1. Protection and Control for Collaboration Servers
Microsoft® Forefront™ The Business Challenge Maximize SharePoint
Security for SharePoint®
manages and integrates
Companies are rapidly adopting SharePoint Server Protection
products and technologies as important Microsoft Forefront Security for
multiple scan engines and effective tools for conducting business SharePoint helps solve these problems
from industry-leading and getting closer to customers, prospects, with comprehensive antivirus protection.
vendors to help protect and business partners. It also offers defense against infected files
Microsoft Office Unfortunately, malicious code, and unsuitable content, while optimizing
SharePoint Server 2007 inappropriate content, and confidential server performance and simplifying the
and Windows® SharePoint information can find their way onto management of SharePoint products
Services 3.0 collaboration SharePoint servers through uploaded and technologies.
environments against documents, HTML pages, and mapped
the latest threats. It network drives. As use of these servers Comprehensive protection against
provides controls for grows and as threats become more the latest threats and unwanted
blocking unwanted sophisticated and rampant, the surface area content
content, optimizes that’s vulnerable to attack increases. And
Forefront Security for SharePoint ships with
although nearly 97 percent of businesses
server performance, multiple antivirus engines from leading
used antivirus software, over 50 percent of
and simplifies security security vendors. IT can run up to five scan
them still suffered virus attacks.*
management. engines at once to inspect documents
One reason is that companies try to protect as they are saved to and retrieved from
collaboration servers using software SharePoint document libraries. When one
Forefront Security for
that has only one antivirus scan engine, engine goes offline for an update, the
SharePoint with Service which exposes the system to a potential others are available to scan the database
Pack 3 (SP3) now includes single point of failure. If the engine so servers are always under protection.
support for Windows fails to recognize a new threat quickly,
The program’s content filters help keep
Server® 2008 and includes organizations are immediately vulnerable.
users from posting or retrieving ethically
installable keyword Secondly, most standard file-server questionable material and confidential
lists in 11 languages antivirus products can’t adequately company information. Configurable
for automatically scan the SQL databases of SharePoint file-filtering rules help block file types
blocking documents document libraries without risking damage known for carrying viruses or opening
containing profanity and to the software, the database, or the organizations to legal exposure.
discriminatory content. SharePoint environment. Neither do these
products scan the content of documents Optimized performance to keep
to ensure that the files support company servers available
http://www.microsoft.
policies before they are posted on
com/forefront Forefront Security for SharePoint provides
SharePoint servers.
deep integration with Microsoft Office
IT must find ways to easily manage the SharePoint Server 2007 and Windows
content and security of information that’s SharePoint Services 3.0 environments, while
stored and shared using SharePoint servers. helping to optimize server performance.
At the same time, they must minimize With efficient scanning features,
costs, maximize business productivity, and performance controls, and the ability to
protect corporate information and interests. reduce redundant scanning, businesses can
make smart use of available processing time
and server capability.
* CSI/FBI 2008 Survey

2. Simplified management to ease n Document filtering. Uses filters to n Centralized Web-based control.
the IT burden help eliminate file types known for Enables administrators to easily
Automated signature and engine updates carrying viruses (for example, .exe) or manage servers remotely, generate
and migration protection to SharePoint opening organizations to legal exposure comprehensive reports, and receive
2007 lead to greater cost efficiencies and (for example, .mp3). Forefront Security outbreak alerts from across the
ease. Forefront Security for SharePoint can for SharePoint can also unpack and infrastructure using Forefront Server
be centrally configured, deployed, and selectively repack compressed files, Security Management Console. This
updated in multi-server environments such as .zip, after removing infected or browser-based console provides central
using Microsoft Forefront Server Security unwanted files. configuration, deployment, and updating
Management Console. It also supports n Protection against new and hidden for all Forefront server security products.
Microsoft Security Center Operations threats. Blocks malicious code based n One-stop, automated updates.
Manager, for corporate-wide monitoring on behavioral characteristics using Updates multiple scan engines without
of SharePoint servers. built-in heuristics technology. It also IT effort. Microsoft constantly monitors
catches unwanted file types even if the its antivirus vendors for new signatures
file extension has been changed, by and engine updates. Within minutes,
How Microsoft Forefront inspecting file header information. these are tested against a virus database,
Security for SharePoint Works n Multi-vendor response to new threats. confirmed, and posted for automatic
Forefront Security for SharePoint provides Increases the odds of a quick resolution download by Forefront Security for
comprehensive protection for SharePoint to new attacks. With Forefront Security SharePoint or Forefront Server Security
2007. It performs real-time scanning using for SharePoint, multiple vendors are busy Management Console systems.
Microsoft Virus Scanning API 1.4 before working on your behalf to block the n Migration protection. Helps protect
documents are stored and shared in the latest virus, and automatic downloads the collaboration environment during
SQL document library. Forefront Security help ensure that the first valid solution migration to SharePoint 2007. Customers
for SharePoint also offers manual and gets loaded as soon as it’s available. who purchase Forefront Security for
scheduled scanning options. SharePoint will also be licensed to
Optimizes performance use Antigen for SharePoint to defend
Provides comprehensive protection Microsoft SharePoint Portal Server 2003
n Performance controls. Improves server
Multi-engine scanning, no single and Microsoft Windows SharePoint
n
performance and throughput with in-
point of failure. Provides the ability Services 2.0 environments.
memory scanning (to avoid spooling data
to automatically apply and manage to disk) and multiple scanning threads n Localized in 11 languages. Manages
up to five antivirus scan engines at a (to process more documents at once). collaboration server security in
time, from industry-leading security Forefront Security for SharePoint also English, Chinese (Simplified), Chinese
companies. Even if one engine is offline helps strike the right balance of server (Traditional), French, German, Italian,
or overlooks a threat, the library is performance and security with controls Japanese, Korean, Portuguese (Brazil),
scanned by the others. The product that can dynamically manage the number Russian, or Spanish.
ships with engines from Authentium, of engines used for a given scan job. n Integrated monitoring. Enables
Kaspersky Labs, Microsoft, Norman Data
n SharePoint VSAPI integration. administrators to monitor the health
Defense, and VirusBuster.
Leverages the SharePoint-specific of Forefront Security for SharePoint
n Protection against inappropriate Microsoft Virus Scanning API (VSAPI) environments using a management pack
content. Scans for administrator- 1.4 to help ensure faster scanning in a for System Center Operations Manager.
defined keywords and phrases within SQL environment. This API also tracks
most Microsoft Office documents— the scan status of documents, so clean For more information about
including Open XML documents and documents don’t need to be rescanned. Microsoft Forefront Security for
IRM-protected files—to help enforce SharePoint, visit http://www.
n Out-of-policy file blocking. Prevents
compliance with corporate policy for microsoft.com/forefront .
users from uploading unwanted and
language usage and confidentiality. On-
out-of-policy file types to SharePoint
the-fly encryption and decryption allows
documents to be checked for malware
collaboration servers, so they don’t System Requirements
consume valuable disk space.
and unwanted text while retaining Features and functionality described require
security settings applied by IRM. Microsoft Windows Server 2003 (Standard,
Simplifies management Enterprise, Datacenter, or Web Edition) with
Forefront Security for SharePoint with
SP3 also includes installable keyword n Forefront Server Security Service Pack 1 or Windows Server 2008;
lists in 11 languages for automatically Administrator. Provides a built-in Microsoft Office SharePoint Server 2007 or
blocking documents containing profanity management console to fully configure Microsoft Windows SharePoint Services
and discriminatory content. Forefront Security for SharePoint locally v. 3; a dual-processor computer (minimum
or remotely. 2.5 GHz); 1GB of RAM (2GB recommended);
and 550MB disk space.
© 2010 Microsoft Corporation. All rights reserved. This data sheet is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, IN THIS SUMMARY.