How to integrate Microsoft Forefront with Windows operating systems

I want to know about an integration of MS Forefront. I am working on Windows operating system (Windows 7 or Windows Server 2008). So I need information about how to integrate Microsoft Forefront with Windows operating systems??. I also want to know about the safety components of the Windows operating system. I have already searched about an integration of MS Forefront with Windows operating system on web but didn't found any appropriate solutions. So thought that I would definitely get some help from here. Please provide some necessary replies. :notworthy

The Microsoft Forefront modules often need to work closely with the security components of the Windows operating system. We explain in detail the links and the role of Forefront in conjunction with the Windows security modules. Microsoft Forefront Security comprises three areas and the corresponding product groups: the protection of the corporate limits (Edge Security) made by the Threat Management Gateway and Unified Access Gateway. The modules of the Forefront Server Protection protect the most important communication server of Microsoft, so Exchange Server, SharePoint Server and Office Communication Server. The Endpoint Security provides protection to the device. In addition, as with the Rights Management System (RMS) is another security system for protecting data.

I would like to tell you about the safety components of the Windows operating system. At one point we do to other security devices from Microsoft and its interactions with Forefront received. Client-side was already Windows Vista whole set of new security tools and concepts bid. These are also in Windows 7 and partially in Windows Server 2008 has been adopted. These include the renewed Windows - Firewall, Bitlocker, Windows Defender, the Malicious Software Removal Tool, the User Account Control and Network Access Protection. Local complement firewalls on the terminals, the safety of specific security devices such as Forefront. In Windows Server 2008 and Windows 7 , Microsoft has extended the firewall functions. These can now examine outbound traffic and authentication by IPSec to perform. In the Windows Server 2003 version they confined themselves out of the control of the incoming network traffic. The operation of this firewall is the TMG similar. This rule sets define the incoming and outgoing traffic and define it, who can communicate with whom.

By BitLocker data are all encrypted on the hard disk, so that it focuses primarily on the safety of notebooks. The Windows Defender is a tool to prevent spyware attacks from outside. The Malicious Software Removal Tool (MSRT) helps in cleaning of Windows computers of infected code. Through the User Account Control (UAC) will eventually be prevented under attack code pushed triggers processes that are explicitly required or allowed. But the SQL Server 2008 has been equipped with security features. Use the Transparent Data Encryption to encrypt the data tables and log files. Encryption is implied by the SQL Server performed. In this case, the applications can not be changed. The transparent data encryption, thus preventing unauthorized access to data, or at least difficult. The accompanying keys are managed directly by the SQL Server.

Another safety device is Network Access Protection (NAP). NAP agent will be investigated: a device that provides access to the corporate network through built-in security features. Devices that do not meet the safety requirements will not have access to the corporate network and are instead sent to the quarantine. There, they must first of the threat, such as a virus can be cleaned. Only after this "cleaning" (Remediation) to get access to the corporate network. NAP is based on the interaction of multiple devices and prevents the access of infected machines to the corporate network. NAP is also in the use of the Forefront Unified Access Gateway to use. Most of the Forefront modules deals with the security of communication channels and also exchanged information. This occurs, for example through access control and protocol and mail filters. The information itself is relatively little attention here. It is possible for an attacker, the hurdles to overcome, especially the firewall, it can often on the information through the firewall are secured access.

The overall market, to the Data Leakage Protection was created, has the sole aim, the theft and misuse of data to be avoided. DLP functions can also be built through the filter of the TMG. Next to it is with the Rights Management System (RMS) is another security system for protecting data. RMS is information protection, which refers to the object itself. Here, the information, no matter where they are protected from abuse. As each additional component protection must be installed and maintained, should be as simple as possible. Microsoft has, therefore, the RMS features embedded in the operating system directly, they are a service of the Windows server set up 2008th The same applies to the client systems like Microsoft Vista and Microsoft Windows 7 : They will also include the RMS functions. Windows XP users need to download but only an RMS module from the MS Web site.

RMS always requires authentication of the user, this is one of the conditions for the use of RMS. The technique of identification is not important. The method works with user permission on the basis of user name and password or through the use of smart cards. By means of RMS services, information protected by permanent usage guidelines. These policies are always applied to the information and are bound by the information. Therefore, it is irrelevant where the information is or where it was moved. The guidelines specify, for example, who change the open information, print, or may pass. To simplify the use of RMS in the company can custom templates (templates) for creating usage policies. In the RMS templates access rights for individuals, groups or organizational units, or be defined for the entire company. The creation of RMS templates centrally on the RMS server. The templates are then made available to the user.