DATA SHEET

Security, Identity, and Access Management

Application and Host Protection

Proven expertise and demonstrated best practices designed to reduce the time and maintenance required to preserve the integrity of clients and servers
In todays security environment, the need to protect the integrity of mission -critical information from malware and virus-based attacks has never been more important. Security threats are more dangerous, frequent, and sophisticated than they have ever been. Additionally, security breaches interrupt business operations and cause organizations to lose productivity while increasing legal exposure and shareholder liability. Central to this problem is the addressing of internal and external threats for both individual desktops and server environments while minimizing the complexity and cost of management. Through the risk of virus infection and malware, network hosts have become vulnerable even from inside the network. Critical servers can be brought down if a comprehensive solution is not available.

Application and Host Protection

The Application and Host Protection Offering within the Security, Identity, and Access Management Portfolio from Microsoft Services provides an end-to-end host-protection solution that can help you protect corporate hosts from internal and external attacks and protect critical applications such as Exchange Server and SharePoint Server libraries. By disabling unnecessary services and software, your surface attack area can be reduced significantly, strengthening your network security. This Offering provides layered protection and a centralized security console to enable increased visibility of potential vulnerabilities and security-state reporting. This offering consists of the following solutions: Client and Server Anti-malware Services. Application Server Protection. Windows Host Hardening Services. The Application and Host Protection Offering can help you benefit from comprehensive protection, reduced costs, and simplified administration.

Lower cost through simplified administration. Multi-layered defense protection against multiple threats. Increased uptime

Client and Server Anti-malware Services

The Client and Server Anti-Malware Services solution provides planning and deployment guidance for implementing an anti-virus and anti-spyware infrastructure that provides operating-system protection of workstations, servers, and laptops. The guidance includes Forefront Client Security Enterprise Manager which allows up to 10 Forefront Client Security instances (or PODS) to be managed from a single management interface. This solution includes Deployment for Microsoft Forefront Client Security and will be updated with additional guidance as it becomes available.

Application Server Protection

In addition to providing anti-virus protection for the operating system itself, it is important to be able to protect applications such as SharePoint, Exchange, and Office Communication servers. The Application Server Protection solution provides the guidance

for deploying Forefront Security for SharePoint and Forefront Security for Exchange Server as well as the Forefront Server Security Management Console (FSSMC), which is used to provide centralized management of all Forefront instances. This solution includes Deployment of Microsoft Forefront Server Security and will be updated with additional guidance as it becomes available.

Windows Host Hardening Services (coming in 2009)

The Windows Host Hardening Services solution provides planning and deployment guidance for implementing role-based security configurations for both servers and workstations. This limits the exposure of the system by disabling unnecessary services and making modifications to key security settings to make the system as secure as possible in its particular role, while still allowing users and applications on the server to function as required. The current release of this Offering does not include this solution, but the solution will be included in a future release. Refer to the Windows Security Guides for Windows Server 2003, Windows Server 2008, Windows Vista operating system, and Windows XP operating system for guidance on how to secure Windows clients and servers using Group Policy.

This Offering is a Subset of the Overall Security, Identity, and Access Management Portfolio.
The Security, Identity, and Access Management Service Portfolio provides a suite of scenario-based solutions that are built on proven technologies and processes, enabling you to help protect and manage your IT infrastructure, data, and identities. The Portfolio drives lower total cost of ownership (TCO) through efficiency, consolidation, and security improvements that reduce the risk of internal and external attacks. The Offerings within the Security, Identity, and Access Management Portfolio allow greater access to information by partners, employees, and customers driving increased productivity, satisfaction, and revenue, while giving you the freedom of greater business agility during events such as mergers and acquisitions. Other Offerings within the Security, Identity, and Access Management Portfolio are Identity and Access Optimization Enterprise Data and Security Optimization Secure Web and Remote Access Enablement Enterprise Network Protection Security Monitoring and Compliance Enablement

Implement Best Practices

This Offering was developed in conjunction with the Forefront Client Security, Forefront Security for SharePoint, and Forefront Security for Exchange Server product development teams and the Microsoft internal IT department. It was then tested and refined through multiple, successful service engagements with large organizations. Microsoft Services consultants offer the highest level of expertise in planning, deploying, and optimizing security solutions. With a deep understanding of the Windows operating system, the Forefront suite of products, the Information Technology Infrastructure Library (ITIL), and the Microsoft Operations Framework (MOF), Microsoft Services consultants are uniquely qualified to provide guidance and best practices to help make your host- and application-server protection solution a success.

Engagement Overview
The deliverables of this engagement will be: Client and Server Anti-malware Services using Forefront Client Security. Application Server Protection using Forefront Server Security. Implementation of Windows Host Hardening Services.

For more information

about consulting and support offerings from Microsoft, contact your Microsoft Services representative or visit www.microsoft.com/services

2008 Microsoft Corporation. All rights reserved. This data sheet is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, IN THIS SUMMARY. Microsoft, SharePoint, Windows Server, Windows Vista, Windows XP, and Forefront are registered trademarks or trademark of the Microsoft group of companies.