Microsoft® Forefront® Endpoint Protection 2010 ( provides a lower total cost of ownership enterprise solution that enables desktop administrators to add security management to their day-to-day operations within a familiar framework without requiring specialized security knowledge. Forefront Endpoint Protection helps provide security for business desktop and portable computers. It is easy for desktop administrators to deploy and maintain using System Center Configuration Manager 2007 R2 and delivers a fully integrated, best of breed security solution at low total operating cost.

Forefront Endpoint Protection contributes to more effective IT management by:

  • Providing a scalable security solution that seamlessly integrates with your existing asset management of desktops and portable computers without adding any dedicated infrastructure.
  • Providing an integrated client security solution that is lightweight yet effective.
  • Providing a cost-effective enterprise security solution that fits into existing IT infrastructure.

Easy to Deploy

Forefront Endpoint Protection makes it easy for desktop administrators to roll out a large-scale endpoint protection solution to all user desktops and portable computers. It comes complete with recommended policy templates that are ready to use the right out-of-the box, taking the guesswork out of security management. While no advanced customization is required, it is easy to customize policies to meet the needs of your organization. Forefront Endpoint Protection supports deployments that are built on the familiar System Center Configuration Manager software distribution infrastructure. Forefront Endpoint Protection can be deployed:

  • Across various topologies to support non-domain joined computers, endpoints at different branch offices in addition to unmanaged (stand-alone) clients.
  • To seamlessly upgrade or replace previously installed security solutions.
  • On various Windows operating systems.

Easy to Maintain

Forefront Endpoint Protection offers the desktop administrator a streamlined security management experience. Built on the familiar Configuration Manager interface, it gives administrators simplified access to the information and tools they need in order to keep their enterprise security and running, including the following:

  • Actionable and timely alerting on malware detection on critical assets or potential malware outbreaks
  • Policy-based administration
  • Remediation capabilities including scanning and updating definitions on client computers
  • Current and historical reporting that enables administrators to answer critical security questions, such as:  
    • What percentage of computers are currently protected?
    • Is antivirus software installed and turned on?
    • Are the latest definitions installed?
    • What malware was detected in the organization?
    • What computers currently have malware activity?
    • How can I improve my organizational security?


Unified Protection

Forefront Endpoint Protection delivers single-agent, multi-threat protection for desktops, portable computers, users and data. Backed by a world-class response center and a dedicated community (SpyNet) serving millions of users, it includes:

  • Antimalware
  • Spyware
  • Rootkit detection
  • Critical vulnerability assessment and automatic updates
  • Integrated Windows Firewall management
  • Integrated Internet Explorer protection
  • Network Inspection System

Forefront Endpoint Protection helps users stay secure and productive both at work and on the go with a lightweight, easy-to-use interface. It is built on the same antimalware engine as Microsoft Security Essentials (MSE), which has been delighting millions of consumers with low false positives and high catch rates. Whenever possible, Forefront Endpoint Protection automatically solves security issues as they occur without disturbing users, so users can stay safe and continue with their work without contacting their desktop administrators.

Go here to download the latest version.

TechNet Wiki References




External References