locked
FCS enlightment RRS feed

  • Question

  • Dear guys,

    Please enlight me with Forefront product, when I have to use FCS and FSSMC and Server product?

    Is FCS use only for client and FCS managed it ?
    Is FSCMS use only for managing Forefront server product security, such as Exchange?
    Can I install client security at Exchange and server with FSSMC installed?if I can installed it, so I can managed it with FCS ?

    rgds,
    K
    rgds, Krisna
    Thursday, February 18, 2010 10:53 AM

Answers

  • Hi,

    On Exchange Server, you need to install Forefront for Exchange and FCS because FCS protects the OS and file that the OS sees and Forefront for exchange  provide app level protection, and have access to look into "containers" that may not be available for FCS to see. They also not only look for malware, but have the ability to look for keywords in documents, emails, IMs and notify appropriate parties.

    Also, it is recommended to exclude some files and folders for Microsoft Products from FCS scan.

    For more information : http://support.microsoft.com/default.aspx/kb/943556/en-us

    You cannot push client security on computers from FCSMC or FCEM but you can deploy client with GPO/WSUS/ConfigMgr or manually. For more information : http://technet.microsoft.com/en-us/library/bb404255.aspx

    Thank's


    Bechir Gharbi. MCP, MCSA, MCSE M+S, MCITP Server/Enterprise Administrator, MCT, MCTS Configuration Manager/Forefront
    • Proposed as answer by Bechir Gharbi Friday, February 19, 2010 5:43 PM
    • Marked as answer by Nick Gu - MSFT Tuesday, February 23, 2010 7:43 AM
    Friday, February 19, 2010 7:11 AM

All replies

  • Hi,

    Forefront Server Security Management Console allows administrators to easily manage Forefront Security for Exchange Server, Forefront Security for SharePoint, and Microsoft Antigen, providing a Web-based console to centralize configuration and operation, automate the download and distribution of signature and scan engine updates, and generate comprehensive reports.
    For more info http://www.microsoft.com/forefront/serversecurity/management/en/us/default.aspx

    You cannot manage Forefront Client security from FSSMC. You manage FCS from Forefront client security management console or you can install Forefront Client Enterprise Manager who allows Client Security administrators to centrally manage multiple Client Security deployments in their enterprise environment.
    For more info : http://technet.microsoft.com/en-us/library/bb896626.aspx

    Also, thank's to see this link to know how to deploy Client Security to client computers : http://technet.microsoft.com/en-us/library/bb404255.aspx

    Thank's.


    Bechir Gharbi. MCP, MCSA, MCSE M+S, MCITP Server/Enterprise Administrator, MCT, MCTS Configuration Manager/Forefront
    • Proposed as answer by Bechir Gharbi Friday, February 19, 2010 5:43 PM
    Thursday, February 18, 2010 12:00 PM
  • Hi, thank's for the reply :)

    1. so I don't need install client security in my Exchange Server if it already installed Forefront Security for Exchange Server?
    2. for the protection at the FSSMC server, what kind forefront security will be installed?is it client security too?
    3. can I push the client security from FCS management console too same as FCEM ?
    rgds,
    K
    rgds, Krisna
    Friday, February 19, 2010 2:01 AM
  • Hi,

    On Exchange Server, you need to install Forefront for Exchange and FCS because FCS protects the OS and file that the OS sees and Forefront for exchange  provide app level protection, and have access to look into "containers" that may not be available for FCS to see. They also not only look for malware, but have the ability to look for keywords in documents, emails, IMs and notify appropriate parties.

    Also, it is recommended to exclude some files and folders for Microsoft Products from FCS scan.

    For more information : http://support.microsoft.com/default.aspx/kb/943556/en-us

    You cannot push client security on computers from FCSMC or FCEM but you can deploy client with GPO/WSUS/ConfigMgr or manually. For more information : http://technet.microsoft.com/en-us/library/bb404255.aspx

    Thank's


    Bechir Gharbi. MCP, MCSA, MCSE M+S, MCITP Server/Enterprise Administrator, MCT, MCTS Configuration Manager/Forefront
    • Proposed as answer by Bechir Gharbi Friday, February 19, 2010 5:43 PM
    • Marked as answer by Nick Gu - MSFT Tuesday, February 23, 2010 7:43 AM
    Friday, February 19, 2010 7:11 AM