1. Business-Ready Security—Secure Endpoint Solution
Are Your Endpoints Secured?
Today’s workforce faces a constantly evolving landscape of threats to information and infrastructure—and even to regulatory compliance—ranging
from errant web sites to inbound spyware, and from lost physical assets (such as laptops or removable media) to willful theft of sensitive data. Endpoints
are exposed to attacks both inside and outside the corporate firewall, resulting in lost productivity and real financial losses at businesses worldwide.
Frequently, however, security systems impede operational efficiency, since defending against complex threats can mean reducing network access and
restricting information usage.
To protect endpoints yet enable business, security must evolve from an IT cost center to a strategic value center, providing real-time protection and
enabling secure access to information from almost anywhere and on any device.
Secure Endpoint Solution
Microsoft Forefront™ has combined essential capabilities to provide an integrated
solution that helps secure corporate endpoints. The Secure Endpoint solution helps
protect client and server operating systems from emerging threats and information
loss, while enabling more secure access from virtually anywhere. Through multi-
layered and defense-in-depth security, this solution helps defend infrastructure from
malware and advanced Web-based threats, whether clients are on or off premises,
and connected locally or remotely.
The Secure Endpoint solution is part of Microsoft’s Business Ready Security approach,
which focuses on the principle that security is a means to a business end. Microsoft
offers security solutions that help companies manage risks and empower people with
access to the information they need to get their jobs done.
Protect Everywhere, Access Anywhere “Forefront TMG will include scanning
The Secure Endpoint solution helps defend endpoints in real time against advanced for malware and inappropriate
and emerging threats. It addresses strategic security concerns—including encryption content, enabling them to be
and authentication—and enables persistent confidentiality and integrity of information
eliminated before they enter an
in transit and at rest.
organization’s network. It will also
Microsoft Forefront Client Security provides real-time endpoint protection against incorporate sophisticated URL filtering
advanced threats and attacks with an integrated anti-virus/anti-spyware engine.
technology to help block access to
Forefront Threat Management Gateway (TMG) protects managed and unmanaged inappropriate or dangerous Web sites.”
endpoints from Web-based threats and improves security enforcement by
integrating multiple detection technologies such as URL filtering, antimalware, Don Retallack
intrusion prevention, and more. Security Analyst at Directions on Microsoft in
Microsoft Windows® BitLocker™ and BitLocker To Go protect data stored on Redmond Channel Partner
portable or removable media to prevent threats of data theft or disclosure from June 2009
lost, stolen, or inappropriately decommissioned PC hardware.
Windows DirectAccess and Forefront Unified Access Gateway help increase
employees’ productivity by providing always-on and secure access to data Top ranked Anti-Malware engine
in proactive detection
and applications.
Microsoft beat Symantec, McAfee,
AV-Comparatives
Examine destination URLs for adherence with corporate policy, as well as for (May 2009) and 13 other competitors
the malicious potential of a destination Web site, through Microsoft Reputation
Services for URL filtering in Forefront TMG

2. Integrate and Extend Security across the Enterprise
“Forefront Client Security works
The Secure Endpoint solution integrates with existing infrastructure, helping seamlessly with our core infrastructure
enterprises save security costs and protect corporate endpoints on the local
components. As a result, we have
network, at other organizations, or on the road.
reduced the cost of administering our
Active Directory Rights Management Services integrates with Microsoft Office
security infrastructure by 60 percent.”
to automatically safeguard sensitive information while providing alerts to users
regarding policy compliance
Thomas Thiew
Forefront Client Security and Forefront TMG integrate with Active Directory to
IT Manager
help organizations deploy identity-based security policies.
PhillipCapital
Forefront Client Security integrates with Windows Server Network Access
Protection to allow administrators to define policies for system health and drive
compliance-based access.
Using existing investments such as System Center and Microsoft Windows Server
Update Services, organizations can save time and resources by discovering and
remotely deploying protection technologies such as updates and reporting.
Simplify the Security Experience and Manage Compliance
The Secure Endpoint solution helps ensure regulatory compliance and simplifies
security management tasks through a centralized control that provides enterprise-wide
visibility and reporting of endpoint security threats and status.
The Forefront Client Security Enterprise Manager (FCS EM) simplifies endpoint
security management with a centralized console for all administrative functions,
including configuration, reporting, and alerting..
FCS EM also provides a single dashboard for enterprise-wide client visibility and a
complete view of threats, vulnerabilities and configuration risks to enable compliance.
Forefront TMG’s console provides a single point of management, policy, and
monitoring for consolidated web security across the organization.
The Secure Endpoint solution is composed of an integrated line of protection, access and management products, all
built around users’ identities and integrated with the platform.
Helps guard against emerging threats, Comprehensive, secure remote access
such as spyware and rootkits, as well as to corporate resources for employees,
traditional threats, such as viruses, worms, partners, and vendors on both managed
and Trojan horses and unmanaged PCs and mobile devices
Persistent, identity-based encryption Drives lower total cost of ownership by
and usage policies to safeguard digital helping users stay productive anywhere while
Active Directory® Rights Management Services information from unauthorized use—both enhancing security and control through
online and offline, inside and outside of the BitLocker / BitLocker To Go, Encrypting File
corporate firewall System, and an integrated AD RMS client
A comprehensive, secure Web gateway that
helps protect employees from Web-based
threats with simple, unified perimeter
security including intrusion prevention,
antivirus, and URL filtering
Learn more about the Secure Endpoint solution and download it at:
http://www.microsoft.com/forefront/en/us/secure-endpoint.aspx
© 2009 Microsoft Corporation. All rights reserved. Microsoft, the Microsoft logo, Forefront, Windows, Windows Server, all Forefront products, and Active Directory Rights Management
Services are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries. All other trademarks are property of their respective own-
ers. This document is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESSED, IMPLIED, OR STATUTORY, AS TO THE INFORMATION IN THIS DOCUMENT.