forefrontserversecuritybusinessvaluewhitepaper.docx

forefrontserversecuritybusinessvaluewhitepaper.docx

《forefrontserversecuritybusinessvaluewhitepaper.docx》由会员分享，可在线阅读，更多相关《forefrontserversecuritybusinessvaluewhitepaper.docx（8页珍藏版）》请在冰豆网上搜索。

forefrontserversecuritybusinessvaluewhitepaper

ShieldsUp!

GettingBetterProtectionwithMicrosoftForefrontSecurityforExchangeServerandMicrosoftForefrontSecurityforSharePoint

PaulRobichaux

3SharpLLC

Published:

October2006

Abstract

MicrosofthasexpandeditssecuritystrategybyaddingproductsandtechnologiesthataddressthemostpressingneedsofITmanagementandadministration.TheMicrosoftForefrontlineofsecurityproductsincludesanti-virusandcontentfilteringtoolsforMicrosoftExchangeServerandSharePointproductsandtechnologies.ThroughtightintegrationwithExchangeandSharePoint,Microsoft®Forefront™SecurityforExchangeServerandMicrosoft®Forefront™SecurityforSharePoint®offeranumberofvaluablebenefits,includingimprovedmanageability,performance,andsecurity.Thispaperdescribesthesebenefitsatahighlevel.

TheinformationcontainedinthisdocumentrepresentsthecurrentviewofMicrosoftCorporationontheissuesdiscussedasofthedateofpublication.BecauseMicrosoftmustrespondtochangingmarketconditions,itshouldnotbeinterpretedtobeacommitmentonthepartofMicrosoft,andMicrosoftcannotguaranteetheaccuracyofanyinformationpresentedafterthedateofpublication.

ThisWhitePaperisforinformationalpurposesonly.MICROSOFTMAKESNOWARRANTIES,EXPRESS,IMPLIEDORSTATUTORY,ASTOTHEINFORMATIONINTHISDOCUMENT.

Complyingwithallapplicablecopyrightlawsistheresponsibilityoftheuser.Withoutlimitingtherightsundercopyright,nopartofthisdocumentmaybereproduced,storedinorintroducedintoaretrievalsystem,ortransmittedinanyformorbyanymeans（electronic,mechanical,photocopying,recording,orotherwise）,orforanypurpose,withouttheexpresswrittenpermissionofMicrosoftCorporation.

Microsoftmayhavepatents,patentapplications,trademarks,copyrights,orotherintellectualpropertyrightscoveringsubjectmatterinthisdocument.ExceptasexpresslyprovidedinanywrittenlicenseagreementfromMicrosoft,thefurnishingofthisdocumentdoesnotgiveyouanylicensetothesepatents,trademarks,copyrights,orotherintellectualproperty.

©2006MicrosoftCorporation.Allrightsreserved.

Microsoft,Forefront,Antigen,Excel,SharePoint,Windows,WindowsServerSystem,andtheWindowsServerSystemlogoareeitherregisteredtrademarksortrademarksofMicrosoftCorporationorSybariSoftware,Inc.intheUnitedStatesand/orothercountries.SybariSoftware,Inc.isasubsidiaryofMicrosoftCorporation.

Allothertrademarksarepropertyoftheirrespectiveowners.

Contents

Communications,Collaboration,andSecurity1

DefendingYourCommunicationsandCollaborationInfrastructure3

TheThreatLandscape3

SpecificThreatsagainstExchangeandOutlook3

ThreatsSpecifictoSharePoint4

MeetingtheThreat:

HowForefrontServerSecurityHelps4

BetterProtection5

ImprovedPerformanceandAvailability5

LayeredDefenses6

ConsistentApplicationofSecurityPolicies6

Conclusion8

RelatedLinks9

Communications,Collaboration,andSecurity

Companiesofallsizesaremovingawayfromafocusonindividualproductsorpointsolutionsthatdeliverspecificserviceslikee-mail,instantmessaging,ordocumentmanagement.Instead,drivenbycompetitivepressuresthatplaceahighpremiumoneffective,timelycommunicationandcollaboration,they’rechoosingsolutionsbasedonhowwelldifferentcollaborationandcommunicationsproductsandprotocolsworktogether.Microsofthasbeeninvestingheavilyinitscollaborationandcommunicationssolutionline,whichcontainsthreemajorcomponentsthatareinterestingfromasecuritystandpoint.

ExchangeServerisMicrosoft’smessagingandcalendaringplatform.ExchangeisboththemostmatureandthemostwidelydeployedofMicrosoft’scollaborationandcommunicationproducts.Itactsasthekeyrepositoryforvoicemail,e-mail,andfaxmessages,calendarandfree/busydata,andcontactinformation,anditmakesthatdataaccessiblethroughdesktop,Web-based,andmobileclients.

SharePointproductsandtechnologiesincludeMicrosoftOfficeSharePointServer2007,Windows®SharePointServices,andSharePointPortalServer2003.MicrosoftintendsSharePointtobeacentraldocumentandinformationrepository,combiningrichmetadata,searchingofbothSharePointrepositoriesandotherdatasources（includingLotusDominodatabases,Webcontent,andfileshares）,workflow,andelectroniccontentmanagement.

LiveCommunicationsServercomplementsSharePointandExchangebyofferingreal-timecommunications,includingtext,voice,andvideoinstantmessaging,applicationanddesktopsharing,webconferencing,andextendedpresenceinformation.ThesecapabilitiesareavailablefromthedesktopviatheWindowsMessengerandOfficeCommunicatorclients,theCommunicatorWebAccessWeb-basedclient,CommunicatorMobileforWindowsMobile,andAPIsthatallowpresenceandIMcapabilitytobebuiltintoSharePointteamsitesanddocumentlibraries,aswellasapplicationsintheOfficefamily.

Microsoft’sstrategyinthisspaceistobuildacompletesetofunifiedcollaborationandcommunicationssolutionsthatprovideeasyaccesstoawiderangeofworkmodes—instantmessaging,e-mail,calendaring,teamworkspaces,documentlibraries—allusingafamiliarsetoftoolsthatletpeopleworkwithoutdisruptionfromthedesktoporonthego.Thesesolutionsarebasedon,andtakeadvantageof,infrastructureserviceslikeActiveDirectoryandWindowsRightsManagementServices.

Fortheseservicesandcapabilitiestobetrulyusefulinbusiness,theymustbeproperlysecured.Eachoftheseproductfamiliesincludesawiderangeofsecurityfeatures,includingencryption,authentication,andauditing.However,buildinganeffectivecommunicationsandcollaborationsystemdependsonprotectionofthesystemitselfandthedataitcontains.Overthelasttwoyears,Microsofthassteadilybeenaddingdata-centricsecurityfunctionality,beefingupthemessagesecuritycapabilitiesofExchange2007,addingbuilt-insupportforWindowsRightsManagementServicesintoMicrosoftOfficeSharePointServer2007,andpurchasingseveralsecuritycompanieswhoseproductsfillgapsinMicrosoft’sownofferings.

Microsoft’soverallsecuritystrategyistoprovideend-to-endsecurityforbusinesscustomers,beginningwiththeoperatingsystemandextendingthroughnetworkaccesstoapplicationsandserviceshostedonWindowsservers.Thisend-to-endprotectionmetaphorisabroadvisionthatwilltakesometimetoexecute;therecentlylaunchedForefrontproductlineisamajorpartofMicrosoft’scommitmenttorealizingthisvisionbyprovidingsolidsecurityandmanagementservicesforitscollaborationandcommunicationsservices.ForefrontSecurityforExchangeServer,ForefrontSecurityforSharePoint,andMicrosoft®Forefront™SecurityforOfficeCommunicationsServerhelpprovideadvancedprotectionforthevaluabledatatransmittedandstoredinmailboxes,documentlibraries,andteamsites.TheseproductsintegratewithexistingMicrosoftmanagementtools,sothey’reeasytolearn,use,anddeploy.TheseForefrontproductsarenewiterationsoftheprovenandmatureSybariAntigenproductsthatMicrosoftacquiredin2005.

DefendingYourCommunicationsandCollaborationInfrastructure

Thefirststepinmountinganeffectivedefenseofyourcollaborationandcommunicationsinfrastructureistousethesecuritytoolsthattheplatformprovides.Forexample,WindowsServersupportsauthentication,authorization,confidentialityprotection,andsecurityupdatemanagementmechanismsthatallowyoutoeffectivelysecuretheunderlyingnetwork,workstations,andservers.ActiveDirectoryaddsarobustauthenticationmechanismthatallowsyoutoeffectivelysegregatecriticalsystemsandapplydifferentlevelsofsecuritypolicytothem;ExchangeandSharePointbothincludeadditionalsecuritymechanismsthat,whenproperlyused,helpmaintainsecurityattheserverlevel.Thesemeasuresarenecessaryprerequisitesthathelpprotecttheorganization’sdata,butmanyorganizationswantahigherdegreeofprotectionthatsafeguardstheircriticalresourcebyprotectingagainstawidervarietyofthreats.

TheThreatLandscape

Thesecuritylandscapeiscontinuallychanging;attackersarealwaysseekingnewvulnerabilitiesinsoftwaresystemsandnetworks.Manycommonthreatsofthepast,likedenial-of-serviceattacksbasedonfragmentedTCPpackets,havelargelybeenmitigated.Theemergenceanddeploymentofsecuritycapabilitieslikenetworkaccessprotectionandsmartcardauthenticationhavehelpedtodelivermoresecurenetworkaccess,andMicrosoft’ssustainedeffortstodeliver“trustworthycomputing”arebearingfruitbyreducingthenumberandseverityofvulnerabilitiesintheirproducts.

However,attackershaven’tbeensittingstill.Attacksbasedonmalware—looselydefinedasviruses,worms,Trojans,andspyware—arecontinuingtogrowinbothfrequencyandseverity.Malwarehasbecomeeasiertocatchbuthardertogetridof;agrowingnumberofrootkits,onceinstalled,caneffectivelydisguisethemselvesfrommostmajoranti-malwaretoolsTheattackersthemselveshavechanged;inthepast,itwascommontoseevirusesorwormsdevelopedbyinterestedamateurs,buttoday’sattacksareoftenconductedbyprofessionalswhoeithertargetindividualorganizationsorcompromisegroupsofcomputersandsellaccesstothem.Thereareothermotivations,too;anincreasingnumberofattacksarebeingundertakenforinformationgathering,industrialorpoliticalespionage,orideologicalmotivations.

SpecificThreatsagainstExchangeandOutlook

MicrosofthassteadilyimprovedthesecurityofExchangeServeranditspremie