The Forefront Security for Exchange team writes:
Forefront Security for Exchange Server with Service Pack 1 was released on November 29, 2007!! (Download here.) If you are looking forward to installing Exchange 2007 SP1 and are currently using Forefront Security for Exchange Server with then please download and upgrade to Forefront Security for Exchange Server with Service Pack 1 before upgrading to Exchange 2007 SP1. This build of Forefront is currently the only compatible and supported Forefront release for use with Exchange 2007 SP1. If you have never used Forefront Security for Exchange Server and you are interested in securing your Exchange 2007 server you can also install Forefront SP1 as a full installation on top of both Exchange 2007 RTM and Exchange 2007 SP1.
Please see below for a comprehensive list of new features and fixes introduced into this release.
We’ve just released an update to Microsoft Antigen 9.0. Antigen server-level antivirus, anti-spam, and content-filtering products are part of the Microsoft Forefront Security product family. Microsoft Forefront Security for Exchange Server and Microsoft Forefront Security for SharePoint are the latest server security products and are designed to protect the most recent releases of Microsoft’s messaging and collaboration platforms: Microsoft Exchange Server 2007, Microsoft Office SharePoint Server 2007, and Microsoft Windows SharePoint Services 3.0.
With multiple engine protection for Exchange Server 2003 and Exchange 2000 Server environments, Microsoft Antigen 9.0 with SP1 now provides:
· Enhanced cluster support
· Scanning of Office 2007 file formats
· Globalization.
The Antigen 9.0 SP1 release includes Antigen for Exchange, Antigen for SMTP Gateways and Antigen Spam Manager
Download it here
My IT Forum TV has published a nice 10 minute segment of the 60 minute security press conference we did at IT Forum. We discuss the latest news on Forefront products, including the release of the Forefront Server Security Management Console:
Published : 2007/11/14 Description : Microsoft has worked hard to create a culture of security, including building security into its processes, operating systems, and applications. Vinny Gullotto, General Manager of the Microsoft Malware Protection Center, Paul Mayfield, Program Manager for Network Access Protection, Joshua Edwards, Technical Product Manager, Microsoft Office and Steve Brown, Director for Security and Access Product Management talk about some of the announcements from TechEd IT Forum and answer questions from the press.
We’ve had a great show in Barcelona. We announced our Forefront Server Security Management Console, along with new NAP clients for Linux and Macintosh workstations.
Several of us had a chance to view the Sagrada Familia and climb up on the roof of the 13th century Cathedral of Santa Eulàlia, which gave us a great view of the city:
Hot off the presses, Microsoft IT (aka MSIT) has published a case study around their use of Network Access Protection (aka NAP) --enabled with Windows Server 2008 -- to improve security and host policy compliance on our huge network.
Microsoft Improves Security Policy Compliance with Network Access Protection
Here's a brief synopsis of the paper:
With 71,000 highly mobile users worldwide, Microsoft wanted a new way to measure and improve its 300,000+ client computers’ compliance with corporate security policies. The company deployed Network Access Protection (NAP), a feature of the Windows Server® 2008 operating system, to improve the security policy compliance of its desktop computers, roaming portable computers, visiting portable computers, and unmanaged home computers. Now Microsoft is increasing compliance with security policies and adding efficiency to its security management process. The company also benefits from the scalability of NAP and the flexibility to deploy it for a variety of access scenarios—including virtual private network connections, Internet Protocol security access, and Dynamic Host Configuration Protocol address configurations—with varying levels of implementation.
One thing you'll likely note is MSIT is using IPsec as one of the main enforcement methods for our NAP deployment. This builds on the existing Server and Domain Isolation deployment MSIT completed a few years back.
Why is that important?
Well, if you're looking for things you can start doing today to get your networks ready for the upcoming release of Windows Server 2008, consider evaluating Server and Domain Isolation.
It's already supported on WS03, XP, etc. and can help you layout the enforcement scheme (with added security and compliance value even at this stage) for a future NAP deployment.
Happy reading!
-- Ian