Here’s a KB we just published that talks about a condition where the status displayed in the FCS Malware Summary report may be a little bit confusing:
=====
When viewing the Forefront Client Security (FCS) Malware Summary, it may not contain any data and instead simply report "There is no relevant information."
This occurs if no malware has been detected in the last 24 hours. This is by design.
When there is no malware that has been reported in the last 24 hours, the Malware Summary will not show a graph for 0. Instead it will say "There is no relevant information" as mentioned above.
For the most current version of this article please see the following:
2787508 - Forefront Client Security Malware Summary reports "There is no relevant information"
J.C. Hornbeck | Knowledge Engineer | Management and Security Division
Get the latest System Center news on Facebook and Twitter:
App-V Team blog: http://blogs.technet.com/appv/ ConfigMgr Support Team blog: http://blogs.technet.com/configurationmgr/ DPM Team blog: http://blogs.technet.com/dpm/ MED-V Team blog: http://blogs.technet.com/medv/ Orchestrator Support Team blog: http://blogs.technet.com/b/orchestrator/ Operations Manager Team blog: http://blogs.technet.com/momteam/ SCVMM Team blog: http://blogs.technet.com/scvmm Server App-V Team blog: http://blogs.technet.com/b/serverappv Service Manager Team blog: http://blogs.technet.com/b/servicemanager System Center Essentials Team blog: http://blogs.technet.com/b/systemcenteressentials WSUS Support Team blog: http://blogs.technet.com/sus/
The Forefront Server Protection blog: http://blogs.technet.com/b/fss/ The Forefront Endpoint Security blog : http://blogs.technet.com/b/clientsecurity/ The Forefront Identity Manager blog : http://blogs.msdn.com/b/ms-identity-support/ The Forefront TMG blog: http://blogs.technet.com/b/isablog/ The Forefront UAG blog: http://blogs.technet.com/b/edgeaccessblog/
This Knowledge Base article talks about an issue where installing System Center 2012 Endpoint Protection for Mac fails with “There were errors with the installation" :
When you try to install Microsoft System Center 2012 Endpoint Protection for Mac (SCEP), you receive an error message that resembles the following:
There were errors with the installation. You may want to try installing again. The Installation failed.
To resolve this issue, use the following methods. If Method 1 does not resolve the issue, go to Method 2:
Method 1 1. Click Close to close the error message window. 2. On the Go menu, click Applications. 3. Double-click System Center 2012 Endpoint Protection for Mac. 4. Verify that System Center 2012 Endpoint Protection for Mac starts as expected. To do this, click the System Center Endpoint Protection for Mac icon in the menu bar, and then click Open System Center 2012 Endpoint Protection.
Method 2
If System Center 2012 Endpoint Protection for Mac does not start as expected, follow these steps: 1. Restart the system into safe mode 2. Delete all SCEP applications bundles from /Application folder that you can found in it 3. Make a normal restart 4. Run 4.5.9X Uninstaller from 4.5.X dmg 5. execute from Terminal: rm -Rf ~/.scep/ 6. cd /Library/Application\ Support/Microsoft/ 7. sudo rm -Rf *scep/
NOTE: install.log can be found at /var/log/install.log
2695614 - Error message when you try to install System Center 2012 Endpoint Protection for Mac: "There were errors with the installation"
Here’s a hotfix for FEP 2010 that we recently published. This one’s an update that adds Windows 8 and Windows Server 2012 support to Forefront Endpoint Protection 2010 clients
This article describes an update that enables the Microsoft Forefront Endpoint Protection 2010 client to support Windows 8 and Windows Server 2012. After you install this update, you can install the Forefront Endpoint Protection 2010 client on a computer that is running Windows 8 or Windows Server 2012.
Note This update only applies to Forefront Endpoint Protection 2010 clients that are integrated with Microsoft System Center Configuration Manager 2007.
To continue reading and to get a download link, please see the following:
2758685 - Update adds Windows 8 and Windows Server 2012 support to Forefront Endpoint Protection 2010 clients (http://support.microsoft.com/kb/2758685)
Windows 8 comes with Windows Defender (WD) included and has no built-in manageability. WD is primarily a consumer product, like Microsoft Security Essentials (MSE) that is shipped in the box with Windows 8.
Windows Defender is NOT included with Windows Server 2012, see the table below for a supported version of a Microsoft Antimalware product.
System Center Endpoint Protection (SCEP) and Forefront Endpoint Protection (FEP) will always disable WD during the SCEP/FEP installation process.
FEP 2010 and SCEP RTM will not support Windows 8 or Windows Server 2012 although the support for both is scheduled to come with a future update for Configuration Manager 2007/FEP 2010 and Service Pack 1 for System Center 2012 Configuration Manager.
NOTE: Windows Defender that comes with Windows 8 includes antimalware protection!
All Microsoft Antimalware protection clients listed below will be using the same underlying technologies and offer the same level of protection:
The table below gives an overview of the supported Microsoft Antimalware Protection products.
Windows 8/Windows Server 2012
Pre-Windows 8
Managed with ConfigMgr 2012
SCEP SP1
SCEP / SCEP SP1
Managed with ConfigMgr 2007
FEP w/FEP Update Rollup 1 + KB2758685
FEP / FEP Update Rollup 1
Unmanaged
Windows Defender (NOT on Windows Server 2012)
MSE / SCEP / SCEP SP1 / FEP with install switches
NOTE Please remove any Group Policies containing “Turn off Windows Defender”=Disabled before you deploy SCEP/FEP on Windows 8 clients or you will have issues with definitions not deploying properly. When editing the Windows Defender group policy, click “Turn off Windows Defender” on the right of the window, then click “Edit Policy Setting” to open the “Turn off Windows Defender” dialog box. Click the circle next to “Enabled” to disable Windows Defender.
Diana L. Smith, CISSP | Senior Support Escalation Engineer | Management and Security Division
Here’s a new Knowledge Base article we published. This one explains Forefront Endpoint Protection support on Itanium (IA-64) based computers.
Support for installing Microsoft Windows Server IA64/Itanium with System Center Configuration Manager with Forefront Endpoint Protection (FEP) is as follows:
System Center Configuration Manager 2007 supports Microsoft Windows Server 2008 R2 IA64 (Itanium) System Center Configuration Manager 2007 supports Microsoft Windows Server 2008 R2 x64 System Center Configuration Manager 2012 supports Microsoft Windows Server 2008 R2 x64 System Center Configuration Manager 2012 does not support Microsoft Windows Server 2008 R2 IA64 (Itanium) Forefront Endpoint Protection 2010 supports Microsoft Windows Server 2008 R2 x64 Forefront Endpoint Protection 2010 does not support Microsoft Windows Server 2008 R2 IA64 (Itanium) System Center Endpoint Protection 2012 supports Microsoft Windows Server 2008 R2 x64 System Center Endpoint Protection 2012 does not support Microsoft Windows Server 2008 R2 IA64 (Itanium)
2764901 - Information on Forefront Endpoint Protection support on Itanium (IA-64) based computers