Este documento describe Forefront Server Security para Exchange, una solución de seguridad que incluye 8 motores antivirus integrados directamente con Microsoft Exchange Server 2007. La solución ofrece protección contra virus, filtros de archivos y contenido, y notificaciones al administrador. Incluye una prueba gratuita de 120 días.
3. La solución correcta
para el cliente
correcto
Windows Small Essential
Windows Server, Exchange
Home Business Business
Server, SQL Server
Server Server Server
< 75 PCs < 300 PCs
Pequeños Mediana Grandes
Hogar Negocios Empresa Corporativo Organizaciones
Multi-PC, <25 PCs 25-500 PCs 500-1,000 PCs >1,000 PCs
Broadband
Connected 1-49 50-1,000 1,000 -5,000 >5,000
Homes employees employees employees employees
67% de Servidores 33% of Servidores
4. Windows Small
Business Server 2008
Standard Premium
Windows Server® 2008 Standard Lo mismo del standard
Microsoft® Exchange Server 2007 adicionalmente un segundo
Standard Edition servidor con:
Windows® SharePoint® Services 3.0 Windows Server 2008 Standard
Windows Server Update Services 3.0 Microsoft SQL Server® 2008
Microsoft Forefront™ Security for Standard Edition for Small
Exchange Server1, 2 Business3
Windows Live™ OneCare for Server1, 2
Integración con Office Live Small
Business2
Administración Protección a Crecer Soporte hasta
y configuración información de capacidad de 75 usuarios o
centralizados negocio negocio dispositivos
1 120 day trial included in product.
2 Windows Live OneCare for Server and Office Live Small Business are not available in all markets and languages; Microsoft Forefront Security for Exchange Server
is not available in all languages. Please see www.microsoft.com/sbs08 for details.
3 For the first year of availability, customers using applications that are not yet certified for use on SQL Server 2008, a copy of SQL Server 2005 Standard will also be
included in SBS 2008 Premium. SQL Server 2008 (or 2005) Standard can be installed on either server; if you install SQL Server 2008 Standard on the first server
then you must install the management tools on another machine.
6. Forefront Security for
Exchange Server
Microsoft Forefront Security for Exchange Server 1,2
• Valido por 120 días
• Múltiples motores de escaneo para virus (8)
Integrado directamente con Aplicaciones Microsoft
• Microsoft Exchange Server 2007 Standard Edition
Notificaciones al administrador
Pre-configurado para SBS
• Revisión de Virus
• Filtro de Archivos
• Filtro de contenidos
1120 day trial included in product.
2May not be available in all markets and/or languages. Refer to the Editions Overview page at www.microsoft.com/sbs for
details on market and language availability.
8. El poder de los múltiples
motores antimalware
Forefront Server Security for Puedes correr hasta 5 motores al
Exchange – 8 motores mismo tiempo – 2 motores
disponibles para escoger ya recomendado para mejor
licenciados rendimiento
Internal Messaging and
Collaboration Servers
A B C D E
9. Tiempo de detección promedio en un período de 12 meses
Average Response time1 (in hours)
En promedio, los conjuntos de motores de Forefront proveen respuesta en
3.1 hours o menos.
Otros productos con un solo motor tienen un tiempo de respuesta promedio
de 5 dias, 4 dias y 6 dias respectivamente.
* Includes beta signatures 1 AVTest.org 2008
14. Consenso en
SPAM
Más de 90% del los correos recibidos por negocios son SPAM
•
•
Fuentes externas: Spamhaus, Sophos etc
Fuentes internas: Microsoft SIR – Informe de Inteligencia sobre seguridad (enero a junio 2008)
Impacto en el negócio
• Perda de la productividad del individuo
• Infeccion viral desde robo de informacion confidencial hasta detención total del negocio
• En EEUU pérdidas de más de $13bi en 2007
http://www.microsoft.com/sir
Reporte bianual publicado en Español! Valor a
sus clientes!
15. Soporte?
Llamada GRATIS de soporte en temas relacionados
con:
• Virus no detectado por Forefront
• Boletin de seguridad
http://www.microsoft.com/latam/protect/support/default.mspx
18. Seguridad Microsoft: Defensa en profundidad
¡Una infraestructura
Servicios segura bien administrada
es clave!
Límite
Aplicaciones
de servidor
Protección
de la
información
Sistema
operativo Gestión de
cliente y identidad
servidor
y acceso
Gestión de
ciclo de vida
Servicios de de certificado
Federación
de Active Directory (ADFS)
Administración
de sistemas
Dispositivo móvil
Manager 2008
Administrador TWC
de protección
Configuration de datos
Manager 2007
Operations SDL
Manager 2007
19. Una cartera integral
Asegurar la plataforma — Vista/Mobile/Server
2008
Asegurar los datos — RMS, EFS, BitLocker
(más funciones en Office, SharePoint, etc.)
Asegurar la red — NAP
Asegurar el inalámbrico — Server 2008
Asegurar el extremo — ISA/IAG
Asegurar las comunicaciones —
Forefront Server, OCS, Exchange
Asegurar escritorios y servidores —
Forefront Client Security
20. Pero tecnología no es
el todo. Tenemos los
expertos y
investigadores de
virus 24x7x365…
25. SBS 2008: Renovación de
• suscripción
Para renovar los servicios una vez terminado el periodo de prueba de 120 dias
• Microsoft Forefront™ Security for Exchange
• Por Open Value
SBS 2008 FSE
Precio por suscripción $ 14.8 por usuario anualmente
(Open NL ERP)
SKU (English) 9SG-00120
Como renovar las Solo por socios (VL a través de
suscripciones? Open Value)
Cuales son los pasos que Contacte un socio local o visite
un cliente tiene que http://www.microsoft.com/forefro
seguir para renovar la nt/partners/default.mspx para
suscripción? encontrar uno
Cuales son los pasos que Proceso regular de compra –
un socio tiene que seguir seleccionando el correcto SKU
para renovar la para Forefront Server Security for
suscripción de sus Exchange en la lista de precios
clientes?
Instructor: Both SBS editions have a user/device limit of 75 CALs.Also probably a good time to “bust a myth” and mention that additional servers (a 3rd, 4th, 5th, etc.) can be added as desired to the SBS environment!Script: When building the Windows Server Small Business Server, security was a center point of the design from setup through to end of life of the product. Many security enhancements come as defaults in this new server SKU. Some of these items include:Strong password policiesCreating a new Administrator account so that the Administrator account is not well knownA local host firewall solution using the latest versions of Windows Firewall and enabling core functionalitySSL-based Web security using either a free (self-issued certificate solution) or paid trusted certificate solution to secure Web trafficAnti-spam features provided by Exchange Server 2007Built-in WSUS 3.0 with auto-approval policies for critical, security and definition, updates for the entire networkA single point of reference on the server to monitor and manage security servicesInstructor Note: Briefly touch on the two editions of SBS, that one is a single server solution, the other a second server solution. The second server, despite being sold with SQL 2008 can be used as any type of server. For instance, TS or other applications. Next slides are going to dive into included technologies.Windows Small Business Server 2008 comes in two editions: Standard and Premium. A Client Access License (CAL) for all included products simplifies license management.Windows Small Business Server 2008 Premium Edition becomes a second server solution. Standard Edition will run on one hardware server and Premium Edition will run on two hardware servers, with the second server running Windows Server 2008 Standardand SQL Server 2008 Standard edition for Small Business3 for Line of Business applications.Windows Small Business Server 2008 will include individual Client Access Licenses (CALs) for Standard and Premium Editions vs. a common CAL for both.Windows Small Business Server 2008 will include the option to purchase a single CAL (in addition to 5/10/20 CAL Packs) in all channels.All processor and memory limits will now match Windows Server 2008 Standard Edition.1 120 day trial included in product.2 May not be available in all markets and/or languages. Refer to the Editions Overview page at www.microsoft.com/sbs for details on market and language availability.3 For the first year of availability, customers using applications that are not yet certified for use on SQL Server 2008, a copy of SQL Server 2005 Standard will also be included in SBS 2008 Premium. SQL Server 2008 (or 2005) Standard can be installed on either server; if you install SQL Server 2008 Standard on the first server then you must install the management tools on another machine.
3 min (new in SBS2008)Instructor Notes: See bold below – please cover different scan options available.Currently no integration Forefront/WSS on SBS2008 – planned to be available in subsequent releasesMicrosoft Forefront Security for Exchange Server SBE (small business edition)120 free trialMultiple antivirus scan engines (eight) - (can only select 5 at a time)File filtering by file name, extension, or sizeIntegrates directly with server applications Exchange Server 2007 Scanning/Background scanningand WSS Scanning (when available)Comprehensive notifications to administratorScan job optionsReal-timeIn Forefront Security for Exchange Server, the Realtime Scan Job continuously scans inbound and outbound e-mail messages. This method of scanning e-mail messages in real time is the most effective way to stop the spread of infectious file attachments. You can configure the Realtime Scan Job to scan message bodies as well as attachments. This feature is disabled by default.In Forefront Security for SharePoint, the Realtime Scan Job continuously scans the files that users upload to or download from a SharePoint server. This method of scanning file transfers in real time is the most effective method to stop the spread of infectious files. Forefront Security for SharePoint can support up to ten real-time processes. By default, it supports three real-time processes.ManualIn Forefront Security for Exchange Server, the Realtime Scan Job continuously scans inbound and outbound e-mail messages. This method of scanning e-mail messages in real time is the most effective way to stop the spread of infectious file attachments. You can configure the Realtime Scan Job to scan message bodies as well as attachments. This feature is disabled by default.In Forefront Security for SharePoint, the Realtime Scan Job continuously scans the files that users upload to or download from a SharePoint server. This method of scanning file transfers in real time is the most effective method to stop the spread of infectious files. Forefront Security for SharePoint can support up to ten real-time processes. By default, it supports three real-time processes.TransportIn Forefront Security for Exchange Server, the Realtime Scan Job continuously scans inbound and outbound e-mail messages. This method of scanning e-mail messages in real time is the most effective way to stop the spread of infectious file attachments. You can configure the Realtime Scan Job to scan message bodies as well as attachments. This feature is disabled by default.In Forefront Security for SharePoint, the Realtime Scan Job continuously scans the files that users upload to or download from a SharePoint server. This method of scanning file transfers in real time is the most effective method to stop the spread of infectious files. Forefront Security for SharePoint can support up to 10 real-time processes. By default, it supports three real-time processes.Quick Scan – ImmediatelyScheduled background scanningIn Forefront Security for Exchange Server, a scheduled background scan helps you periodically scan a selected set of messages by using the latest engine updates and scanning configurations. The scope of the background scan is determined by the options that you select in the Background Scanning section of the General Options work pane. The Background Scanning option is not offered by Forefront Security for SharePoint.On-access scanningOn-access scanning is a new feature that is provided by Exchange Server 2007. This feature ensures that all the files that are accessed by the Exchange Server 2007 server are scanned at least once by Forefront Security for Exchange Server. On-access scanning is not offered by Forefront Security for SharePoint.