Deploying and Administering Microsoft Forefront Client Security vA

This course is intended for technical deployment specialists and senior-level administrators who manage a Microsoft Exchange Server or Microsoft SharePoint Products and Technologies infrastructure or security practice.

After completing this course, students will be able to:

• Describe the Forefront Client Security components and architecture, and identify the different server roles.
• Complete and troubleshoot the server setup process, identify various server topologies, and describe basic MOM concepts and the MOM agent.
• Identify Forefront Client Security client component characteristics and describe the client setup and deployment processes.
• Understand Forefront Client Security administration and user roles, Forefront Client Security Policy UI settings and policy deployments, and know how to troubleshoot the Management Console.
• Understand the reporting services infrastructure used by Forefront Client Security.
• Use Forefront Client Security reports and alerting services, and troubleshoot reporting procedures.
• Describe the security state assessment (SSA) component of Forefront Client Security, and understand its architecture.
• Describe the object processor and manifest update in SSA.
• Review the SSA Security Check messages and results.
• Review methods and procedures used to submit malware to Microsoft for analysis.

Module 1: Course Overview
This module provides an overview of the Forefront Client Security components and architecture. It describes what to expect from the product, and what modules will be covered on what days.

* Forefront Product Overview
* Forefront Client Security
* Microsoft Forefront Client Security Components
* Training Modules

Module 2: Forefront Client Security Server Roles and Topologies
This module explains the various roles involved on the server side of a Forefront Client Security infrastructure, as well as how they relate to each other in the various possible topologies.

* Forefront Client Security Server Roles
* Collection Server
* Collection Server Database
* Reporting Server
* Reporting Database Server
* Forefront Client Security Server Setup
* Role Installation Steps
* Server Topologies
* SQL Server Database Sizing
* Configuration Wizard
* MOM Concepts
* Forefront Client Security Server Setup Troubleshooting

Module 3: Forefront Client Security Client
This module explains the Forefront Client Security client setup configuration and deployment.

* General Information
* Antimalware
* MOM Agent
* Client Setup
* Client Deployment Planning
* Forefront Client Security Client Deployment Methods
* Troubleshooting

Module 4: Forefront Client Security Management
This module explains Forefront Client Security management.

* Administration
* Administration Dashboard
* Forefront Client Security Policy Deployment
* Forefront Client Security Management Console Troubleshooting

Module 5: Forefront Client Security Reporting and Alerting
This module explains Forefront Client Security Reporting and Alerting.

* Reporting Services Overview
* Reporting Architecture
* MOM Reporting
* Forefront Client Security Reports
* SQL Server Reporting Services Troubleshooting
* Alerts

Module 6: Security State Assessment
This module explains security state assessment.

* Security State Assessment
* SSA General Information
* SSA Architecture
* SSA Object Processor (OP) and Manifest Updates
* SSA Security Checks

Module 7: Submitting Malware to Microsoft for Analysis
This module explains malware submission.

* Malware Submission
* Assisting Customers with Malware Submissions

Module 8: Closing
This module provides a review of the Forefront Client Security course, and a list of Web sites that provide additional information on Forefront Client Security.

* Antimalware Client Registry Settings
* Antimalware Errors
* PP Tracing
* Antimalware Events
* SSA Scan Event Log Events
* MOM Command Line Reference

Module 9: AppendicesLessons

* Appendix A: Antimalware Client Registry Settings
* Appendix B: Antimalware Errors
* Appendix C: PP Tracing
* Appendix D: Antimalware Events
* Appendix D: Antimalware Events
* Appendix F: MOM Command Line Reference