Help securely enable business by managing risk and empowering people

Identity Highly Secure & Interoperable Platform

Across on-premises & cloud from:

Block Cost Siloed

to:

Enable Value Seamless

Secure Messaging Secure Collaboration Secure Endpoint Information Protection Identity and Access Management

Protect endpoints from emerging threats and information loss, while enabling more secure access from virtually anywhere

PROTECT

everywhere

ACCESS

anywhere

INTEGRATE

and

EXTEND

security

SIMPLIFY

security,

MANAGE

compliance • • • Enables multi-layered anti malware protection Protects critical data wherever it resides Provides more secure always-on access • • Uses existing System Center Configuration Manager infrastructure Builds on and extends Windows security • Provides unified administration for desktop management and protection • Increases visibility of potentially vulnerable desktops

Fighting the FUD

The FUD – Part 1

The FUD – Part 2

OS Vulns in 2010

Linux 179 Windows 33

Management

Management

Network Structure

Internet Virtual Networking Components FF Edge Server Virtual Networking Components Intranet Server

Physical vs. Virtual

TMG TMG

Common Virtual Network Mistakes

Hyper-V

WEB SQL Internal

Better Virtual Network Design Management

Hyper-V

WEB SQL External

Management NIC

Internal or Internet NICs

Virtual Network Configuration

Hyper-V R2 ONLY !

Domain vs. Workgroup

Government Regulatory Compliance

Management, Auditing & Forensics

Traffic Profile

My Desktop “Idle State”

Establish a Baseline

Resource Consumption

Feature Added CPU RAM Web Cache URL Filtering HTTPS Inspection Net Insp System NLB (500Mb max) Compression SQL Expr Logging Malware Insp

Variables

1% 1% # 5% # 5-10% # 5-10% # 5-10% @# 5-10% @# 5-20% # @ 2% # 1-5% @ 5% # 5-8% @ 5-10% @# # 5-10% #

@ TMG Configuration # Traffic Profile

Disk @ # @# # Net # (-) # (-) @ (+) 5% # # (-) # # (+)

Phsyical vs. Virtual

Virtual Platform Limits

Baseline and Feature Perfmon Counters

Virtualizing Forefront Edge Products Hardware Firewall Beat-down Debunking Domain vs. WG Myths What Hardware Firewall Vendors Don't Want You to Know 7 Best Practices for Physical Servers Hosting Hyper-V Roles Hyper-V Architecture Hypervisor Security WS08 R2 Hyper-V VHD Performance White Paper

Forefront TMG Capacity Planning Web Application Stress Tool Active Directory Performance Testing Tool (ADTest.exe) Microsoft Exchange Server Stress Tools Support Tools Available For Stress Testing & Performance Analysis Office SharePoint Server Capacity Planning Tools

SIA320 |Business Ready Security: Protecting Endpoints from Advanced Threats with Microsoft's Secure Endpoint Solution SIA301 |Secure Endpoint: DirectAccess and Microsoft Forefront Unified Access Gateway 2010, the Complete Remote Access Solution SIA308 | Secure Endpoint: Advanced Protection from Dynamic Threats, a Microsoft Forefront Threat Management Gateway 2010 Deep Dive SIA309 |Secure Endpoint: What’s in Microsoft Forefront Endpoint Protection 2010 - A Deep Dive into the Features and Protection Technologies SIA325 | Secure Endpoint: Virtualizing Microsoft Forefront Threat Management Gateway (TMG) SIA02-INT | Secure Endpoint: Planning DirectAccess Deployment with Microsoft Forefront Unified Access Gateway SIA07-INT | Secure Endpoint: Architecting Forefront Endpoint Protection 2010 on Microsoft System Center Configuration Manager SIA05-HOL | Microsoft Forefront Threat Management Gateway Overview SIA09-HOL | Secure Endpoint Solution: Business Ready Security with Microsoft Forefront and Active Directory SIA11-HOL | Microsoft Forefront Unified Access Gateway (UAG) and Direct Access: Better Together Red SIA-3 | Microsoft Forefront Secure Endpoint Solution

Learn more about our solutions:

http://www.microsoft.com/forefront

Try our products:

http://www.microsoft.com/forefront/trial

www.microsoft.com/teched http://microsoft.com/technet www.microsoft.com/learning http://microsoft.com/msdn

Sign up for Tech·Ed 2011 and save $500 starting June 8 – June 31

st

http://northamerica.msteched.com/registration

You can also register at the North America 2011 kiosk located at registration Join us in Atlanta next year