微軟防禦陣線Forefront

史百誠 Joseph Shih

伺服器平台事業處台灣微軟

Security OfferingsA comprehensive line of business security products that helps you gain greater protection and secure access through deep integration and simplified management

Network EdgeNetwork EdgeServer ApplicationsServer ApplicationsClient And Server OSClient And Server OS

Comprehensive Security & AccessEnd-point devices

End-point devicesProtocols

ProtocolsPolicy Definitions

Policy DefinitionsApplications

Applications

EdgeEdge

Email(MessagingServers)

Unmanaged PC(Home PC, Kiosk,

etc)

Intranet Apps(Internal Web Servers)

Work PCs(Remote Desktop)

Internet

Managed PC(corporate owned,

domain-joined)

Files/Documents(Portal orFile Servers)

Exchange ActiveSyncHandhelds

SSL-VPN

IPSec VPN

HTTP/HTTPS

RPC over HTTP

RDP over HTTP

SSL Tunneling

SSL Socket Forwarding

遠端安全存取遠端安全存取提供員工與合作夥伴安全妥善地從任何遠端的 PC 與裝置存取應用程式、文件與資料

分公司閘道分公司閘道從分公司提供增強安全性的網際網路存取、並且更有效率地運用有限的頻寬。

網路存取保護網路存取保護透過可掃描與封鎖有害內容、檔案和網站的完善工具，去除惡意程式碼和攻擊者所造成的損害效果。

IPSec VPN SSL VPN

微軟網路安全存取解決方案

Integrated Security

Exchange Mailbox Server

Internet

Client Machines

Exchange Mailbox Server

Exchange Front End

Microsoft AV

Multi-engineManager

Server ApplicationsServer Applications

多層次防禦

Live Communications Server

SharePoint Server

Exchange Servers

Security for SharePoint

Security for Exchange Server

Intelligent ApplicationGataway 2007

Microsoft

Internet Security &Acceleration Server 2006

Client Security

•InternetInternet

•AA

•BB

•CC

•DD

•EE

•Exchange Server/ Exchange Server/ Windows-based Windows-based SMTP ServerSMTP Server

• 多重次防禦多重次防禦• 伺服器最佳化伺服器最佳化• 集中式管理集中式管理• 不當資料過濾不當資料過濾

•Gartner Magic Quadrant forGartner Magic Quadrant for•E-Mail Security Boundary 2006 * E-Mail Security Boundary 2006 *

•http://www.mediaproducts.gartner.com/reprints/microsoft/vol4/article1and2/article1and2.html•* * Magic Quadrant for E-Mail Security Boundary, 2006. Peter Firstbrook, Arabella Hallawell Magic Quadrant for E-Mail Security Boundary, 2006. Peter Firstbrook, Arabella Hallawell Publication Date: 25 September 2006/ID Number: G00142431Publication Date: 25 September 2006/ID Number: G00142431

Security SummarySecurity SummarySecurity SummarySecurity Summary

Simplified AdministrationClient And Server OSClient And Server OS

FCS Client Supported Platforms Matrix

9

Operating System Client Security Agent

Windows 2000 SP4 + Security Rollup and GDI+ hotfix

Supported

Windows XP SP2 (with Filter Manager hotfix)

Supported

Windows XP “Media Center” edition Not supported

Windows Server 2003/R2 x64 SP1 + Supported

Windows XP “Tablet” editions Supported

Windows Server 2003 X86 SP1 + Supported

Windows Server 2003 R2 + Supported

Windows Vista Business, Enterprise, and Ultimate

Supported

FCS 系統架構

Server(s) hosting Server(s) hosting FCS Collection and FCS Collection and

Reporting RolesReporting Roles

FCS Central FCS Central Management Management

ConsoleConsole

What can FCS do for me?

統一的保護• 防護電腦病毒與間諜軟體• 建構在全世界成千上萬用戶所使用的防護技術之上• 可針對各式威脅進行有效的回應• 可做為微軟其他安全性產品的補充支援

簡化的系統管理• 利用單一的主控台提供簡化的安全性管理• 僅需定義單一原則便可以達成用戶端防護的管理• 快速的部署用戶端防護軟體及病毒定義更新• 可與現有的 IT 基礎建設進行整合

提供視覺化管理與控制介面• 經由單一儀表版提升威脅及弱點的可見度• 觀看具有洞察力的報告• 保持在接收狀態評估掃瞄與安全警示結果的情況

FCS 用戶端的防護功能

移除目前大量流行之電腦病毒

移除所有已知電腦病毒

即時電腦病毒防護

移除所有已知間諜軟體

即時間諜軟體防護

集中式報表及警示功能

自訂化

MicrosoftForefront

™

ClientSecurity

MSRT Windows®

Defender

Windows Live

™ Safety

Center

Windows Live OneCare

™

整合現有 IT 基礎建設

針對個人用戶 針對企業

Forefront Licensing OverviewForefront Licensing Overview

Microsoft

Forefront

Perpetual Licensing

Model

Online Services Licensing

ModelFPPFPP

OpenOpen

Open ValueOpen Value

Open Value Open Value SubscriptionSubscription

SelectSelect

EAEA

EA SubscriptionEA Subscription

OEMOEM

GovernmentGovernment

AcademicAcademic

SPLA/HVSSPLA/HVS

FPPFPP

OpenOpen

Open ValueOpen Value

Open Value Open Value SubscriptionSubscription

SelectSelect

EAEA

EA SubscriptionEA Subscription

OEMOEM

GovernmentGovernment

AcademicAcademic

SPLA/HVSSPLA/HVS

Open ValueOpen Value

Open Value Open Value SubscriptionSubscription

SelectSelect

EAEA

EA SubscriptionEA Subscription

GovernmentGovernment

AcademicAcademic

SPLA/HVSSPLA/HVS

Open ValueOpen Value

Open Value Open Value SubscriptionSubscription

SelectSelect

EAEA

EA SubscriptionEA Subscription

GovernmentGovernment

AcademicAcademic

SPLA/HVSSPLA/HVS

For example: For example:

ISAISA

For example: For example:

ISAISA

For For example: example:

Forefront Forefront Security for Security for

Exchange Exchange ServerServer

For For example: example:

Forefront Forefront Security for Security for

Exchange Exchange ServerServer

Online Services Online Services –– Overview Overview

Online Services has its own unique terminology for licenses:Online Services has its own unique terminology for licenses:

Most Security offerings will require a User/device Subscription Most Security offerings will require a User/device Subscription License (USL)License (USL)

Management consoles and external connector scenarios will Management consoles and external connector scenarios will require a Server Subscription License (SSL)require a Server Subscription License (SSL)

Each USL for Antigen/Forefront subscription products count as one Each USL for Antigen/Forefront subscription products count as one point towards Select agreements.point towards Select agreements.

Do not quote monthly ERP from pricelist. It rounds to Do not quote monthly ERP from pricelist. It rounds to nearest $1.nearest $1.

SSL

Services Subscription License (SSL)Services Subscription License (SSL)An SSL is generally required to An SSL is generally required to enableenable the functionality of an online the functionality of an online service across your entire service across your entire organizationorganization..

USL

User or Device Subscription License (USL/DSL)User or Device Subscription License (USL/DSL)A USL or DSL is generally required to enable the functionality of an online A USL or DSL is generally required to enable the functionality of an online service for a particular service for a particular user or deviceuser or device, respectively., respectively.

Online Services Online Services –– Payment Payment

1.1. Payment can be made prepaid upfront or billed annually.Payment can be made prepaid upfront or billed annually.

2.2. Service can be added to match the remaining term of original Service can be added to match the remaining term of original agreement.agreement.

Month 0

Month 12

Month 24

Month 36

Start of Agreement

End of Agreement

1. Place order for service2. Pay for entire

subscription term

Subscription term = 36 months

36 month agreement, immediate order, prepay for 36-months

36 month agreement, immediate order, annual billing and payment

Month 0

Month 12

Month 24

Month 36

Start of Agreement

End of Agreement

Subscription term = 36 months

1. Place order for service2. Pay for 12 months

1. Pay for 12 months 1. Pay for 12 months

Forefront SKU OverviewForefront SKU Overview

SU

ITES

SU

ITES

Enterprise CAL Suite

Forefront Security Suite

Exchange Enterprise CAL

ForefrontSecurity Suite

EDGEEDGESERVERSERVERCLIENTCLIENT

Forefront Security SuitesForefront Security Suites

EXCHANGE EXCHANGE ENTERPRISE CAL**ENTERPRISE CAL**

FOREFRONT FOREFRONT SECURITY SECURITY

SUITESUITE

ENTERPRISEENTERPRISE

CAL SUITE*CAL SUITE*

Pricelist Availability:Pricelist Availability: December 2006December 2006 End of FY07End of FY07 November 2006November 2006

Forefront Client SecurityForefront Client Security

Forefront Security for Exchange ServerForefront Security for Exchange Server

Forefront Security for SharePointForefront Security for SharePoint

Forefront Security for Office Forefront Security for Office CommunicationsCommunications

ISA ServerISA Server

Intelligent Application Gateway (Whale)Intelligent Application Gateway (Whale)

Exchange Hosted Mail FilteringExchange Hosted Mail Filtering

Other Server CALs and technologiesOther Server CALs and technologies * Enterprise CAL also includes the Core CAL components, Windows Rights Management Services, Management Operations Manager Client OML, Office Communications Server 2007 Standard and Enterprise CAL, Office SharePoint Server Enterprise CAL 2007, and the Exchange Enterprise CAL 2007.

** Exchange Enterprise CAL also includes the Exchange CAL, Unified Messaging and Compliance functionality.

Suite Suite OptionsOptions

Significant additional value through suite discounts:• Enterprise CAL: 50% packaging discount + 15% EA discount + 15% Platform discount• Exchange Enterprise CAL: ~35% discount• Forefront Security Suite: ~35% discount

Enterprise CALEnterprise CAL

Secure Communication, Collaboration, and Compliance

Information rights managementUnified Messaging & complianceWeb based forms solutionsSpreadsheet publishingBusiness data connector web partsPresence and synchronous communications (IM)On premise multi-party audio, video and web conferencingClient monitoring and updatesClient, server and edge security

Foundation for IT InfrastructurePlatform, group policy, identity, securityEmail, calendaring, contactsContent managementEnterprise portal and searchTeam collaboration sitesSystems management

Core CAL SuiteWindows Server CAL

Exchange Server Standard CAL

Office SharePoint Server Standard CAL

System Center Configuration Manager CML

Enterprise CAL SuiteEnterprise CAL SuiteCore CAL Suite

Windows Rights Management Services CAL

Exchange Server Enterprise CAL

Office SharePoint Server Enterprise CAL

Office Communications Server Standard CAL

Office Communications Server Enterprise CAL

System Center Operations Manager Client OML

Forefront Security Suite

What products are included in the CAL What products are included in the CAL Suites?Suites?

500 windows XP

Exchange 2003SPS 2003LCS

Windows 2003 serverWindows 2003 server Windows 2003 server

Internet

案例• 有一個客戶 500 台 windows XP • 30 台 windows 2003server 各自安裝 Exchange 2003

server 、 SPS 、 LCS 及其他 server• 如果要安裝 Forefront 系列產品要如何報價• Per user ? Per Device?

價格假設 : Forefront Client security - $ 40 / per user /Monthly Forefront Client security Management Console - $ 200 / per service /Monthly Forefront Server security for Exchange - $ 50 / per user /Monthly Forefront Server security for SPS - $ 35 / per user /Monthly Forefront Server security for LCS - $ 35 / per user /Monthly Forefront Server security Management Console - $ 250 / per service /Monthly

500 windows XP

Exchange 2003 SPS 2007LCS

報價計算 (Per Device)

• Forefront Client security – $40*530( 台 )*12 個月 *3 年• Forefront Client security Management Console - $ 200 *12 個月 *3 年• Forefront Server security for Exchange - $ 50 *500( 人 )*12 個月 *3 年• Forefront Server security for SPS - $ 35 *500( 人 )*12 個月 *3 年• Forefront Server security for LCS - $ 35 *500( 人 )*12 個月 *3 年• Forefront Server security Management Console - $ 250 *12 個月 *3 年

報價計算 (Per User)

• Forefront Client security – $40*500( 台 )*12 個月 *3 年• Forefront Client security Management Console - $ 200 *12 個月 *3 年• Forefront Server security for Exchange - $ 50 *500( 人 )*12 個月 *3 年• Forefront Server security for SPS - $ 35 *500( 人 )*12 個月 *3 年• Forefront Server security for LCS - $ 35 *500( 人 )*12 個月 *3 年• Forefront Server security Management Console - $ 250 *12 個月 *3 年

Current Wave(next 12 months)

Longhorn Wave

Long-term Investments

Current Wave(next 12 months)

Longhorn Wave

Long-term Investments

Gaining a foothold

• Server ApplicationsServer Applications• Multi-engine Anti-virus, Anti-spam for Exchange 2007Multi-engine Anti-virus, Anti-spam for Exchange 2007• Multi-engine Anti-virus, Content filtering for SharePoint 2007Multi-engine Anti-virus, Content filtering for SharePoint 2007• Multi-engine Anti-virus for Instant MessagingMulti-engine Anti-virus for Instant Messaging• Single Server Management ConsoleSingle Server Management Console

• EdgeEdge• Application PublishingApplication Publishing• Branch Office GatewayBranch Office Gateway• Web Access ProtectionWeb Access Protection

Current Wave(next 12 months)

Longhorn Wave

Long-term Investments

Gaining a foothold

• Anti-virus, Anti-spyware based on Defender and MS AV engineAnti-virus, Anti-spyware based on Defender and MS AV engine

• Security State AssessmentSecurity State Assessment

• Central Mgmt and Reporting Central Mgmt and Reporting

• Deep integration with:Deep integration with:

• Active Directory and AD Group PolicyActive Directory and AD Group Policy

• SMS and/or WSUSSMS and/or WSUS

• Reporting through SQL Server 2005Reporting through SQL Server 2005

Current Wave(next 12 months)

Longhorn Wave

Long-term Investments

Gaining a foothold

• Secure SSL VPNs provide browser-based access to Secure SSL VPNs provide browser-based access to corporate applications and data corporate applications and data

• Integrated application protectionIntegrated application protection

• Comprehensive policy enforcement helps drive Comprehensive policy enforcement helps drive compliance with legal and business guidelinescompliance with legal and business guidelines

Gaining a footholdChanging the playing field

Current Wave(next 12 months)

Longhorn Wave

Long-term Investments

•ClientClient

•Unified host FW policy Unified host FW policy mgmtmgmt

•NAP integrationNAP integration

•Integrated Edge PlatformIntegrated Edge Platform

•Comprehensive App Comprehensive App Access (ISA/Whale)Access (ISA/Whale)

•Web protectionWeb protection

•Appliance experience Appliance experience and form factorand form factor

•Integrated Management Integrated Management and Reporting Consoleand Reporting Console

Current Wave(next 12 months)

Longhorn Wave

Long-term Investments

Gaining a footholdChanging the playing fieldSustaining momentum

•ClientClient

•Enhanced Zero-day Enhanced Zero-day ProtectionProtection

•IntegrationIntegration

•Unified Access PlatformUnified Access Platform

•Security Event Security Event ManagementManagement

•Support for 3rd party Support for 3rd party engine & servicesengine & services

•ClientClient

•Unified host FW policy Unified host FW policy mgmt mgmt

•NAP integrationNAP integration

•Integrated Edge PlatformIntegrated Edge Platform

•Comprehensive App Comprehensive App Access (ISA/Whale)Access (ISA/Whale)

•Web protectionWeb protection

•Appliance experience Appliance experience and form factorand form factor

•Integrated Management Integrated Management and Reporting Consoleand Reporting Console

「安特部隊」 技術菁英招募• 服務諮詢處

– 微軟專業代理商： 零壹科技股份有限公司

• Microsoft Forefront 安裝認證課程– 台北場