Forefront Protection for SharePoint prevents users from uploading or downloading malware, inappropriate content, or sensitive information to SharePoint libraries. It uses multiple scanning engines and content filtering to block dangerous files and keywords. This provides comprehensive protection for SharePoint with minimal performance impact.

1. Block malware and out-of-policy content in SharePoint libraries
Microsoft Forefront
® ®
Protection 2010 for SharePoint ®
prevents users from uploading External SharePoint Users Internal SharePoint Users
or downloading documents
containing malware, out-
of-policy content, or sensitive
information to SharePoint
Firewall
libraries.
Internet Malware
Malware
Inappropriate content Inappropriate content
www.microsoft.com/ Extranet MOSS
forefront/protection-
for-sharepoint
Forefront Protection for
SharePoint is an important Forefront for SharePoint protects both intranet and extranet SharePoint sites against
part of the Microsoft solution malware and inappropriate content.
for securing collaboration
environments. Working with the
following technologies, Forefront Make Content Sharing Safe discovered, the time it takes anti-malware
vendors to release definitions to detect
for SharePoint helps provide end- for Users and Business them varies greatly—in many cases by days
to-end protection for information
Forefront for SharePoint combines real- or weeks. The engine set in Forefront for
sharing:
time filtering for malware with content SharePoint draws on unique definitions and
n Forefront Unified Access inspection to provide comprehensive heuristic technologies from Microsoft and
Gateway (UAG) simplifies protection for Microsoft Office SharePoint industry-leading partners and is proven
remote access by non- Server (MOSS) 2010 and MOSS 2007 to yield faster detection rates than single-
Windows®, down-level, or collaboration environments. It does engine vendors (AVTest.org).
untrusted endpoints through a this through: Its easy-to-use content filters detect
consolidated secure portal. n Multiple-engine scanning that stops and block files, such as .exe or .mp3,
n Active Directory® Rights malware faster. that pose a risk to the organization, or
Management Services (AD contain keywords that violate corporate
n File filtering that blocks the upload and
RMS) can secure sensitive policy. These configurable filters allow
download of dangerous or out-of-policy
documents posted to the administrators to customize protection
documents or executables.
SharePoint library through for their environment. They also take
built-in information protection. n Keyword filtering that prevents advantage of pre-defined rules to block
inappropriate, offensive, or sensitive profane and discriminatory content in
n Windows Server® 2008 R2
content from being shared. 11 languages.
Active Directory Federation
Services 2.0 can be used to Forefront for SharePoint is the only leading It’s important to note that Forefront
federate a single identity from product to use multiple scanning engines for SharePoint provides all these
one organization to another. to protect collaboration environments in protections with minimal impact to
a single solution. When new threats are system performance.

2. to reduce company liability. Configurable Optimizes antivirus scanning on
Key Benefits and Features to scan within most Office documents, SharePoint servers
Comprehensive protection with pre-built lists for profane and Provides high-performance, real-time
discriminatory content. virus-scanning using Microsoft VSAPI 1.4 to
Stops malware faster with multi- help ensure that documents are safe before
engine scanning Eliminates single points of failure they are saved to or retrieved from the
Enables administrators to run up to five Continues protection even if one engine SharePoint document library.
scan engines from Microsoft and industry- fails or goes offline to update, without
leading partners in different combinations slowing mail delivery. Protects rights-managed documents
across the server system. Includes anti- Integrates with AD RMS to scan rights-
spyware scanning using the Microsoft Anti- Integrated security protected documents for malware
Malware Engine. or keywords.
Maximizes detection without
Blocks dangerous attachments compromising performance
Simplified management
Detects risky file types even if the extension Enables administrators to balance security
is changed. and performance using pre-built settings, Offers dashboard view of
dynamically choosing the most up-to-date collaboration security
Prevents sharing of out-of-
and effective engines for each scan. Gives administrators an at-a-glance view
policy content
of collaboration security detection statistics
Uses keyword filters to block e-mail
and health data.
containing sensitive information, helping
Automates download and distribution
of signature updates
Integrated view of collaboration security
Using the Rapid Update Process, Microsoft
monitors all scan-engine Web sites for
updates. It then automatically downloads,
validates, and posts new engine versions
and signatures to Forefront for SharePoint.
Extends enterprise manageability
Builds on Windows PowerShellTM integration
to easily create new management and
configuration scripts.
Monitors collaboration security health
Administrators can use the System
Center Operations Management Pack
to help ensure that collaboration
protection is optimal.
For more information about
Forefront Protection 2010 for
SharePoint, visit www.microsoft.
com/forefront/protection-for-
sharepoint.
The Forefront for SharePoint administrator console provides an easy-to-use dashboard view
of collaboration security.
Languages and System Requirements
Forefront for SharePoint is localized into 11 languages: English, French, German, Italian, Japanese, Korean, Chinese (Simplified), Chinese (Traditional),
Portuguese (Brazil), Spanish, and Russian.
Important note: Forefront for SharePoint performs significantly better on a 64-bit OS than on a 32-bit OS. It is recommended that organizations with
large capacity requirements on SharePoint servers install the 64-bit OS and SharePoint front-end server before installing Forefront for SharePoint.
Memory: 2 GB. Hard disk: 2 GB of available space. Server software: Microsoft Windows Server 2003 SP2 (Standard, Enterprise, Datacenter, or
Web Edition); Microsoft Windows Server 2008; or Microsoft Windows Server 2008 R2. Server: Four-core server with 2.0 GHz or higher processors is
recommended; Microsoft XML Core Services (MSXML) 6.0 SP1. Additional requirements: Windows Communication Foundation or Microsoft .NET
Framework 3.5; Windows PowerShell 1.0; Microsoft Chart Controls for Microsoft .NET Framework 3.5; Microsoft Office SharePoint Server 2010, Microsoft
SharePoint Foundation 2010, Microsoft Office SharePoint Server 2007 SP1, or Windows SharePoint Services version 3 SP1.
© 2010 Microsoft Corporation. All rights reserved. This document is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, IN THIS SUMMARY.