none
SCCM and Forefront for dummies ;)

    Question

  • Hi, we have a running SCCM site, but we're not happy with our current malware solution and was thinking of trying out Forefront.

    Does anyone have a dummies guide on how to setup Forefront, and how to get it to interact with SCCM?

    Our one SCCM server is configured to deliver Windows updates and such to our clients...

    I've found a few tips on how to get these two to work together, but nothing really on how to get Forefront to work in the first place - so thanks in advance for any pointers :)
    Tuesday, November 10, 2009 3:48 PM

Answers

  • Hi,

    Integrating FCS with SCCM is a good idea,  deploying and maintaining your Forefront client Security clients can be automated using System Center Configuration Manager (SCCM). With SCCM we can quickly deploy the Forefront Client Security (FCS) agents, maintain signature updates automatically and assess the agent’s configuration compliance on a routine basis. This document assumes that you have a functional SCCM Software Distribution and Software Update infrastructure and FCS Management roles deployed within the organization.


    The following article and document will be helpful for your reference:

    Integrating FCS with SCCM

    http://myitforum.com/cs2/files/folders/configmgr/entry117993.aspx


    Deploying Forefront Client Security Using SCCM 2007 - Step-By-Step - The Security Wizard

    http://blogs.microsoft.co.il/blogs/yanivf/archive/2008/02/20/deploying-forefront-client-security-using-sccm-2007-step-by-step.aspx








    • Marked as answer by Eric Zhang CHN Wednesday, December 02, 2009 9:50 AM
    Thursday, November 12, 2009 6:15 AM

All replies

  • Hi,

    Integrating FCS with SCCM is a good idea,  deploying and maintaining your Forefront client Security clients can be automated using System Center Configuration Manager (SCCM). With SCCM we can quickly deploy the Forefront Client Security (FCS) agents, maintain signature updates automatically and assess the agent’s configuration compliance on a routine basis. This document assumes that you have a functional SCCM Software Distribution and Software Update infrastructure and FCS Management roles deployed within the organization.


    The following article and document will be helpful for your reference:

    Integrating FCS with SCCM

    http://myitforum.com/cs2/files/folders/configmgr/entry117993.aspx


    Deploying Forefront Client Security Using SCCM 2007 - Step-By-Step - The Security Wizard

    http://blogs.microsoft.co.il/blogs/yanivf/archive/2008/02/20/deploying-forefront-client-security-using-sccm-2007-step-by-step.aspx








    • Marked as answer by Eric Zhang CHN Wednesday, December 02, 2009 9:50 AM
    Thursday, November 12, 2009 6:15 AM
  • Hi, thanks for that.

    However, are there any good "noob" guides to set up Forefront on the server? (I.e. the managment/policy server?)
    Thursday, November 12, 2009 1:16 PM
  • Hi,

    See Forefront articles in Microsoft Technet Library:

    Microsoft Forefront

    http://technet.microsoft.com/en-us/library/cc901531.aspx
    Friday, November 13, 2009 7:11 AM
  • Well, seems it wasn't as hard as I feared...

    Stumbled upon a question though, I was of the understanding that FCS won't run on x64 2008 server... which is our SCCM(WSUS) server. How then am I supposed to install the FCS Distribution server component?

    And do we need it? (I don't know what it does, but our SCCM is already set up to download and "distribute" Forefront definitions...)
    Monday, November 16, 2009 12:24 PM
  • A few questions


    1) You can deploy FCS Agents with SCCM....
    2) You can configure WSUS to Auto Acceptance rule to automatically accept updates of the category definition updates. By this way, the updates are downloaded to a server's folder randomly...

    3) But....how you send these updates "automatically" to the Distribution point?? 
    4) But... how you put these updates "automatically" into the deployment packages???


    Monday, November 16, 2009 3:34 PM
  • I got a FCS server installed (and by default then a MOM2005?!) and it "deployed" the client on the server aswell. It seems to work just fine. I then made a package for SCCM to deploy the client to my lab computer using;

    CLIENTSETUP.EXE /CG ForefrontClientSecurity /MS FCS-Server

    Which also seemed to work just fine... however, the computer never showed up on the Forefront Client Security Console. Some googling led me to start the MOM Admin Console and "allow" the computer to be added... which doesn't seem like a very automatic way of installing the client to me ...

    Any work around for this?

    (I still think I should have a dummies guide for this as apparently I installed it with wrong access rights ... the FCS console keeps complaining that it can't display reports and when I click one I need to authenticate as admin to see it.)
    Wednesday, November 25, 2009 1:50 PM