Forefront Team Blog

News, updates and insights about enterprise identity and security solutions.
Blog - Title

May, 2008

Posts
  • Forefront Team Blog

    Announcing ISA Server 2006 Service Pack 1 New Features

    • 3 Comments

    This summer, we will be releasing Microsoft Internet Security and Acceleration (ISA) Server 2006 Service Pack (SP) 1.    This Service Pack introduces new features and improved functionality for ISA Server 2006 Enterprise and Standard Editions. The new features focus primarily on enhanced troubleshooting mechanisms designed to help you identify and resolve ISA Server configuration issues.  

     ISA Server 2006 SP1 includes the following new features:

    • Configuration Change Tracking - logs all configuration changes applied to ISA Server configuration to help you backtrack through your change history.
    • Web Publishing Rule Test Button - helps you verify that the rule configuration agrees with what is set at the published web server and provides specific suggestions when they disagree.
    • Traffic Simulator - simulates network traffic as it would be seen by the ISA rules engine and gives you specific information about traffic processing along the way.
    • Diagnostic Logging Query - an extension to the Diagnostic Logging feature provided in the Supportability Pack, this feature makes it much easier to see only the data that is relevant to the current troubleshooting effort.
    • Support for Network Load Balancing (NLB) multicast and multicast with IGMP operations.
    • Support for certificates with multiple Subject Alternative Name (SAN) entries in published web servers.
    • Kerberos Constrained Delegation (KCD) authentication supports trusted-domain user accounts.

    There's lots more detail here, including screenshots:

  • Forefront Team Blog

    A Look at Threat Management Gateway

    • 3 Comments

    Microsoft support engineer Yuri Diogenes really digs into the Threat Management Gateway (TMG) beta.  TMG is the next version of ISA server that will be released with Stirling: 

    There are many things that you will notice and see that it is different from ISA Server 2006. As far as installation is concern there are some things that you need to remember:

    ·         IIS will be installed:  that’s correct; IIS now will be installed by TMG. You might be thinking: “I remember that we have issues with IIS and ISA in the same box…”.  You are right for ISA Server, but for TMG we need IIS because TMG needs SQL Reporting Services 2005 and SQL Reporting Services 2005 needs IIS. It is important to emphasize that IIS is not removed if you uninstall TMG.

    ·         64 bits System: although the final version of TMG requires a 64-bit processor and Windows Server 2008 64-bit, this beta version can be installed in a 32-bit system with Windows Server 2008.

    ·         WEBS: the TMG beta version that we have available for download it will be part of the Windows Essential Business Server. TMG will be available through WEBS Standard and Premium Edition.

    There's lots more, including a bunch of screen shots here.

  • Forefront Team Blog

    New Citrix Branch Repeater Uses ISA Server

    • 9 Comments

    Citrix has announced the availability of the new Citrix Branch Repeater, an "all-in-one" device for delivering applications to branch offices.   The Citrix Branch Repeater was developed jointly with Microsoft, and  uses Microsoft ISA Server 2006 Web caching to accelerate delivery of web content to the branch.  ISA Server 2006  helps branch office users easily and securely access the Internet or corporate-based resources. More on ISA's use in the new Citrix Branch Repeater on  Thomas Shinder's ISAServer.org blog here.

    Internet Security & Acceleration (ISA) Server,  first launched in 1997 as the Microsoft Proxy Server, is a very versatile product with a great many uses, including as a VPN, a Firewall, a URL filtering proxy, and with Citrix, a Web caching device.   In addition to Citrix, ISA has a rich partner ecosystem that includes providers of URL filters, Anti-Virus, Reporting, User Authentication, and more on our partner page here.

  • Forefront Team Blog

    Stirling blog post new Stirling resources

    • 10 Comments

    Microsoft Forefront code-named "Stirling" is our new integrated security solution.  We launched the first beta at RSA last month, and now there is a new Stirling team blog.  The Stirling team has released these new resources:

    Greetings from Redmond!

    Now that Stirling's been out for a while, it's time to make sure you know the resources available to you when testing Stirling in your lab environment.

    TechNet: Stirling information can be accessed from the Stirling TechNet Web site.

    Deployment: The Stirling Deployment Guide steps you through installing Stirling and deploying the Stirling client software to the client computers in your lab environment.

    Operations: The Stirling Operations Guide has documentation on day-to-day management tasks, as well as feature walkthroughs that you can use in your lab to explore the Stirling features. 

    Stirling and PowerShell: Stirling utilizes PowerShell for its features, and the cmdlets available with Beta 1 are documented in the PowerShell console and on TechNet. Also - a brief introduction on how Stirling uses PowerShell is included in the Operations guide.

    Newsgroups: You can post questions and get more information about Stirling on the Stirling TechNet Community Forums.

    Can't emphasize this last one enough - let us know your questions, and what you think!

    Thanks!

  • Forefront Team Blog

    Moderate Vulnerability Microsoft Malware Protection Engine Could Allow Denial of Service (952044)

    • 5 Comments

    Yesterday's patches included a vulnerability in the Microsoft Malware Protection Engine, which is used by Forefront Client Security, Forefront Security for Exchange Server, and Forefront Security for SharePoint.  We recommend our customers immediately ensure that they have the latest Microsoft Malware Protection Engine update. The affected software provides built-in mechanisms for the automatic detection and deployment of this update.

    More details on Technet:

    This security update resolves two privately reported vulnerabilities in the Microsoft Malware Protection Engine. An attacker could exploit either of the vulnerabilities by constructing a specially crafted file that could allow denial of service when received by the target computer system and scanned by the Microsoft Malware Protection Engine. An attacker who successfully exploited either vulnerability could cause the Microsoft Malware Protection Engine to stop responding and automatically restart.

    The Microsoft Malware Protection Engine is a part of several Microsoft products. Depending upon which product is installed, this security update has different severity ratings. This security update is rated Moderate for Windows Live OneCare, Microsoft Antigen for Exchange, Microsoft Antigen for SMTP Gateway, Microsoft Windows Defender, Microsoft Forefront Client Security, Microsoft Forefront Security for Exchange Server and Microsoft Forefront Security for SharePoint. This security update is rated Low for Standalone System Sweeper located in Diagnostics and Recovery Toolset 6. For more information, see the subsection, Affected and Non-Affected Software, in this section.  The security update addresses the vulnerability by modifying the way that the Malware Protection Engine processes files. For more information about this vulnerability, see the Frequently Asked Questions (FAQ) subsection under the next section, Vulnerability Information.

Page 1 of 2 (7 items) 12