are not always the same. They are dynamically allocated from the available pool. A C B D
Bias
Now that we have discussed the advantages of multiple scan engines, the next logical question concerns performance. How do Forefront Server Security products manage to run four, five or more engines and not suffer from performance issues?
One of the ways it does this is by having intelligent engine management through the Multiple Engine Manager. The Engine Manager allows for the application of “bias settings,” which are performance tuning options that let you adjust each Antigen server as needed to find the right balance between performance and security. The Bias Settings range from Max Certainty through Neutral to Max Performance.
A setting of Max Certainty means you will use all available scan engines to scan every piece of mail, or every document loaded into SharePoint, etc. So if you have four engines, each will be scanned by all four of them. Ideally, you will always set everything to Max Certainty, but realistically this is not always possible.
Max Certainty: uses all engines (100%)
Favor Certainty: uses all available engines*
Neutral: uses approximately 50% of available engines*
Favor Performance: uses 25% of available engines*
Max Performance: uses one engine for every scan*

11. Optimized Performance Controls
Engines used are not always the same. They are dynamically allocated from the available pool. A B
Bias
In the Neutral setting, Forefront Server Security products will use approximately 50% of whatever engines are available, or in this example 2 of the 4 engines. However, Forefront does not simply use the engines randomly, nor does it use the same two engines all the time. The Multiple Engine Manager provides intelligent decision making about which engine to use in an attempt to use the best possible two engines at any given time. One of the factors involved is engine update time. For example, if engine 1 was very recently updated, that engine will get preference when selecting the engines. As the engine ages and other engines are updated, those more recently engines will get priority status.
Max Certainty: uses all engines (100%)
Favor Certainty: uses all available engines*
Neutral: uses approximately 50% of available engines*
Favor Performance: uses 25% of available engines*
Max Performance: uses one engine for every scan*

12. Simplified Management

13. Forefront Server Security Management Console Features
Central management console
Deploys and configures Forefront/Antigen Security for Exchange and SharePoint environments
Automates signature updates across the enterprise
Scans for and pulls updates for multiple antivirus engines
Distributes updates to all Forefront/Antigen servers
SharePoint Servers
Forefront Server Security products provides central control over protected servers with Forefront Server Security Management Console. FSSMC is a web-based console that allows you to centrally deploy Forefront Server Security software and configurations to individual servers or groups of servers. The Forefront Server Security Management Console will be available in beta in Q (CY). This new version will include support for Exchange 2007 CCR clusters. By RTM it will also be localized into into eleven languages:
Brazilian Portuguese, Chinese traditional, Chinese simplified, English, French, German, Italian, Japanese, Korean, Spanish, Russian
User interface, notifications and Event Log will all be localized
Program Log will remain in English to assist technical support
Exchange Servers 13

14. Forefront Server Security Management Console Features
Comprehensive reporting
Detected viruses, keyword filters or file filters
Actions taken by Forefront/Antigen on detection of a virus or content violation
Message traffic activity
Antivirus engine versions
Outbreak alerts
SNMP and SMTP alerts sent when administrator-defined thresholds for viruses, file and content filters are exceeded
Alerts can be forwarded to Microsoft Operations Manager 14

15. Automated Signature Updating
Internet
Internet
Engine Partner Updates
Forefront Engine Adaptor
All Forefront Server Security products are updated with an automated, secure signature update process. FSSMC plays an important role, in that it can help make this update process more efficient. The update process works like this:
Microsoft polls engine vendor website for new updates
Microsoft downloads new vendor engine package
Microsoft creates Forefront Engine Update Package containing the new vendor engine and the Forefront Engine Adapter
Microsoft runs automated test against Engine Update Package with a set of viruses.
Microsoft digitally signs the Engine update package to ensure secure delivery to the customer
Microsoft posts Update Package to a secure Microsoft website for download and send engine update notifications.
FSSMC polls Antigen update site for new engine updates
FSSMC downloads new engine update and sends alert to Forefront Server Security servers throughout enterprise that new signatures are available for download.
Forefront Server Security servers pull new engine updates from FSSMC. 15

16. Notifications & Reporting16

17. Microsoft Operations Manager Forefront Management Pack for MOM 2005
Over 100 Events, Performance Counters, and Services Monitored
Monitors the state of Forefront.
Collects statistical data on scanning, detection, and removal of messages and attachments
Polls Forefront Services - Provides timed events to poll systems for critical process health
Key Tasks
Triggers scan engine updates
Centralizes storage and deployment of license files
Imports, exports and deploys setting changes
Initiates and/or schedules manual scan jobs
Starts/Stops control of Forefront services
The Forefront Management Pack for Microsoft Operations Manager allows Forefront Server Security products to provide availability and performance data to MOM. <go through bullets on slide> 17

18. Forefront Security for Exchange Server

19. Comprehensive Protection
Secure Messaging
Microsoft® Forefront™ Security for Exchange Server includes multiple scan engines from industry-leading security firms, integrated in a single solution to help businesses protect their Exchange messaging environments from viruses, worms, and spam.
Ships with & manages multiple antivirus engines
Multi-layered protection in Exchange 2007
File Filtering and premium anti-spam protection
Comprehensive Protection
Deep integration with Exchange Server
Scanning innovations & performance controls
Maintains uptime and optimizes performance
Optimized Performance
Easily manage configuration and operation
Automated signature updates
Reporting, Notifications and Alerts
Simplified Management 19 19

20. What’s New in This Release?
4/20/ :52 PM
What’s New in This Release?
Forefront Security for Exchange Server
Support for three Exchange roles in single product
64-bit support (32-bit support only for evaluation)
Localization into 11 languages
Support for new Exchange AV features
AV transport stamp
Targeted background scanning for optimized performance
Access to all scan engines included with license
Premium anti-spam services for Exchange 2007
Cluster Server improvements including new Exchange 2007 CCR cluster support
© Microsoft Corporation. All rights reserved.
This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary. 20

21. Exchange 2007 Enterprise Topology
4/20/ :52 PM
4/20/ :52 PM
Exchange 2007 Enterprise Topology
Enterprise network
Other SMTP Servers
Edge Transport
Hub Transport
PBX or VoIP I N T E R
Routing
Hygiene
Routing
Policy
Unified Messaging
Applications:
OWA
Voice Messaging
Protocols:
ActiveSync, POP, IMAP, RPC / HTTP …
Mailbox
Fax
Programmability:
Web services,
Web parts
Mailbox
Public
Folders
Client Access
© Microsoft Corporation. All rights reserved.
This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary. 21 21
© 2006 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

22. Email Transport Scanning
4/20/ :52 PM
Transport Scanning
New intelligent scanning does not scan that has already been scanned
By default, scanned at Edge Transport or Hub Transport does not get scanned again when routed or deposited into mailboxes
Minimizes AV scanning overhead to maximize mail system performance
Significantly reduces scanning impact at the store
Can be turned off to allow scanning at all points
© Microsoft Corporation. All rights reserved.
This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary. 22

23. Transport Scanning – Inbound MailE R
Edge Server
Hub Role
Mailbox Role
SCAN and STAMP
NO SCAN
NO SCAN
Client
Mailbox Role
Mail scanned only once at the Edge
Saves processing load on Hub and Mailbox servers
Public Folder

24. Transport Scanning – Internal Mail
Edge Server
Hub Role
Mailbox Role
Internet
NO SCAN
SCAN and STAMP
NO SCAN
Client
Mailbox Role
Internal mail is routed through Hub role
Proactive scanning at the Mailbox server (store) is turned off by default
Saves processing load on Mailbox servers
NO SCAN
Public Folder

25. Mail Store Scanning – Multiple Options
Standard mode
Background Scan to sweep the store once each day, scanning only the most vulnerable files
On-access protection for unscanned mail
Outbreak mode
Re-scan on-access whenever scan engines update
Ultimate security mode
Scan on submission to store
Re-scan on access whenever scan engines update
Continuous background scan with new signatures . 25

26. Incremental Background Scanning
4/20/ :52 PM
Incremental Background Scanning
Ability to scope background scanning allows for daily “sweep” of store with latest updates
Scan only messages delivered in the past
4, 6, 8, 12, 18 hours
1, 2, 3, 4, 5, 7, 30 days
Combines security and performance
The most dangerous messages are scanned
The bulk of the store does not get scanned repeatedly for no reason
© Microsoft Corporation. All rights reserved.
This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary. 26

27. Premium Anti-spam Protection
Forefront Security for Exchange Server licenses and activates the premium anti-spam features for Exchange 2007
Deployed on Exchange Edge or Hub server role
Edge server can be deployed in front of Exchange 2003 mailboxes
Built upon base anti-spam in Exchange 2007, premium anti-spam protection adds:
Microsoft IP reputation filter service and automated updates
Automated updates for Microsoft Smartscreen spam heuristics, phishing Web sites and Intelligent Message Filter (IMF)
Targeted spam signature data and automatic updates to identify latest spam campaigns . 27

28. File Filtering A key part of any mail protection strategy
File filtering proactively blocks a specific range of potentially dangerous file types whether or not a signature exists
Suggested files to block: EXE, COM, PIF, SCR, VBS, SHS, CHM and BAT
Some users will block the same file types that are blocked by Outlook 2003
See Outlook online help for list 28

29. File Filtering Setting up file filters
Forefront blocks by extension and true file type
Can’t fool filter by simple change of extension
Each is configured differently
Use *.exe and All Types of files to block anything named *.exe
Use *.* and EXEFILE to block any executable file no matter what it is named 29

30. File Filtering Setting up file filters
Search for specific files by name, e.g. “resume.doc”
Wildcards supported, e.g. “*resume*.doc”
Each * represents 250 characters
File filters can be Inbound or Outbound
<in>*.exe, <out>*.doc
Files can be blocked based on size, and size/name/type/direction combinations
<in>*.mp3>2mb
<out>*.mp3>5mb
<in>*.*>10mb 30

31. File Filtering Actions
Every filter or filter list can have a separate action applied, offering great flexibility
Skip:Detect only – logs the event but does not block or alter the message
Not a secure setting!
Useful for monitoring and discovery purposes
Allows for pre-testing of new rules without end user impact
Delete:Remove contents – removes the attachment only and replaces with the customized deletion text
Purge:Eliminate message – deletes both the attachment and the message body
End user receives nothing 31

32. File Filtering – Zip file behavior
Forefront scans within ZIP and other compressed formats, deletes only the offending file and then repackages the ZIP
Custom deletion text
Container file before scan
EXE
DOC
JPG
BMP
DOC
JPG
BMP
TXT
Container file after scan
Filter Rules: Delete *.exe Quarantine
EXE
Quarantine 32

33. Forefront Security for SharePoint

34. Simplified Management
Secure Collaboration
Microsoft Forefront Security for SharePoint integrates multiple scan engines from industry-leading vendors and provides content controls to help businesses protect their Microsoft Office SharePoint 2007 and Windows SharePoint Services 3.0 collaboration environment by eliminating documents containing malicious code, confidential information, and inappropriate content.
Ships with & manages multiple antivirus engines
File & Content Keyword Filtering
Support for Open XML & IRM-protected docs
Comprehensive
Protection
Deep integration with SharePoint Server
Scanning innovations and performance controls
Maintains uptime and optimizes performance.
Optimized
Performance
Easily manage configuration and operation
Automated signature updates
Reporting, Notifications and Alerts
Simplified Management 34 34

35. What’s New in This Release?
4/20/ :52 PM
What’s New in This Release?
Forefront Security for SharePoint
Both 32-bit and 64-bit support
Localization (11 languages)
Support for SharePoint Information Rights Management Documents
Keyword filtering on Office XML Open Format and Excel formats
Access to all scan engines included with license
Forefront software localized into 11 languages
Brazilian Portuguese, Chinese traditional, Chinese simplified, English, French, German, Italian, Japanese, Korean, Spanish, Russian
User interface, notifications and Event Log will all be localized
Program Log will remain in English to assist technical support
Microsoft has added new file formats to the 2007 versions of Word, Excel, and PowerPoint to reduce file size, improve reliability, and enhance integration with external sources.
© Microsoft Corporation. All rights reserved.
This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary. 35

36. Forefront Security for SharePoint
4/20/ :52 PM
Forefront Security for SharePoint
Protects MOSS 2007 and WSS 3.0
Virus Protection for Document Libraries
Integrates scan engines from eight industry leading vendors
Real-time scanning of documents uploaded and downloaded from document library
Manual and scheduled scanning of document library
SQL Document Library
Document
SharePoint Server
Users
Document
Microsoft Forefront Security for SharePoint:
Integrates multiple scan engines from industry-leading vendors
Provides content controls to help businesses protect their Microsoft Office SharePoint 2007 and Windows SharePoint Services 3.0 collaboration environments
Previous SharePoint versions supported by Antigen for SharePoint
Offers three kinds of protection:
Antivirus scanning of files/documents
File filtering
Document content keyword filtering
Supports both 32- and 64-bit deployments
Content Policy Enforcement
File filtering to block documents from being posted based on name match, file type or file extension
Content filtering by keywords within documents for inappropriate words and phrases
© Microsoft Corporation. All rights reserved.
This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary. 36

37. SharePoint API integration
4/20/ :52 PM
SharePoint API integration
Utilizes the SharePoint Virus API to scan files during upload and download
Optimized for performance in a SQL environment
Files are not rescanned if engines have not been updated
Up to ten simultaneous scanning threads to help ensure users are not delayed waiting for documents to scan
Automatic integration with SharePoint Information Rights Management (IRM) to scan protected files on the fly
© Microsoft Corporation. All rights reserved.
This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary. 37

38. Forefront Server Security Management Console

39. Simplified Management
Forefront Server Security Management Console allows administrators to easily manage Forefront Security for Exchange Server, Forefront Security for SharePoint and Microsoft Antigen, providing a web-based console to centralize configuration and operation, automate the download and distribution of signature and scan engine updates, and generate comprehensive reports.
Simplified Management
Centralized, web-based console
Automated signature updates for multiple AV engines
Comprehensive reporting
Outbreak response
Rapid update distribution
Comprehensive
Protection
Simplified Management
Centralized Web-based control - provides central configuration, deployment, and updating for all Forefront server security products in enterprise environments that have multiple Exchange, SharePoint or Windows SharePoint Services servers.
One-stop, automated updates - Through its Rapid Update Process, Microsoft monitors all scan-engine vendor Web sites for updates, downloads and validates new engine versions and signatures as they become available, and then posts them online.
Automatic Server Discovery - automatically discovers new Exchange servers in an organization, allowing administrators to ensure proper security configurations and reporting for messaging servers added to the environment.
Migration Protection -Provides management for Forefront Server Security products, as well as Microsoft Antigen. This support allows organizations to monitor their protection for Microsoft Exchange Server 2003 and Microsoft Exchange Server 2000 environments, and during migration to Exchange 2007.
Localization - Localized in 11 languages, making it easier for administrators to manage their messaging server security in the language of their region. Languages include: English, German, French, Japanese, Italian, Spanish, Korean, Chinese (Simplified), Chinese (Traditional), Portuguese (Brazil), and Russian.
Comprehensive Protection
Outbreak response - provides outbreak alerts, giving administrators warning when their Exchange and SharePoint servers are under attack. In the case of new threats that do not yet have a detection signature, allows administrators to create file or content filters that can be pushed enterprise wide to stop the outbreak in its tracks.
Rapid Update Distribution - alerts all Antigen and Forefront/Antigen servers when new updates are ready for download and distributes them immediately, ensuring that all servers are protected with the latest signatures. If any updates fail, administrators are alerted, enabling them to quickly respond and minimize any risk of exposure.
Optimized Performance
Effective mail cluster support - supports new Exchange 2007 CCR Clusters.
Redundancy - provides the ability to monitor system health and offload critical functions like signature updates and security setting propagation to a secondary Forefront Server Security Management Console server if necessary to ensure availability, updates and protection.
Integration with SQL Server 2005 & Windows Server 2003
Redundancy maintains server availability
Support for Exchange 2007 CCR clusters
Optimized
Performance 39 39

40. What’s New in Forefront Server Security Management Console?
Exchange 2007 CCR Cluster Support
SQL 2005 Support*
Auto-discovery of Exchange Servers*
Exchange Server Filter*
Redundancy*
Localization in 11 languages**
Forefront Server Security products provides central control over protected servers with Forefront Server Security Management Console. FSSMC is a web-based console that allows you to centrally deploy Forefront Server Security software and configurations to individual servers or groups of servers. The Forefront Server Security Management Console will be available in beta in Q (CY). This new version will include support for Exchange 2007 CCR clusters. By RTM it will also be localized into into eleven languages:
Brazilian Portuguese, Chinese traditional, Chinese simplified, English, French, German, Italian, Japanese, Korean, Spanish, Russian
User interface, notifications and Event Log will all be localized
Program Log will remain in English to assist technical support
* Beta 2 (mid-2007)
** RTM (2H 2007) 40

41. Forefront Server Security Management Console

42. Support Matrix and History
4/20/ :52 PM
Support Matrix and History
Sybari Enterprise Manager
Antigen Enterprise Manager
Forefront Server Security Management Console
Sybari Antigen for Exchange/SMTP 8.0
Sybari Antigen for SharePoint 8.0
Sybari Antigen for Instant Messaging 8.0
Microsoft Antigen for Exchange/SMTP 9.0
Microsoft Forefront Security for Exchange Server
Microsoft Forefront Security for SharePoint
© Microsoft Corporation. All rights reserved.
This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary. 42

43. Customer Testimonials
“Forefront works like a dream. We don’t have to do anything to it until we’re ready to upgrade. With a small IT staff, that’s exactly what we want.”
Alexander Fischer, Chief of IT Infrastructure, Koehler Paper Group
“We wouldn’t put anything else for security on our Exchange Server 2007 machines. The software is well-respected. It’s been around; it’s proven. Our own experience with Microsoft Antigen is that it’s an outstanding product. Forefront Security for Exchange Server makes it even better.”
Chris Habala, Senior Architect/Analyst, Del Monte
“We looked at Forefront and it blew us away. We’re a Microsoft shop. We want to use products that will integrate well with what we have. And we’ve seen the Microsoft roadmap for the Forefront product range, so we know this is a product we can use to increasing advantage in the years to come.”
Peter Oescheger, CIO, Sasfin
“The integration of Forefront with Exchange is even better than the integration we saw with Antigen. It integrates proactively as part of the scanning flow. It’s not complicated to install or administer. Microsoft has taken one of the best antivirus products for Exchange and just made it better.”
Will Wilson, Director of Information Systems, Guardian Management

44. Summary Microsoft Forefront Server Security products:
Provide comprehensive antivirus, antispam and content filtering protection for Exchange Server, SharePoint Server, Windows SharePoint Services, and Live Communications Server
Strengthen messaging and collaboration security by integrating multiple industry-leading antivirus technologies in a single solution
Optimize performance of messaging and collaboration servers with scanning innovations and performance bias controls
Simplify management of messaging and collaboration security 44

45. © 2007 Microsoft Corporation. All rights reserved.
This presentation is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, IN THIS SUMMARY.

46. Appendix

47. Industry Analyst Perspective
Gartner Magic Quadrant for
Security Boundary 2006 *
* Magic Quadrant for Security Boundary, Peter Firstbrook, Arabella Hallawell Publication Date: 25 September 2006/ID Number: G 47

48. Magic Quadrant Disclaimer This Magic Quadrant graphic was published by Gartner, Inc. as part of a larger research note and should be evaluated in the context of the entire report. The Gartner report is available upon request from Microsoft. Go to: The Magic Quadrant noted on slide 16 is copyrighted September 25, 2006, by Gartner, Inc. and is reused with permission. The Magic Quadrant is a graphical representation of a marketplace at and for a specific time period. It depicts Gartner's analysis of how certain vendors measure against criteria for that marketplace, as defined by Gartner. Gartner does not endorse any vendor, product or service depicted in the Magic Quadrant, and does not advise technology users to select only those vendors placed in the "Leaders" quadrant. The Magic Quadrant is intended solely as a research tool, and is not meant to be a specific guide to action. Gartner disclaims all warranties, express or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.