News

Microsoft Unveils Next-Generation Forefront Business Security Solution Codename "Stirling" http://go.microsoft.com/?linkid=6951832

Announced this month, the new Microsoft Forefront solution, codename "Stirling," is a single product that will deliver unified security management and reporting with comprehensive, coordinated protection across client, server applications, and network edge. "Stirling" acts as a distributed system, sharing and correlating information to identify complex threats, and dynamically responding to protect the organization.

Windows Server 2008: A Technical Overview http://go.microsoft.com/?linkid=6951833

Learn about the new features and functionality of Windows Server 2008. Windows Server 2008 provides powerful improvements to networking, advanced security features, remote application access, centralized server role management, performance and reliability monitoring tools, failover clustering, deployment, and the file system.

Managing and Protecting Personal Information http://go.microsoft.com/?linkid=6951834

A multifaceted approach to data privacy management involves a combination of people, processes, and technology solutions. This paper focuses on the important role technology plays in helping enterprises responsibly protect and manage personal information, mitigate risk, achieve compliance, and promote trust and accountability.

Password Checker http://go.microsoft.com/?linkid=6951842

Online accounts, computer files, personal information, and company information are more secure when you use strong passwords to help protect them. Offer this tool to your co-workers to help them gauge the strength of their passwords.

Microsoft Security Products Receive Virus Bulletin's 100% Award http://go.microsoft.com/?linkid=6959784

Virus Bulletin, a magazine that conducts tests of detection rates of antivirus software products, announced that both Forefront Client Security and Windows Live OneCare achieved the Virus Bulletin 100% award. Products that manage to detect 100 percent of the viruses "in the wild" without false alarms are given this award.

Microsoft Forefront Client Security 120-Day Trial Is Available http://go.microsoft.com/?linkid=6959785

Microsoft Forefront Client Security 120-day trial version is available for evaluation, a security solution that helps protect business desktops, laptops, and server operating systems from viruses, spyware, and other current and emerging threats.

- Read how other IT professionals use Forefront Client Security http://go.microsoft.com/?linkid=6959833

- Take the virtual labs http://go.microsoft.com/?linkid=6959834

- Download the trial software http://go.microsoft.com/?linkid=6959835

Microsoft Security Awareness Toolkit http://go.microsoft.com/?linkid=6951861

Guidance, samples, and templates for creating a security-awareness program in your organization.

Microsoft Security Bulletin Summary for June, 2007

http://www.microsoft.com/technet/security/bulletin/ms07-jun.mspx

Search for previous security bulletins http://go.microsoft.com/?linkid=3992478

Security Bulletin Feed http://go.microsoft.com/?linkid=3992479 RSS http://go.microsoft.com/?linkid=3992480

Documents

Security Tip of the Month: Read the EULA..No, Really Read It http://go.microsoft.com/?linkid=6951835

By Jeff Williams, CIPP, CISSP and Director, Microsoft Malware Protection Center Data protection policies need to be well thought out and consider not only the systems in direct control of the business, but also the credentials by which employees can access those systems remotely. In this month's tip, learn why, beyond policy, awareness is a key element to the protection of data in your business.

The Desktop Files: How Not to Lose Your Data http://go.microsoft.com/?linkid=6951836

Every day the news has reports of both minor and significant data losses. It's ridiculous that important data is lost so often, but the reality is that information is lost because people simply fail to protect it. This article focuses specifically on steps IT professionals can take to secure their company's data during its entire lifecycle.

Data Encryption Toolkit for Mobile PCs http://go.microsoft.com/?linkid=6951837

The Data Encryption Toolkit for Mobile PCs provides tested guidance and powerful tools to help you protect your organization's most vulnerable data. The toolkit is divided into four components: an executive overview, the security analysis, the planning and implementation guide, and the Microsoft Encrypting File System Assistant.

I Know What You Did Last Logon: Monitoring Software, Spyware, and Privacy http://go.microsoft.com/?linkid=6951838

This white paper from the Microsoft Antimalware Team explores the technical methods used by both hardware- and software-based key loggers, how keystroke loggers are integrated with specific malware threats, the user experience associated with various key loggers installed, and the social and legal appropriateness of various use scenarios.

ISA Server Privacy Guidelines http://go.microsoft.com/?linkid=6951839

This document describes how Microsoft Internet Security and Acceleration (ISA) Server handles personally identifiable information (PII). As an administrator, you should be aware of these guidelines to help you comply with legal or corporate guidelines as required.

Privacy Guidelines for Developing Software Products and Services http://go.microsoft.com/?linkid=6951840

This document is a public version of the extensive internal privacy guidelines for developers Microsoft published to help protect customer privacy. These guidelines are based on our internal guidelines and our experience incorporating privacy into the development process.

How to Deploy P3P Privacy Policies on Your Web Site http://go.microsoft.com/?linkid=6951841

This overview explains the steps to take when deploying a Platform for Privacy Preferences (P3P) privacy scheme on a Web site beginning with the Web site's natural-language privacy policy.

Smart-Card Reference Guide http://go.microsoft.com/?linkid=6951843

The need for security and enhanced privacy is increasing as electronic forms of identification replace face-to-face and paper-based ones. This TechNet guide provides details about smart cards as a key component of its PKI support, enhancing software-only solutions, such as client authentication, interactive logon, and secure e-mail as well as serving as a point of convergence for public key certificates and associated keys.

Downloads

Windows Server 2008 Security Guide

The Windows Server 2008 Security Guide helps organizations efficiently create, deploy, and maintain a secure environment for a variety of servers running Windows Server 2008, the next major release of Windows Server.

http://www.microsoft.com/downloads/details.aspx?FamilyID=fb8b981f-227c-4af6-a44b-b115696a80ac&DisplayLang=en

Data Encryption Toolkit for Mobile PCs

This toolkit is intended to help you secure the data on your organization’s mobile PCs--in a cost-effective way--using Encrypting File System (EFS) and Microsoft BitLocker Drive Encryption (BitLocker) technologies.

http://www.microsoft.com/downloads/details.aspx?FamilyID=1a99576a-fe67-418f-88b1-81e2055fe977&DisplayLang=en

ADFS Step-by-Step Guide: Federation with CA SiteMinder Federation Security Services

This ADFS Step-by-Step Guide walks you through the set up of a test lab for ADFS and CA SiteMinder FSS interoperability.

http://www.microsoft.com/downloads/details.aspx?FamilyID=921379ca-bbb0-4e9a-a0d4-495d620832f6&DisplayLang=en

Microsoft Security Assessment Tool 3.0 (English Only)

The Microsoft Security Assessment Tool (MSAT) is a risk-assessment application designed to provide information and recommendations about best practices for security within an information technology (IT) infrastructure.

http://www.microsoft.com/downloads/details.aspx?FamilyID=6d79df9c-c6d1-4e8f-8000-0be72b430212&DisplayLang=en

Windows Live OneCare Virus and Spyware Repair Tool

Resolves the issue entitled "Contact Help Center - OneCare virus and spyware protection encountered a problem and cannot start". You MUST save this file to your computer and then run it. Do NOT select 'Run' from the download dialog.

http://www.microsoft.com/downloads/details.aspx?FamilyID=70adca25-950c-4b1b-a5e2-297e80aa67b1&DisplayLang=en

Microsoft Forefront Server Security Management Console Beta 2

Forefront Server Security Management Console allows administrators to easily manage Forefront Security for Exchange Server, Forefront Security for SharePoint, and Microsoft Antigen.

http://www.microsoft.com/downloads/details.aspx?FamilyID=2048daae-b9f2-4612-ada9-51537a5479ca&DisplayLang=en

Microsoft Forefront Server Security Management Console Beta 2 User Guide

Forefront Server Security Management Console allows administrators to easily manage Forefront Security for Exchange Server, Forefront Security for SharePoint, and Microsoft Antigen.

http://www.microsoft.com/downloads/details.aspx?FamilyID=ea4bcd9a-470f-4051-845b-e79f5b3c77a6&DisplayLang=en

Setting Up a Traditional Perimeter Network for Enterprise Portal

A high-level overview of how to set up a traditional perimeter network to support a Microsoft Dynamics AX 4.0 Enterprise Portal.

http://www.microsoft.com/downloads/details.aspx?FamilyID=b5a7e33c-37eb-47ee-80c6-f3126b3a48d7&DisplayLang=en

Server and Domain Isolation Data Sheet

This data sheet describes the benefits of Server and Domain Isolation.

http://www.microsoft.com/downloads/details.aspx?FamilyID=179e8815-841a-4bd2-9af6-d5fdf79ce6d0&DisplayLang=en

June 12, 2007 Enterprise Update Scan Tool (standalone version)

Enterprise Update Scan Tool (standalone version) for detecting needed security updates for June 2007 as described in MS07-034

http://www.microsoft.com/downloads/details.aspx?FamilyID=2ca70955-7f59-4d76-8ee5-d7a160e07aa9&DisplayLang=en

Extended Security Update Inventory Tool

The Extended Security Update Inventory Tool is used to detect security bulletins not covered by MBSA including MS04-028, February 2005 bulletins, and future security bulletins that are exceptions to MBSA.

http://www.microsoft.com/downloads/details.aspx?FamilyID=2c93da1d-48a0-4e5c-991f-87e08954f61b&DisplayLang=en

Microsoft® Windows® Malicious Software Removal Tool (KB890830)

This tool checks your computer for infection by specific, prevalent malicious software (including Blaster, Sasser, and Mydoom) and helps to remove the infection if it is found. Microsoft will release an updated version of this tool on the second Tuesday of each month.

http://www.microsoft.com/downloads/details.aspx?FamilyID=ad724ae0-e72d-4f54-9ab3-75b8eb148356&DisplayLang=en

Update for Windows Mail Junk E-mail Filter [June 2007] (KB905866)

Install this update for Windows Mail to revise the definition files used to detect e-mail messages that should be considered junk e-mail or that may contain phishing content.

http://www.microsoft.com/downloads/details.aspx?FamilyID=aa029fde-f341-44fc-8b85-0c6f3d3c2d69&DisplayLang=en

Update for Windows Mail Junk E-mail Filter for x64-based Systems [June 2007] (KB905866)

Install this update for Windows Mail to revise the definition files used to detect e-mail messages that should be considered junk e-mail or that may contain phishing content.

http://www.microsoft.com/downloads/details.aspx?FamilyID=749e10cd-f40c-4f94-8e38-d4221ded7652&DisplayLang=en

Microsoft Forefront Client Security Product Documentation

This download provides product documentation for Microsoft Forefront Client Security.

http://www.microsoft.com/downloads/details.aspx?FamilyID=90044d88-299b-49fb-b762-eae17a1f01f4&DisplayLang=en

June 2007 Security Releases ISO Image

This DVD5 ISO image file contains the security updates for Windows released on Windows Update on June 12th, 2007.

http://www.microsoft.com/downloads/details.aspx?FamilyID=8825d33f-c864-465f-9d46-c19780ca7e48&DisplayLang=en

Update for Outlook 2003 Junk E-mail Filter (KB936030)

This update provides the Junk E-mail Filter in Microsoft Office Outlook 2003 with a more current definition of which e-mail messages should be considered junk e-mail. This update was released in June 2007.

http://www.microsoft.com/downloads/details.aspx?FamilyID=ad959a07-8c6a-4f78-b02d-d6d99620dd71&DisplayLang=en

Securing Wireless LANs with PEAP and Passwords

This solution shows you how to plan, deploy, and manage 802.1X wireless LAN security using Microsoft Windows Server 2003. This guidance provides step-by-step instructions for deploying wireless local access network (LAN) security for Microsoft Windows XP, and Pocket PC clients using the Protected Extensible Authentication Protocol (PEAP) and password authentication.

http://www.microsoft.com/downloads/details.aspx?FamilyID=60c5d0a1-9820-480e-aa38-63485eca8b9b&DisplayLang=en

Microsoft WS-I Basic Security Profile 1.0 Reference Implementation: Final Release for the .NET Framework version 2.0

The Microsoft WS-I Basic Security Profile 1.0 Reference Implementation demonstrates interoperability of secure Web services. By reading the guide and examining the application, you can gain an understanding of how conforming to the BSP 1.0 helps you create secure Web services that are interoperable. This release targets the .NET Framework version 2.0.

http://www.microsoft.com/downloads/details.aspx?FamilyID=40e3d4c5-2105-47f1-ba26-9e4c29ba6990&DisplayLang=en

Events/WebCasts

Microsoft Security Webcast Series: Upcoming and On-Demand

Security Webcast Calendar http://go.microsoft.com/fwlink/?LinkId=37910

Find security webcasts listed in an easy-to-use calendar format.

Upcoming Security Webcasts

http://www.microsoft.com/events/security/upcoming.mspx

Register for the following Webcasts on the link above

TechNet Webcast: Information About Microsoft July Security Bulletins (Level 200)

Wednesday, July 11, 2007 11:00 A.M.-12:00 P.M. Pacific Time

TechNet Webcast: Troubleshooting Forefront Client Security (Level 200)

Friday, July 13, 2007 9:30 A.M.-11:00 A.M. Pacific Time

TechNet Webcast: Security and Enterprise Features of System Center Operations Manager 2007 (Level 200)

Monday, July 16, 2007 11:30 A.M.-1:00 P.M. Pacific Time

TechNet Webcast: Deploying IPSec with Windows Vista (Level 200)

Wednesday, July 25, 2007 9:30 A.M.-11:00 A.M. Pacific Time

TechNet Webcast: Technical Overview of Forefront Security for Exchange Server (Level 200)

Wednesday, July 25, 2007 1:00 P.M.-2:30 P.M. Pacific Time

On-Demand Security Webcasts

http://www.microsoft.com/events/security/ondemand.mspx

A.O.B

Learn Security On the Job http://go.microsoft.com/?linkid=6951862

Learning Paths for Security - Microsoft Training References and Resources http://go.microsoft.com/?linkid=6951863

Additional Security Resources

Security Help and Support for IT Professionals http://go.microsoft.com/?linkid=6951893

TechNet Troubleshooting and Support Page  http://go.microsoft.com/?linkid=6951894

Microsoft Security Glossary http://go.microsoft.com/?linkid=6951895

TechNet Security Center http://go.microsoft.com/?linkid=6951896

MSDN Security Developer Center http://go.microsoft.com/?linkid=6951897

Midsize Business Security Center http://go.microsoft.com/?linkid=6951898

Sign-Up for the Microsoft Security Notification Service http://go.microsoft.com/?linkid=6951899

Security Bulletin Search Page http://go.microsoft.com/?linkid=6951900

Home Users: Protect Your PC http://go.microsoft.com/?linkid=6951901

MCSE/MCSA: Security Certifications http://go.microsoft.com/?linkid=6951902

Subscribe to TechNet http://go.microsoft.com/?linkid=6951903

Register for TechNet Flash IT Newsletter http://go.microsoft.com/?linkid=6951904

Subscribe to MSDN http://go.microsoft.com/?linkid=6951905