M50093

Deploying and Administering Microsoft Forefront Client Security

Deploying and Administering Microsoft Forefront Client Security M50093

Course Title: Deploying and Administering Microsoft

Forefront Client Security

Course Code: M50093
Version: A
Level: 400
Duration: 3 Days

Course Overview

The Deploying and Administering Microsoft Forefront Client Security M50093 instructor-led training course has been designed to teach candidates critical deployment and administration skills in this 400-level course on Microsoft Forefront Client Security. Targeted at systems integrators, consultants, and deployment partners, this three-day course includes lectures and hands-on labs and was developed by Microsoft Consulting Services using their detailed implementation knowledge and best practices.

Target Audience

Candidates who should consider attending the M50093 Microsoft training course are technical deployment specialists and senior-level administrators who manage a Microsoft Exchange Server or Microsoft SharePoint Products and Technologies infrastructure or security practice.

Course Objectives

On successfully completing the M50093 course candidates will be able to:

• Describe the Forefront Client Security components and architecture, and identify the different server roles
• Complete and troubleshoot the server setup process, identify various server topologies, and describe basic MOM concepts and the MOM agent
• Identify Forefront Client Security client component characteristics and describe the client setup and deployment processes
• Understand Forefront Client Security administration and user roles, Forefront Client Security Policy UI settings and policy deployments, and know how to troubleshoot the Management Console
• Understand the reporting services infrastructure used by Forefront Client Security
• Use Forefront Client Security reports and alerting services, and troubleshoot reporting procedures
• Describe the security state assessment (SSA) component of Forefront Client Security, and understand its architecture
• Describe the object processor and manifest update in SSA
• Review the SSA Security Check messages and results
• Review methods and procedures used to submit malware to Microsoft for analysis

Course Prerequisites

Candidates attending the M50093 Microsoft training course should have Windows Server certifications or deployment. Free online classes and labs are available at the Microsoft Partner Network to help ensure that candidates have achieved an adequate baseline level of knowledge prior to attending this instructor-led training course.

Testing and Certification

There are currently no exams or Microsoft Certification directly associated to this course however this course may assist in preparing candidates for other exams that are closely associated with this technology.

Course Content

Module 1: Course Overview

In this module candidates will learn about Forefront Client Security components and architecture. The module describes what to expect from the product, and what modules will be covered on what days.

Lessons:

• Forefront Product Overview
• Forefront Client Security
• Microsoft Forefront Client Security Components
• Training Modules

After completing this module, candidates will be able to:

• Describe the Forefront Client Security components and architecture

Module 2: Forefront Client Security Server Roles and Topologies

In this module candidates will learn about the various roles involved on the server side of a Forefront Client Security infrastructure, as well as how they relate to each other in the various possible topologies.

Lessons:

• Forefront Client Security Server Roles
• Collection Server
• Collection Server Database
• Reporting Server
• Reporting Database Server
• Forefront Client Security Server Setup
• Role Installation Steps
• Server Topologies
• SQL Server Database Sizing
• Configuration Wizard
• MOM Concepts
• Forefront Client Security Server Setup Troubleshooting

Lab: Installing a Three Server Topology

• Launch the Virtual Environment
• Create Forefront Client Security Accounts
• Install the Management, Collection, and Reporting Server
• Install the Reporting Server Database
• Install the Distribution Server Role
• Configure Client Security on a Three Server Topology
• Grant Correct Permissions for Forefront Client Security Service Accounts
• Verify the Installation of Client Security on a Three Server Topology

After completing this module, candidates will be able to:

• Identify the different server roles within Forefront Client Security
• Complete the server setup process
• Identify various server topologies
• Review basic MOM concepts
• Discuss Forefront Client Security server setup troubleshooting

Module 3: Forefront Client Security Client

In this module candidates will learn about Forefront Client Security client setup configuration and deployment.

Lessons:

• General Information
• Antimalware
• MOM Agent
• Client Setup
• Client Deployment Planning
• Forefront Client Security Client Deployment Methods
• Troubleshooting

Lab: Deploying the Forefront Client Security Client

• Configure WSUS 3.0 to Deploy the Forefront Client Security Client
• Create a Forefront Client Security Client Package and Distribute It
• Distribute the Antimalware and Security Assessment State Definition Updates
• Malware and Spyware Detection
• View the Malware and Spyware in the Dashboard

After completing this module, candidates will be able to:

• Be able to describe Forefront Client Security client component characteristics and information
• Be able to describe the antimalware agent and engine
• Understand the MOM agent
• Understand the client setup process
• Understand client deployment basics

Module 4: Forefront Client Security Management

In this module candidates will learn about Forefront Client Security management.

Lessons:

• Administration
• Administration Dashboard
• Forefront Client Security Policy Deployment
• Forefront Client Security Management Console Troubleshooting

Lab: End-to-End Policy Deployment

• Deploy a Test Policy
• Refresh and Verify Policy on the Client
• View Policy Application via GPResult
• View Summary Reports
• Policy Configuration Effects on Client UI

Lab: Configuring Forefront Data Retention

• Examine Data Retention Periods
• Modify Database Retention Settings

After completing this module, candidates will be able to:

• Be familiar with Forefront Client Security administration
• Understand Forefront Client Security Administration User roles
• Understand Forefront Client Security Policy UI settings and policy deployments
• Be familiar with Forefront Client Security Management Console troubleshooting

Module 5: Forefront Client Security Reporting and Alerting

In this module candidates will learn about Forefront Client Security Reporting and Alerting.

Lessons:

• Reporting Services Overview
• Reporting Architecture
• MOM Reporting
• Forefront Client Security Reports
• SQL Server Reporting Services Troubleshooting
• Alerts

Lab: Viewing Forefront Client Security Reports

• Explore Forefront Client Security Reports

Lab: Managing Forefront Client Security Accounts

• View Reporting Failure
• Specify SQL Server Reporting Credentials to Forefront Client Security

Lab: Creating an E-Mail Report Subscription and Setting an E-Mail Notification

• Configure SQL Server Reporting Services
• Create an E-Mail Subscription
• Create an E-Mail Notification
• Follow the Alert Notification Flow
• View E-Mail Server Settings

After completing this module, candidates will be able to:

• Understand the reporting services infrastructure used by Forefront Client Security
• Be familiar with Forefront Client Security Reports
• Be familiar with Forefront Client Security Alerting Services
• Understand Forefront Client Security Reporting troubleshooting procedures

Module 6: Security State Assessment

In this module candidates will learn about security state assessment.

Lessons:

• Security State Assessment
• SSA General Information
• SSA Architecture
• SSA Object Processor (OP) and Manifest Updates
• SSA Security Checks

Lab: Security State Assessment

• Examine Security State Assessment information in MOM and the Forefront Client Security Management Console
• Configure WSUS for Security State Assessments
• Detect Vulnerabilities
• Update Clients

After completing this module, candidates will be able to:

• Understand the security state assessment component of Forefront Client Security
• Be familiar with the architecture of the SSA
• Be familiar with the object processor and manifest update in SSA
• Understand the SSA security check messages and results

Module 7: Submitting Malware to Microsoft for Analysis

In this module candidates will learn about malware submission.

Lessons:

• Malware Submission
• Assisting Customers with Malware Submissions

After completing this module, candidates will be able to:

• Review methods and procedures used to submit malware to Microsoft for analysis

Module 8: Closing

In this module candidates will review the Forefront Client Security course, and receive a list of Web sites that provide additional information on Forefront Client Security.

Lessons:

• Antimalware Client Registry Settings
• Antimalware Errors
• PP Tracing
• Antimalware Events
• SSA Scan Event Log Events
• MOM Command Line Reference

Appendices

• Appendix A: Antimalware Client Registry Settings
• Appendix B: Antimalware Errors
• Appendix C: PP Tracing
• Appendix D: Antimalware Events
• Appendix D: Antimalware Events
• Appendix F: MOM Command Line Reference

PLEASE NOTE: Every effort has been made to ensure the accuracy of all information contained herein. IT Help and Support Centre Ltd makes no warranty expressed or implied with respect to accuracy of this information, including price, product editorials or product specifications. IT Help and Support Centre Ltd or its suppliers shall not be liable for incidental, consequential or special damages arising from, or as a result of, any electronic transmission or the accuracy of the information contained herin, even if IT Help and Support Centre Ltd has been advised of the possibility of such damages. Product and manufacturer names are used only for the purpose of identification.

This Website is not sponsored by, endorsed by or affiliated with Cisco Systems, Inc. CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, Cisco, Cisco IOS, Cisco Systems, the Cisco Systems logo, and Networking Academy are registered trademarks or trademarks of Cisco Systems, Inc. and/or its affiliates in the U.S. and certain other countries. All other trademarks mentioned in this web site are the property of their respective owners.