Technical RollUp : Security

November 2009 - Technical Rollup Mail - Security

conuktrm — Sun, 01 Nov 2009 00:00:00 GMT

News

Securing the Microsoft Cloud Infrastructure http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12679063&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

By building on the same security principles used to manage risks to Microsoft software development and operating environments, the Online Services Security and Compliance (OSSC) team at Microsoft has created an online Information Security Program—one that results in continuous improvements to security for the Microsoft cloud computing environment. Find out what cloud computing at Microsoft means today.

Government Requirements for a Secure Cloud http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12679064&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Learn about the U.S. Government’s vision for cloud computing, beginning with Apps.gov, an online marketplace where federal agencies can find and purchase cloud-based IT services.

Updated Payment Card Industry Data Security Standard Compliance Planning Guide Now Available http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12679065&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Learn how to meet Payment Card Industry Data Security Standard (PCI DSS) requirements using standard Microsoft products and technologies.

Filtering (Obfuscating) Sensitive Text in SQL Server http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12594584&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Download Data Protection Manager 2010 Beta http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12667775&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

A key enhancement in the Data Protection Manager (DPM) 2010 beta is that it protects virtual machines deployed on Windows Server 2008 R2 using Cluster Shared Volumes clusters as well as stand-alone Hyper-V servers and Windows Server 2008 Hyper-V clusters. Plus, the DPM 2010 laptop feature is completely rebuilt and offers an optimised experience for DPM administrators as well as the laptop user.

Microsoft Security Bulletin Summary for October, 2009

http://www.microsoft.com/technet/security/bulletin/ms09-oct.mspx

Microsoft Product Lifecycle Information

Find information about your particular products on the Microsoft Product Lifecycle http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12355452&s1=68628015-2ccc-cbc7-31b9-0e76c3415474 Web site.

See a list of supported service packs http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12355453&s1=68628015-2ccc-cbc7-31b9-0e76c3415474: Microsoft provides free software updates for security and non-security issues for all supported service packs

Security Bulletin Overview for October 2009

Microsoft Security Response Center (MSRC) Blog Post http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12679074&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Windows Media Video (WMV) http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12679075&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Windows Media Audio (WMA) http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12679076&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

iPod Video (MP4) http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12679077&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

MP3 Audio http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12679078&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

High Quality WMV (2.5 Mbps) http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12679079&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Zune Video (WMV) http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12679080&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Forefront Edge Security

Forefront Threat Management Gateway 2010 Release Candidate Now Available

Microsoft Forefront Threat Management Gateway 2010 (TMG) allows employees to safely and productively use the Internet for business without worrying about malware and other threats. It provides multiple layers of continuously updated protections – including URL filtering, antimalware inspection, intrusion prevention, application- and network-layer firewall, and HTTP/HTTPS inspection - that are integrated into a unified, easy to manage gateway, reducing the cost and complexity of Web security.

http://technet.microsoft.com/evalcenter/ee423778.aspx

Forefront TMG and ISA Server

Forefront Edge Security TechCenter

http://technet.microsoft.com/en-gb/forefront/edgesecurity/default.aspx

Please note that if you have feedback on documentation or wish to request new documents - email isadocs@microsoft.com

Forefront Edge Security Community

http://technet.microsoft.com/en-gb/forefront/edgesecurity/bb687298.aspx

Forefront TMG (ISA Server) Product Team Blog

The ISA Server Product Team Blog (http://blogs.technet.com/isablog/) is updated on a regular basis. Latest entries include:

Network Load Balancing (NLB) configuration settings in Forefront TMG: to clear or not to clear?

http://blogs.technet.com/isablog/archive/2009/09/29/network-load-balancing-nlb-configuration-settings-in-forefront-tmg-to-clear-or-not-to-clear.aspx

Forefront TMG introduces the Preparation Tool to make setup easier

http://blogs.technet.com/isablog/archive/2009/09/30/forefront-tmg-introduces-the-preparation-tool-to-make-setup-easier.aspx

Forefront TMG - Dynamic GAPA Engine Updates

http://blogs.technet.com/isablog/archive/2009/10/01/forefront-tmg-dynamic-gapa-engine-updates.aspx

Introducing the Forefront Experts Blog

http://blogs.technet.com/isablog/archive/2009/10/05/introducing-the-forefront-experts-blog.aspx

Mainstream Support Ending for ISA Server 2004 Standard Edition SP3

http://blogs.technet.com/isablog/archive/2009/10/05/mainstream-support-ending-for-isa-server-2004-standard-edition-sp3.aspx

MRS Feedback and Error Reporting Portal (beta) is live

http://blogs.technet.com/isablog/archive/2009/10/07/mrs-feedback-and-error-reporting-portal-beta-is-live.aspx

Forefront Threat Management Gateway 2010 Release Candidate Now Available

http://blogs.technet.com/isablog/archive/2009/10/11/forefront-threat-management-gateway-2010-release-candidate-now-available.aspx

Problems with user sets in cross forest scenarios

http://blogs.technet.com/isablog/archive/2009/10/14/problems-with-user-sets-in-cross-forest-scenarios.aspx

The ISP Redundancy Feature of Forefront TMG

http://blogs.technet.com/isablog/archive/2009/10/14/the-isp-redundancy-feature-of-forefront-tmg.aspx

Understanding HTTP logging in Microsoft Forefront TMG

http://blogs.technet.com/isablog/archive/2009/10/15/understanding-http-logging-in-microsoft-forefront-tmg.aspx

Network Inspection System (NIS) in Forefront TMG Release Candidate

http://blogs.technet.com/isablog/archive/2009/10/18/network-inspection-system-nis-in-forefront-tmg-release-candidate.aspx

Common Problems while Implementing HTTPS Inspection on Forefront TMG 2010 RC

http://blogs.technet.com/isablog/archive/2009/10/19/common-problems-while-implementing-https-inspection-on-forefront-tmg-2010-rc.aspx

Forefront TMG is SIP-aware

http://blogs.technet.com/isablog/archive/2009/10/21/forefront-tmg-is-sip-aware.aspx

TMG Client introduces automatic detection using Active Directory

http://blogs.technet.com/isablog/archive/2009/10/23/tmg-client-introduces-automatic-detection-using-active-directory.aspx

Error 500 “Not Supported” while browsing Internet through ISA Server 2006

http://blogs.technet.com/isablog/archive/2009/10/25/error-500-not-supported-while-browsing-internet-through-isa-server-2006.aspx

Forefront TMG and BranchCache: Which should I deploy in my organization?

http://blogs.technet.com/isablog/archive/2009/10/26/forefront-tmg-and-branchcache-which-should-i-deploy-in-my-organization.aspx

Forefront Unified Access Gateway & Intelligent Application Gateway 2007

Intelligent Application Gateway 2007 Technical Resources

http://technet.microsoft.com/en-gb/forefront/edgesecurity/bb687299.aspx

Forefront Edge Security Community

http://technet.microsoft.com/en-gb/forefront/edgesecurity/bb687298.aspx

Forefront Unified Access Gateway Product Team Blog

The UAG Product Team Blog (http://blogs.technet.com/edgeaccessblog) is updated on a regular basis. Latest entries include:

Beta 2 Configuration Migration to RC0 - It’s Pretty Simple

http://blogs.technet.com/edgeaccessblog/archive/2009/10/06/beta-2-configuration-migration-to-rc0-it-s-pretty-simple.aspx

Authenticating Exchange Mail Applications using UAG RC0

http://blogs.technet.com/edgeaccessblog/archive/2009/10/12/authenticating-exchange-mail-applications-using-uag-rc0.aspx

Deep dive into UAG DirectAccess (IPv6 and DirectAccess)

http://blogs.technet.com/edgeaccessblog/archive/2009/10/13/deep-dive-into-uag-directaccess-ipv6-and-directaccess.aspx

Insufficient Disk Space Error on e-Gap 3.6 version installation

http://blogs.technet.com/edgeaccessblog/archive/2009/10/15/insufficient-disk-space-error-on-e-gap-3-6-version-installation.aspx

Deep dive into UAG DirectAccess (Certificates)

http://blogs.technet.com/edgeaccessblog/archive/2009/10/27/deep-dive-into-uag-directaccess-certificates.aspx

Documents

BinScope Binary Analyzer http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12679066&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

This Microsoft verification tool analyzes binaries on a project-wide level to ensure that they have been built in compliance with Microsoft Security Development Lifecycle (SDL) requirements and recommendations.

MiniFuzz File Fuzzer http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12679067&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

MiniFuzz is a simple fuzzer designed to ease adoption of fuzz testing by nonsecurity people who are unfamiliar with file fuzzing tools or have never used them in their current software development processes.

Security Tip of the Month: Using BinScope Binary Analyzer to Improve Code Security http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12679068&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

As software becomes more vulnerable to attacks, it is important that your team is equipped with tools that effectively help them write more secure code. Learn how to use BinScope to quickly and easily verify that your code complies with the requirements of the Microsoft SDL.

Channel 9 Video: Developing and Deploying Your First Windows Azure Service http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12679069&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Take a tour of the capabilities of the Microsoft cloud platform by building and running a simple service using the platform SDK. This demo-heavy video highlights some of the features of the platform including service management, storage, and an integrated developer experience.

Windows Azure Blob: Programming Blob Storage http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12679070&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Windows Azure Storage provides durable, scalable, available, secure, and performance-efficient storage services for the cloud, and it does this through familiar and easy-to-use programming interfaces. Windows Azure Blob provides a simple interface for storing named files along with metadata for a file. Learn about the Windows Azure Blob programming interface and the advanced blob concepts.

How Do I: Use Smart Encryption Techniques for Cloud Apps? http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12679071&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Get familiar with the encryption algorithms and practices used to create cryptographic schemes for your cloud applications. Learn more about symmetric and asymmetric encryption algorithms, the SHA256 hash encryption algorithms, and how to implement these in a simple application.

Windows Azure Platform Training Kit - October Update http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12679072&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

This comprehensive set of technical content includes hands-on labs, presentations, and demos designed to help you learn how to use and develop for the Windows Azure platform including Windows Azure, SQL Azure, and .NET Services.

Design Considerations for Cloud Computing: Securing the .NET Service Bus http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12679073&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Explore ways to secure the .NET Services Bus and learn about helper classes and utilities to automate many of the details.

Downloads

2007 Office system (SP2) Administrative Template files (ADM, ADMX, ADML) and Office Customization Tool

This download includes updated Group Policy Administrative Template and Office Customization Tool OPA files; an updated Office Customization Tool; and ADMX and ADML versions of the Administrative Template files. This update assumes that you have updated your 2007 Office System applications with the 2007 Office System Service Pack 2 (SP2).

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=73d955c0-da87-4bc2-bbf6-260e700519a8

Update for Root Certificates [September 2009] (KB931125)

This item updates the list of root certificates on your computer to the list that is accepted by Microsoft as part of the Microsoft Root Certificate Program.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=c14f8940-71b7-41e3-8749-a00e01e22f17

Microsoft Forefront Codename "Stirling" Beta Privacy Statement

This document describes the privacy policy for Microsoft® Forefront Client Security.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=d34c6d9c-a555-4432-bb32-af21f5a6feab

MAR PC Enforcement Messaging QA

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=ebae76f2-deb9-4277-9427-3b73201c706c

MAR PC Products Settlement

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=f3a26af7-6ad0-4b1b-9cc6-ee0214f19ada

Antigen 8.1 Privacy Statement

This document describes the privacy policy for the 8.1 release of Antigen

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=c5b708ec-68c5-468b-9877-f3919c831078

Forefront Unified Access Gateway (UAG) RC0

Microsoft Forefront Unified Access Gateway (UAG) is a secure application gateway, to manage, control, and optimize remote access for managed and non-managed endpoints, to corporate applications and resources. Forefront UAG RC0 provides a number of new features, including support for migration from Forefront UAG Beta 2.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=a3f5729a-3989-4f60-980f-1b87dd198988

Forefront™ Identity Manager 2010 Release Candidate 1

This download contains the Release Candidate 1 (RC1) version of Microsoft® Forefront™ Identity Manager (FIM) 2010.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=4bb3f16b-27f8-4c1d-922f-2c7b522d9ad6

Forefront™ Identity Manager (FIM) 2010 Datasheet

Two-page overview of FIM 2010

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=1c4214cb-07ab-4fd0-b29e-f226f41244b3

Windows Live ID Sign-in Assistant 6.5

The Windows Live ID Sign-in Assistant 6.5 installs the Windows Live ID online provider for Windows 7. This provider enables linking a Windows Live ID to a Windows 7 user account.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=5e193cfe-f45a-4e29-b6b7-984e7802c639

How to Protect Microsoft Dynamics AX 2009 with System Center Data Protection Manager 2007 sp1

This whitepaper discusses why and how to protect Microsoft Dynamics AX with Microsoft System Center Data Protection Manager 2007 sp1

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=8df9233b-5278-4a3d-837e-780113c6ccc6

How to Protect Essential Business Server (EBS) 2008 and Small Business Server (SBS) 2008 with System Center Data Protection Manager 2007 sp1

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=e2768b94-418e-44e8-a6b5-26dfa83ae157

How to protect SAP running on SQL Server with System Center Data Protection Manager 2007 sp1

This whitepaper discusses why and how to protect SAP environments running on Microsoft SQL Server with Microsoft System Center Data Protection Manager 2007 sp1

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=aa704f3e-aee5-418d-a63b-0e467b25b58f

Getting Started with DPM 2010 Client Computer Protection

Overview of DPM 2010 client computer protection - including UI and features

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=b880c90b-60cc-4087-b5e5-308e4ac8c78f

Forefront Online Security for Exchange (FOSE) 9.1 Product Documents

Product documents for FOSE 9.1 include the following: New Features Guide, Administration Center User Guide, Directory Synchronization Tool Administration Guide, Customer Quick Cards and Forefront Online Security for Exchange Filtering Service Launch and Best Practices

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=9c34eba6-059b-455a-a44f-96b1b06b4b21

Internet Safety Education - Model Legislation

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=ab7581a3-7744-4d62-b093-f7e92c101d58

Payment Card Industry Data Security Standard Compliance Planning Guide

The Payment Card Industry Data Security Standard Compliance Planning Guide is designed to help organizations meet Payment Card Industry Data Security Standard (PCI DSS) requirements.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=d8320df1-d0d0-469f-a6fc-b53987bd74c2

Microsoft Forefront Protection 2010 for SharePoint Beta 2

Microsoft Forefront Protection 2010 for SharePoint prevents users from uploading or downloading documents containing malware, out-policy content, or sensitive information to SharePoint libraries.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=01bfa7c6-84be-478f-8b78-6875ad71a98b

Windows 2000 Threat Mitigation Guide

The Windows 2000 Threat Mitigation Guide is designed to provide you with the best information available to assess and counter security risks specific to computers running Windows 2000 Professional Service Pack 4 (SP4) or later in your environment.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=3452628c-e559-43cc-89b6-7bd122caf143

Microsoft Threat Management Gateway Privacy Statement

This document describes the privacy policy for Microsoft® Forefront Threat Management Gateway 2010

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=625d16c4-2def-4c73-9fdb-9858eef015d6

Forefront Threat Management Gateway 2010 Release Candidate

Forefront Threat Management Gateway 2010 allows employees to safely and productively use the Internet without worrying about malware and other threats. Forefront Threat Management Gateway 2010 is available for download in both Standard Edition and Enterprise Edition.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=e05aecbc-d0eb-4e0f-a5db-8f236995bccd

Update for Windows Mail Junk E-mail Filter [October 2009] (KB905866)

Install this update for Windows Mail to revise the definition files that are used to detect e-mail messages that should be considered junk e-mail or that may contain phishing content.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=aa029fde-f341-44fc-8b85-0c6f3d3c2d69

Update for Windows Mail Junk E-mail Filter for x64-based Systems [October 2009] (KB905866)

Install this update for Windows Mail to revise the definition files that are used to detect e-mail messages that should be considered junk e-mail or that may contain phishing content.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=749e10cd-f40c-4f94-8e38-d4221ded7652

Microsoft® Windows® Malicious Software Removal Tool (KB890830)

This tool checks your computer for infection by specific, prevalent malicious software (including Blaster, Sasser, and Mydoom) and helps to remove the infection if it is found. Microsoft will release an updated version of this tool on the second Tuesday of each month.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=ad724ae0-e72d-4f54-9ab3-75b8eb148356

Microsoft® Windows® Malicious Software Removal Tool (KB890830) x64

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=585d2bde-367f-495e-94e7-6349f4effc74

Extended Security Update Inventory Tool

The Extended Security Update Inventory Tool is used to detect security bulletins not covered by MBSA including MS04-028, February 2005 bulletins, and future security bulletins that are exceptions to MBSA.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=2c93da1d-48a0-4e5c-991f-87e08954f61b

Exchange Hosted Archive Service Description

Microsoft Exchange Hosted Archive (EHA) provides a centralized, easily accessible e-mail and IM repository to assist organizations manage retention, compliance, e-discovery, and regulatory requirements. This whitepaper describes the services and features that are included in Exchange Hosted Archive.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=f67bf2f7-4dc4-4f2d-bb4f-8a447ab89051

Forefront Security for Office Communications Server Management Pack for System Center Operations Manager 2007

Forefront Security for Office Communications Server Management Pack provides real-time insight into the health and performance of key Forefront Security for Office Communications Server (Version 10) components and services.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=f0618e3e-fee2-4415-85d2-5d6c1bba0832

Events/WebCasts

Microsoft SDL – Developer Starter Kit http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12486214&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Security Awareness Materials http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12486215&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Guidance, samples, and templates for creating a security-awareness program in your organization.

Learn Security On the Job http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12486216&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Learning Paths for Security - Microsoft Training References and Resources http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12486217&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Security Webcast Calendar http://go.microsoft.com/fwlink/?LinkId=37910

Find security webcasts listed in an easy-to-use calendar format.

Upcoming Security Webcasts

http://www.microsoft.com/events/security/upcoming.mspx

Register for the following Webcasts on the link above

TechNet Webcast: Microsoft Information Protection Solution (Level 200)

Tuesday, November 03, 2009 1:00 P.M.-2:00 P.M. Pacific Time

TechNet Webcast: Microsoft Secure Messaging Solution (Level 200)

Thursday, November 05, 2009 1:00 P.M.-2:00 P.M. Pacific Time

TechNet Webcast: Microsoft Secure Endpoint Solution (Level 200)

Tuesday, November 10, 2009 12:00 P.M.-1:00 P.M. Pacific Time

TechNet Webcast: Information About Microsoft November Security Bulletins (Level 200)

Wednesday, November 11, 2009 11:00 A.M.-12:30 P.M. Pacific Time

MSDN Webcast: Real-World Solutions: Project Server Security in SQL Server Reporting Services (Level 300)Tuesday, November 24, 2009 1:00 P.M.-2:00 P.M. Pacific Time

Momentum Webcast: Business-Ready Security (Level 100)

Monday, November 30, 2009 11:00 A.M.-12:00 P.M. Pacific Time

On-Demand Security Webcasts

http://www.microsoft.com/events/security/ondemand.mspx

Visit TechNet Spotlight: www.microsoft.com/technetspotlight

Video on Demand, Video Downloads, PowerPoint Presentations, Audio and more

New or updated KB’s

Microsoft Forefront Threat Management Gateway, Medium Business Edition & Windows Essential Business Server 2008 Standard

Forefront Threat Management Gateway, Medium Business Edition does not translate URL-encoded links

http://support.microsoft.com/kb/973827

Forefront Threat Management Gateway, Medium Business Edition crashes with event ID 14057 when a request is sent to the Web content that is expired in the Threat Management Gateway cache

http://support.microsoft.com/kb/973516

Intelligent Application Gateway 2007

Description of Update 2 for Intelligent Application Gateway 2007 Service Pack 2

http://support.microsoft.com/kb/975491

October 2009 – Technology Rollup Mail - Security

conuktrm — Thu, 01 Oct 2009 02:01:00 GMT

News

Introducing the Microsoft Security Update Guide http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12486253&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Better understand how to use Microsoft security release information, processes, tools, and communications to help manage organizational risk and develop a repeatable, effective deployment mechanism for security updates. In this guide, you will find a convenient glossary of terms, an overview of the Microsoft Security Bulletin process, and a stage-by-stage review of Microsoft Security Updates.

Download the Microsoft Forefront Protection 2010 for Exchange Server Release Candidate http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12486254&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

This next-generation version of Forefront Security for Exchange Server provides fast and effective detection of malware and spam, blocks out-of-policy content, and integrates with Microsoft Forefront Online Protection for Exchange to offer the defense-in-depth benefits of hosted and on-premises filtering in a single solution.

Windows Server Update Services 3.0 SP2 RTM Now Available http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12486255&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

WSUS 3.0 SP2 supports the latest operating systems, including Windows Server 2008 R2 and Windows 7 clients. WSUS 3.0 SP2 is more robust and features significant improvements in client performance, reliability, and increased server usability.

Download a 90-Day Trial of Windows 7 Enterprise http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12486256&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Brought to you by the Springboard Series, a 90-day trial is now available to help you test and evaluate the RTM version of Windows 7 Enterprise. Designed specifically for IT professionals, this 90-day trial is offered in English, French, German, Japanese, and Spanish. (Note: If you already have Windows 7 through MSDN, TechNet, or Software Assurance, you do not need to download this trial.)

Microsoft Security Essentials provides real-time protection for your home PC that guards against viruses, spyware, and other malicious software. http://www.microsoft.com/security_essentials

Microsoft Security Essentials is a free* download from Microsoft that is simple to install, easy to use, and always kept up to date so you can be assured your PC is protected by the latest technology. It’s easy to tell if your PC is secure — when you’re green, you’re good. It’s that simple. *Your PC must run genuine Windows to install Microsoft Security Essentials.

Windows Server 2008: Granular Password Setting http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12444171&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Microsoft Security Bulletin Summary for September, 2009

http://www.microsoft.com/technet/security/bulletin/ms09-sep.mspx

Microsoft Product Lifecycle Information

Forefront Edge Security

Download Microsoft Forefront Unified Access Gateway Release Candidate 0 today
Forefront Unified Access Gateway (UAG) provides an easy and secure remote access solution with a focus on application intelligence and granular access control. Forefront UAG is the one solution to fit all of your remote access needs, as it provides centralized management and policy control across all users, devices, and network resources. When you download the latest software, you're automatically registered to access valuable resources assembled in one convenient location.

http://technet.microsoft.com/evalcenter/dd183100.aspx

Forefront TMG and ISA Server

Forefront Edge Security TechCenter

http://technet.microsoft.com/en-gb/forefront/edgesecurity/default.aspx

Please note that if you have feedback on documentation or wish to request new documents - email isadocs@microsoft.com

Forefront Edge Security Community

http://technet.microsoft.com/en-gb/forefront/edgesecurity/bb687298.aspx

Forefront TMG (ISA Server) Product Team Blog

The ISA Server Product Team Blog (http://blogs.technet.com/isablog/) is updated on a regular basis. Latest entries include:

Time Matters - When ISA Server is affected by Windows Time settings

http://blogs.technet.com/isablog/archive/2009/09/03/time-matters-when-isa-server-is-affected-by-windows-time-settings.aspx

Web Publishing Test Button and KCD in TMG

http://blogs.technet.com/isablog/archive/2009/09/07/web-publishing-test-button-and-kcd-in-tmg.aspx

Change Tracking in TMG

http://blogs.technet.com/isablog/archive/2009/09/07/change-tracking-in-tmg.aspx

TMG Network Inspection System (NIS) – “Attention Required” Feature

http://blogs.technet.com/isablog/archive/2009/09/07/tmg-network-inspection-system-nis-attention-required-feature.aspx

Behavioral Change on IE7 can affect Outbound access through ISA Server 2006 that is using Redirect on a Deny Rule

http://blogs.technet.com/isablog/archive/2009/09/09/behavioral-change-on-ie7-can-affect-outbound-access-through-isa-server-2006-that-is-using-redirect-on-a-deny-rule.aspx

Forefront TMG Network Inspection System Gets Its First 0-Day Signature Release

http://blogs.technet.com/isablog/archive/2009/09/10/forefront-tmg-network-inspection-system-gets-its-first-0-day-signature-release.aspx

The Road to RC Needs Telemetry

http://blogs.technet.com/isablog/archive/2009/09/14/the-road-to-rc-needs-telemetry.aspx

ISA CSS and Arrays in a Nutshell

http://blogs.technet.com/isablog/archive/2009/09/15/isa-css-and-arrays-in-a-nutshell.aspx

Forefront TMG User Experience: UI Improvements

http://blogs.technet.com/isablog/archive/2009/09/22/forefront-tmg-user-experience-ui-improvements.aspx

Forefront TMG and Windows® 7 DirectAccess

http://blogs.technet.com/isablog/archive/2009/09/23/forefront-tmg-and-windows-7-directaccess.aspx

Forefront TMG User Experience: The Navigation Tree

http://blogs.technet.com/isablog/archive/2009/09/24/forefront-tmg-user-experience-the-navigation-tree.aspx

The Momentum is Building for TMG RTM

http://blogs.technet.com/isablog/archive/2009/09/27/the-momentum-is-building-for-tmg-rtm.aspx

Forefront Unified Access Gateway & Intelligent Application Gateway 2007

Intelligent Application Gateway 2007 Technical Resources

http://technet.microsoft.com/en-gb/forefront/edgesecurity/bb687299.aspx

Forefront Edge Security Community

http://technet.microsoft.com/en-gb/forefront/edgesecurity/bb687298.aspx

Forefront Unified Access Gateway Product Team Blog

The UAG Product Team Blog (http://blogs.technet.com/edgeaccessblog) is updated on a regular basis. Latest entries include:

Deep Dive Into DirectAccess – NAT64 and DNS64 In Action

http://blogs.technet.com/edgeaccessblog/archive/2009/09/08/deep-dive-into-directaccess-nat64-and-dns64-in-action.aspx

Forefront UAG RC0 is on its way…

http://blogs.technet.com/edgeaccessblog/archive/2009/09/22/forefront-uag-rc0-is-on-its-way.aspx

Forefront UAG Release Candidate 0 (RC0) is here!

http://blogs.technet.com/edgeaccessblog/archive/2009/09/25/forefront-uag-release-candidate-0-rc0-is-here.aspx

Documents

Security Compliance Management Toolkit Series http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12486257&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

This toolkit series provides an end-to-end solution to help your organization plan, deploy, and monitor security baselines of Windows operating systems and 2007 Microsoft Office applications.

How to Use the Microsoft Security Response Center Exploitability Index http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12486258&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

The Microsoft Exploitability Index <http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12486193&s1=68628015-2ccc-cbc7-31b9-0e76c3415474> makes an assessment on the likelihood that code will be released that exploits the vulnerability or vulnerabilities addressed in a security bulletin within the first 30 days after that bulletin’s release. Learn how to take advantage of this tool in your organization.

Implementing Patch Management to Improve Web Application Security http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12486259&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Learn how to keep single or multiple servers up to date, and improve your knowledge of the processes required to create a sound patch management system.

Deploying FCS Definition Updates with a Shared System Center Configuration Manager WSUS Infrastructure http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12486260&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Microsoft Forefront Client Security uses the WSUS engine to deploy definition updates to all the clients that Forefront Client Security manages. Microsoft System Center Configuration Manager 2007 uses WSUS to provide metadata to the scanning engine on Configuration Manager clients that facilitate software updates. This document provides guidance on how to configure Forefront Client Security definition updates to use an existing Configuration Manager WSUS infrastructure while ensuring that Configuration Manager and Forefront Client Security function properly and work together in harmony.

How Do I: Change Default Work Items in the SDL Process Template? http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12486261&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

The Security Development Lifecycle (SDL) Process Template was developed to ease the integration of security into the software development process. This four-minute video will show you how to modify the default work items that are created in your new SDL Process Template team project, and how to modify the default work item types, such as Task or Bug.

Downloads

KMS Setup in Windows 7

Learn how to set up the KMS host on Windows® 7 and Windows Server 2008 R2 computer, activate KMS clients with the KMS host, and review activation status.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=fda49c1f-475e-42d0-92ae-6f7edb802f3e

Troubleshooting activation

Understand volume activation in windows vista and windows server 2008, learn how to troubleshoot volume activation.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=78fcf22e-b243-4ee1-bc42-9110feae8b82

Best Practices in Planning for and Deploying Volume Activation

View this webcast to learn about the best practices for integrating Volume Activation into your enterprise deployment and management efforts. Read about lessons learned from dealing with license activation in a variety of environments, including networked, isolated, roaming, branch office, development, and test.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=e8d137dc-2fdb-4bf9-a3b9-fc079e4b4609

Understanding Activation and Validation in Windows 7 and Windows Server 2008 R2

Learn how volume activation supports new types of license keys and several new modes of activation for customers in Windows 7 and Windows Server 2008 R2.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=e0525726-fe17-45bf-8b3a-04c30fcfdd6c

VAMT 1.2 Reporting

Using VAMT to customize reports, troubleshoot and help manage volume activated systems

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=7871cfbc-ddbd-4ad9-8616-c3ca3a9c7b46

Top 5 Product Key Activation Challenges IT Pro Encountered and Solved

Windows Vista® and Windows Server® 2008 include some significant changes relating to product activation over Windows® XP and Windows Server 2003. These changes, while simple, often caused concerns and operational challenges for IT Pros in deploying Windows.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=8300a9c7-48c0-4ca8-9f1e-91d8ce02abd8

VAMT 1.2 MAK Activation

MAK independent proxy and Confirmation ID activation using VAMT

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=2b6c36ef-06db-4dd5-a216-5ec057e29fd6

Top 10 Things You Should Know About Genuine Windows

Microsoft is educating customers and partners on Genuine software, in effort to protect them from counterfeit and pirated software. Are you familiar with the concepts of 'Genuine Windows' or 'Genuine Microsoft Software'? Learn more about what it means to become 'Genuine' and get an overview of product activation, validation, licensing and compliance.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=f6990722-9943-459b-9a73-aea9369251b6

VAMT 1.2 Overview

VAMT 1.2 features and capabilities

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=b66798b8-6b4e-45f6-a16c-0a8c1e60f0c6

VAMT 1.2 Firewall Setup

Configuring Windows client firewall to allow volume activation management tool (VAMT) access

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=c73fe063-c9d7-4bfe-aab1-ef475834610f

Volume Activation Operations Guide Windows 7

Get operational guidance around management tools, troubleshooting, recovering from unlicensed states, resolving non-genuine software issues, and managing each method of Volume Activation.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=83279f06-79b0-404e-addd-2473567c126e

Volume Activation in Disconnected Environment Guide Windows 7

This guide is for IT pros maintaining the Windows® 7 and Windows Server® 2008 R2 operating systems in disconnected environments. It describes activation techniques for operating systems in environments with no Internet connectivity

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=6e6c2553-e3da-4bd4-bef3-ffcd80e7cc56

Notifications Experience in Windows 7 for End Users

Learn about Windows activation notifications experience in Windows 7 and Windows Server 2008 R2 for enterprise customers and ways to resolve them.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=26617560-7d12-4f7e-a7b9-a78c3e582d18

Windows 7 Improvements in Volume Activation Datasheet

Learn about the latest improvements in volume activation in Windows ® 7, including enhanced user experience, improved efficiency and activation process as part of deployment.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=d3956d05-8666-42db-87a5-6883953059a1

Product Activation in Development Environment in Windows 7

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=737aa964-f6f5-43bd-94e7-4d9cae674537

Top 7 Things You Need to Know About Activation BDM

Two page overview guide on top 7 things you need to know about volume activation in Windows 7 for business decision makers.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=e096ef67-752e-40df-8a26-766a70d2b5cb

Activation Technologies in Windows 7 Overview Guide

This document outlines the activation and validation experience in Windows 7 and provides more information for customers interested in learning about activation, validation, and genuine Windows.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=7c7ffab9-c63b-4ae2-8315-937d2b60d2c5

Volume Activation Planning Guide Windows 7

Learn how incorporate activation in your deployment plans for Windows 7 and Windows Server 2008 R2—as well as Windows Vista and Windows Server 2008.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=730dc152-bf13-4cce-80a2-c3bff60b4cbd

Volume Activation Changes for Service Pack 2 for Windows Vista and Windows Server 2008

This document summarizes the changes to Volume Activation implemented in Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2 (SP2).

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=2bcbeaa2-bc7a-41bd-a3fd-5f12fd6c5dc1

Volume Activation Deployment Guide Windows 7

Use this guide to systemically deploy Volume Activation, including establishing a KMS host or using MAK within your environment.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=bf11bbf3-5e2e-4f6b-aa39-965af07751c1

Microsoft Hosted Volume Activation Guide in Windows 7

Microsoft® Volume Activation helps Volume Licensing customers automate and manage the activation process of Volume Licensing media. Volume Licensing customers and special program subscribers such as the Microsoft Partner Program, MSDN®, and Microsoft TechNet are eligible for Volume Licensing software and media.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=ad86d693-d4fb-4d5a-af1a-4199fd31b3a7

Fundamentals of Volume Activation in Windows 7

Watch this 5-minute demo to get insight into the Volume Activation process while deploying Windows 7 and Windows Server 2008.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=b7ddf8ba-2f36-43f3-b153-8ed786fcb3c7

Activating with MAK in Windows 7

Learn how to deploy Windows using a Multiple Activation Key (MAK) process.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=9bfb69ab-d5f7-4fa1-be6c-b81c550db45d

Activating with KMS in Windows 7

Learn how to deploy Windows with a Key Management Service (KMS) process.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=be688342-4f8a-4a15-bfa6-33b0d73c6a59

IT Pro at Home Demonstration: Security On Your Terms

Part of the Springboard Series IT Pro at Home: Tips and Tricks series, this screencast demonstrates the security changes in Windows 7.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=cc112f49-4afc-4447-b2be-ff0121018c36

Microsoft Online Services Sign In

Use this Sign In application to access Microsoft Online Services.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=5c2ca866-4107-4ae5-98d5-76bf1b18ff87

Cross-forest Certificate Enrollment with Windows Server 2008 R2.doc

This paper explains how cross-forest certificate enrollment works. It also provides deployment guidance for cross-forest certificate enrollment in new and existing Active Directory Certificate Services (AD CS) deployments.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=d408be72-7c74-4b19-a2de-fa11858c30b2

Security on Your Terms Walkthrough

Provides a brief tour of new security features in Windows 7.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=def39f0f-695f-4c27-b912-15c2d5a0367f

Security Frequently Asked Questions

Answers questions about security in Windows 7.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=cde8ceac-ccef-4d72-8dc7-fe8e39306e79

Security on Your Terms

Describes some of the new or changed security features in Windows 7.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=1bfd698a-0c45-4348-a80b-0ca02becf84b

Group Policy Settings References for Windows and Windows Server

These spreadsheets list the policy settings for computer and user configurations included in the Administrative template files delivered with the Windows operating systems specified. You can configure these policy settings when you edit Group Policy objects (GPOs).

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=18c90c80-8b0a-4906-a4f5-ff24cc2030fb

Update for Microsoft Office Outlook 2003 Junk Email Filter (KB973515)

This update provides the Junk E-mail Filter in Microsoft Office Outlook 2003 with a more current definition of which e-mail messages should be considered junk e-mail.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=63bf0d12-165b-4fee-ac96-9bad91ddb264

Update for Microsoft Office Outlook 2007 Junk Email Filter (KB973514)

This update provides the Junk E-mail Filter in Microsoft Office Outlook 2007 with a more current definition of which e-mail messages should be considered junk e-mail.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=1586dc82-3422-4801-874b-e6c38868945c

Feature Pack 1 for Windows Essential Business Server 2008 (KB973236)

This Feature Pack adds a feature that you can use to adjust the security settings in Forefront Threat Management Gateway (TMG) in Windows Essential Business Server (EBS). The feature helps you manage Forefront TMG and diagnose firewall issues.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=40274ca7-9f0d-4152-b090-3980442e7222

Geneva Interop Whitepapers

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=9eb1f3c7-84da-40eb-b9aa-44724c98e026

Microsoft Forefront Security for Office Communications Server Best Practices Analyzer

The Forefront Security for Office Communications Server (FSOCS) Best Practices Analyzer compares your existing FSOCS deployment against recommended best practices to identify configuration setting changes that could help you improve FSOCS performance and malware detection rates.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=62f9fb8e-1f08-4a94-b21b-9cc7fe4550de

Microsoft® Forefront™ codename "Stirling" VHDs

An integrated security system that is easier to manage and control

Forefront codename “Stirling” is an integrated security suite. This download comes as pre-configured VHDs. This download enables you to evaluate Microsoft Forefront Codename "Stirling". It includes Forefront Client Security, Forefront Security for Exchange Server, Forefront Security for Sharepoint Server, The Central Management Server and Threat Management Gateway.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=d4c3410f-11f0-42b8-9da7-b826d243536b

Security Features in Microsoft Online Services

The Business Productivity Online Suite is a set of subscription-based enterprise software services hosted by Microsoft and sold with partners. The services operate within a complete ecosystem of features and capabilities designed to meet and in many cases to exceed the security and availability goals that you have for your business applications.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=5736aaac-994c-4410-b7ce-bdea505a3413

Update for Windows Mail Junk E-mail Filter [September 2009] (KB905866)

Install this update for Windows Mail to revise the definition files that are used to detect e-mail messages that should be considered junk e-mail or that may contain phishing content.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=aa029fde-f341-44fc-8b85-0c6f3d3c2d69

Update for Windows Mail Junk E-mail Filter for x64-based Systems [September 2009] (KB905866)

Install this update for Windows Mail to revise the definition files that are used to detect e-mail messages that should be considered junk e-mail or that may contain phishing content.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=749e10cd-f40c-4f94-8e38-d4221ded7652

Microsoft® Windows® Malicious Software Removal Tool (KB890830)

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=ad724ae0-e72d-4f54-9ab3-75b8eb148356

Microsoft® Windows® Malicious Software Removal Tool (KB890830) x64

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=585d2bde-367f-495e-94e7-6349f4effc74

September 2009 Security Release ISO Image

This DVD5 ISO image file contains the security updates for Windows released on Windows Update on September 8th, 2009.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=fab6b8f8-b766-4146-b86d-0953d19d95ab

Microsoft Global Security Showcase: Physical Security at Microsoft

Microsoft Global Security Showcase: Physical Security at Microsoft. Taking Advantage of Strategic IT Convergence. Technical White Paper

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=95384b9d-8ec0-4dfb-96a9-7a61c2f81888

Extended Security Update Inventory Tool

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=2c93da1d-48a0-4e5c-991f-87e08954f61b

Security and Authentication in Microsoft Dynamics CRM: The Microsoft Dynamics CRM Security Model

This white paper, The Microsoft Dynamics CRM Security Model, serves as the core architectural component of a larger "nuts and bolts" article on Security and Authentication in Microsoft Dynamics CRM 4.0.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=fb4bb16b-586f-4aae-aa4b-790023e95b61

Certificate Enrollment Web Services in Windows Server 2008 R2

This paper explains how certificate enrollment Web services work in Windows Server 2008 R2. It also provides deployment guidance for certificate enrollment Web services in new and existing Active Directory Certificate Services (AD CS) deployments.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=28b910f8-6374-48dd-a897-11fff62ab795

Forefront Online Security for Exchange (FOSE) 9.1 Product Documents

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=9c34eba6-059b-455a-a44f-96b1b06b4b21

Antigen 8.1 Privacy Statement

This document describes the privacy policy for the 8.1 release of Antigen

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=c5b708ec-68c5-468b-9877-f3919c831078

Microsoft Anti-Cross Site Scripting Library V3.1

AntiXSS 3.1 helps you to protect your current applications from cross-site scripting attacks, at the same time helping you to protect your legacy application with its Security Runtime Engine.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=051ee83c-5ccf-48ed-8463-02f56a6bfc09

Security Features in Microsoft Online Services

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=5736aaac-994c-4410-b7ce-bdea505a3413

Advanced Group Policy Management 2.5 Documents

These guides provide step-by-step guidance for installing Microsoft Advanced Group Policy Management (AGPM) 2.5 and managing Group Policy objects (GPOs) by using AGPM 2.5

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=ba69e774-f0d1-4b6d-be81-a8c5f27d1b8a

Advanced Group Policy Management 4.0 Documents

These guides provide an overview of Advanced Group Policy Management (AGPM) 4.0 and step-by-step guidance for installing AGPM 4.0, managing Group Policy objects (GPOs) by using AGPM 4.0, and planning and deploying AGPM 4.0.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=58fd6cda-0210-4da0-91d2-8c3cc2817df8

Advanced Group Policy Management 3.0 Documents

These guides provide step-by-step guidance for installing Advanced Group Policy Management (AGPM) 3.0, managing Group Policy objects (GPOs) by using AGPM 3.0, and planning and deploying AGPM 3

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=80bb67f2-864c-4f4c-9f0d-a118ef607f1a

MiniFuzz File Fuzzer

MiniFuzz is a very simple fuzzer designed to ease adoption of fuzz testing by non-security people who are unfamiliar with file fuzzing tools or have never used them in their current software development processes.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=b2307ca4-638f-4641-9946-dc0a5abe8513

BinScope Binary Analyzer

BinScope is a Microsoft verification tool that analyzes binaries on a project-wide level to ensure that they have been built in compliance with Microsoft’s Security Development Lifecycle (SDL) requirements and recommendations.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=90e6181c-5905-4799-826a-772eafd4440a

Whitepaper: Manual Integration of the SDL Process Template

This paper outlines the steps for manually extracting the key elements of the SDL Process Template and integrating them into an existing Team Project.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=639a3784-a6f4-4d47-9750-b79bd789ba58

BranchCache Security Guide

This document provides guidance to help organizations understand and manage the security of the Microsoft® BranchCache™ feature introduced in Microsoft Windows Server® 2008 R2 and Microsoft Windows® 7.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=449be4b1-5f87-47f1-945b-ccd4b196b34f

Microsoft Windows Key Management Service Management Pack for Operations Manager 2007

The KMS MP monitors core Key Management Service offered by Windows Server 2008 R2, Windows 7, Windows Server 2008, Windows Server 2003 and Vista

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=a330d876-c965-4433-afdf-7c61a9126fb3

Using the Autogen Annotator

Autogen is a patented technology uses to procedurally place default 3D objects throught a simulated world.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=30b16a77-1ce9-475e-8072-0748656e2513

Autogen Annotator Pictorial Reference

Autogen is a patented technology uses to procedurally place default 3D objects through a simulated world.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=0f6ab9ff-392f-46e4-a604-5a68078107bf

Active Directory Certificate Services Upgrade and Migration Guide for Windows Server 2008

This document discusses the planning and implementation of a Windows Server 2008 Active Directory Certificate Services (AD CS) upgrade and migration from an existing Windows public key infrastructure (PKI), including scenarios and step-by-step instruction.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=c70bd7cd-9f03-484b-8c4b-279bc29a3413

Events/WebCasts

Microsoft SDL – Developer Starter Kit http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12486214&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Security Awareness Materials http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12486215&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Guidance, samples, and templates for creating a security-awareness program in your organization.

Learn Security On the Job http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12486216&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Security Webcast Calendar http://go.microsoft.com/fwlink/?LinkId=37910

Find security webcasts listed in an easy-to-use calendar format.

Upcoming Security Webcasts

http://www.microsoft.com/events/security/upcoming.mspx

Register for the following Webcasts on the link above

TechNet Webcast: Design Considerations for Internal Public Key Infrastructures (Level 200)

Monday, October 05, 2009 10:00 A.M.-11:00 A.M. Pacific Time

TechNet Webcast: Connect Remotely Using Windows 7 Direct Access (Level 300)

Wednesday, October 07, 2009 10:00 A.M.-11:00 A.M. Pacific Time

TechNet Webcast: Announcing Data Protection Manager 2010 Beta (Level 300)

Thursday, October 08, 2009 9:00 A.M.-10:00 A.M. Pacific Time

IT Manager Webcast: Information Security Using HBI Information Classification and Automation (Level 200)

Thursday, October 08, 2009 11:00 A.M.-12:00 P.M. Pacific Time

TechNet Webcast: Microsoft Secure Endpoint Solution (Level 200)

Tuesday, October 13, 2009 12:00 P.M.-1:00 P.M. Pacific Time

TechNet Webcast: Information About Microsoft October Security Bulletins (Level 200)

Wednesday, October 14, 2009 11:00 A.M.-12:30 P.M. Pacific Time

TechNet Webcast: Microsoft Secure Collaboration Solution (Level 200)

Tuesday, October 27, 2009 1:00 P.M.-2:00 P.M. Pacific Time

On-Demand Security Webcasts

http://www.microsoft.com/events/security/ondemand.mspx

Visit TechNet Spotlight: www.microsoft.com/technetspotlight

Video on Demand, Video Downloads, PowerPoint Presentations, Audio and more

New or updated KB’s

Microsoft Internet Security and Acceleration Server

A memory leak occurs in the Wspsrv.exe process when you use the Negotiate (NTLM/Kerberos) delegation in ISA Server 2006

http://support.microsoft.com/kb/973731

Some Web servers do not recognize the "Accept-Encoding:gzip" header in the requests that are forwarded by ISA Server 2006

http://support.microsoft.com/kb/973732

ISA Server 2006 does not pass the last server cookie to the client computer when HTML form authentication is used in the Web-publishing rule

http://support.microsoft.com/kb/973737

Description of the ISA Server 2006 hotfix package: July 19, 2009

http://support.microsoft.com/kb/973738

ISA Server 2006 Management Console crashes when you click the Schedule tab of a firewall policy rule

http://support.microsoft.com/kb/973734

The users cannot change the password when they use ISA Server 2006 Forms-Based authentication in an active directory forest with multiple domain trees

http://support.microsoft.com/kb/974662

A user cannot send e-mail messages by using Outlook Web Access server that is published by ISA Server 2006 when the delegation is set to NTLM

http://support.microsoft.com/kb/974663

Description of the ISA Server 2006 hotfix package: August 16, 2009

http://support.microsoft.com/kb/974665

Forefront TMG and ISA Server

Blank page or page cannot be displayed when you view SSL sites through ISA Server or Microsoft Forefront Threat Management Gateway, Medium Business Edition

http://support.microsoft.com/kb/283284

September 2009 – Technical Rollup Mail – Security

conuktrm — Tue, 01 Sep 2009 02:01:00 GMT

News

TechNet Edge Video: Windows 7 Security Overview http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12348082&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

19 minutes

Paul Cooke discusses the core security features of Windows 7 and explores their usage scenarios. Businesses will benefit from enhancements that help protect sensitive information, that provide stronger protections against malware and that help secure anywhere access to corporate resources and data.

Security & Privacy Blogs: Latest Updates and Thoughts from Our Security Experts http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12348083&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Tap into the pool of security experience and knowledge from experts and peers throughout Microsoft and check out the latest information from our bloggers. Sort by keyword, follow by RSS, translate into a dozen languages, and share our findings and insights with your organization’s security team.

Protecting Your Data with Windows 7 BitLocker and BitLocker To Go (Level 300) http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12348084&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

In this webcast, we examine BitLocker enhancements and capabilities. We set up and configure Trusted Module Management personal identification numbers (PINs) using Windows Platform Trusted Module Management, and we configure startup key storage.

How Windows Server 2008 R2 Affects Your IT Infrastructure (Level 300) http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12348085&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

We will be covering many new features included in Windows Server 2008 R2 that improve the cost of ownership. We will be taking a closer look at specific technologies that will improve administration, data center, and branch office deployments.

Now Available! System Center Configuration Manager Extensions for SCAP http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12355498&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

With the System Center Configuration Manager Extensions for SCAP, Configuration Manager can consume Security Content Automation Protocol (SCAP) data streams, assess systems for compliance, and generate report results in SCAP format.

Introducing the Trustworthy Computing Security and Privacy Blog Aggregator http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12355499&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Stay up to date with Microsoft Trustworthy Computing’s top bloggers. Read posts in different languages, search entries by keyword, and much more.

A Safer Internet Through Information Sharing http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12355500&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

In this report, the Microsoft Security Response Center summarizes the progress on three security-related programs—the Microsoft Active Protections Program, the Microsoft Exploitability Index, and Microsoft Vulnerability Research—that have increased your access to more effective countermeasures and additional information to help you better evaluate risks.

Securing the Microsoft Cloud Infrastructure http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12355501&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Gain an understanding of what cloud computing at Microsoft means today and how the company delivers a trustworthy cloud-computing infrastructure with this white paper from the Online Services Security and Compliance team, a part of the Global Foundation Services division that manages security for the Microsoft cloud infrastructure.

Learning Path: Improving Database Security with SQL Server 2008 http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12355513&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Use this learning path to find out about new tools and security features in SQL Server 2008 to help keep your databases more secure. For example, learn how to create a policy that defines the desired surface area settings, enforce the Windows password policy on your SQL Server accounts, and activate Web Service endpoint authentication.

Learning Path: Providing Security for an Evolving IT Infrastructure http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12355514&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Use the resources in this learning path to better understand how to approach security issues like dissolving network perimeters, disrupted security models from new technologies like virtualization, and the evolving Web platform.

Microsoft Security Development Lifecycle Template: What It Means for Developers http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12355515&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Find out more about the new process template for Microsoft Visual Studio Team System, which is intended to ease adoption of the Microsoft Security Development Lifecycle (SDL), in this Channel 9 interview with Microsoft SDL Program Manager Jeremy Dallman.

Microsoft Security Bulletin Summary for August, 2009

http://www.microsoft.com/technet/security/bulletin/ms09-aug.mspx

Microsoft Product Lifecycle Information

Forefront Edge Security

Forefront Threat Management Gateway Beta 3

Get the latest beta of the new secure Web gateway, including new URL filtering capabilities.

Forefront Threat Management Gateway (TMG) is a comprehensive Secure Web Gateway solution that helps protect employees from Web-based threats. It also delivers simple, unified perimeter security with integrated firewall, VPN, intrusion prevention, malware inspection and URL filtering. Forefront TMG Beta3 is available for download in both Standard Edition and Enterprise Edition.

http://go.microsoft.com/fwlink/?LinkID=141234&clcid=0x409

Evaluate Microsoft Forefront Unified Access Gateway Beta 2 today

Forefront Unified Access Gateway Beta 2 provides an easy and secure remote access solution with a focus on application intelligence and granular access control. Forefront UAG is the one solution to fit all of your remote access needs, as it provides centralized management and policy control across all users, devices, and network resources. When you download the latest beta software, you're automatically registered to access valuable beta resources assembled in one convenient location.

http://technet.microsoft.com/evalcenter/dd183100.aspx

Forefront TMG and ISA Server

Forefront Edge Security TechCenter

http://technet.microsoft.com/en-gb/forefront/edgesecurity/default.aspx

Please note that if you have feedback on documentation or wish to request new documents - email isadocs@microsoft.com

Forefront Edge Security Community

http://technet.microsoft.com/en-gb/forefront/edgesecurity/bb687298.aspx

Forefront TMG (ISA Server) Product Team Blog

The ISA Server Product Team Blog (http://blogs.technet.com/isablog/) is updated on a regular basis. Latest entries include:

A Few Words on the TMG Firewall Client

http://blogs.technet.com/isablog/archive/2009/05/29/a-few-words-on-the-tmg-firewall-client.aspx

IPSec Domain Isolation Using ISA Server Updated and Reposted

http://blogs.technet.com/isablog/archive/2009/05/31/ipsec-domain-isolation-using-isa-server-updated-and-reposted.aspx

ISA BPA 7 and Forefront TMG for Windows Essential Business Server

http://blogs.technet.com/isablog/archive/2009/06/04/isa-bpa-7-and-forefront-tmg-for-windows-essential-business-server.aspx

FWC Parser for Netmon 3.3 on CodePlex

http://blogs.technet.com/isablog/archive/2009/06/04/fwc-parser-for-netmon-3-3-on-codeplex.aspx

Forefront TMG Beta 3 is Released

http://blogs.technet.com/isablog/archive/2009/06/09/forefront-tmg-beta-3-is-released.aspx

URL Filtering is Here!

http://blogs.technet.com/isablog/archive/2009/06/10/url-filtering-is-here.aspx

Troubleshooting Authentication Issues in ISA Server Using Net Logon Logging

http://blogs.technet.com/isablog/archive/2009/06/12/troubleshooting-authentication-issues-in-isa-server-using-net-logon-logging.aspx

Introducing Forefront Network Inspection System (NIS) in TMG Beta 3 release

http://blogs.technet.com/isablog/archive/2009/06/16/introducing-forefront-network-inspection-system-nis-in-tmg-beta-3-release.aspx

How to exclude specific computers from URL Filtering?

http://blogs.technet.com/isablog/archive/2009/06/17/how-to-exclude-specific-computers-from-url-filtering.aspx

Bing Safe Search, ISA Server and Forefront TMG

http://blogs.technet.com/isablog/archive/2009/06/19/bing-safe-search-isa-server-and-forefront-tmg.aspx

ISA Integrated NLB - Multicast with IGMP… ISA “blocks” IGMP packets

http://blogs.technet.com/isablog/archive/2009/06/22/isa-integrated-nlb-multicast-with-igmp-isa-blocks-igmp-packets.aspx

Understand duplicate authentication prompts ISA 2006 publishing MOSS using FBA

http://blogs.technet.com/isablog/archive/2009/06/23/understand-duplicate-authentication-prompts-isa-2006-publishing-moss-using-fba.aspx

Configuring Network Inspection System (NIS)

http://blogs.technet.com/isablog/archive/2009/06/28/configuring-network-inspection-system-nis.aspx

TMG SCOM-Pack – Monitor TMG with System Center 2007 R2

http://blogs.technet.com/isablog/archive/2009/06/29/tmg-scom-pack-monitor-tmg-with-system-center-2007-r2.aspx

New Forefront TMG Beta Documentation on TechNet

http://blogs.technet.com/isablog/archive/2009/07/08/new-forefront-tmg-beta-documentation-on-technet.aspx

Joining Microsoft Telemetry community with Forefront Threat Management Gateway (TMG) Beta 3

http://blogs.technet.com/isablog/archive/2009/07/12/joining-microsoft-telemetry-community-with-forefront-threat-management-gateway-tmg.aspx

MS09-031: ISA Server 2006 FBA and RADIUS OTP Bulletin

http://blogs.technet.com/isablog/archive/2009/07/13/ms09-031-isa-server-2006-fba-and-radius-otp-bulletin.aspx

Office Web Components Advisory, ISA Server and Forefront TMG

http://blogs.technet.com/isablog/archive/2009/07/16/office-web-components-advisory-isa-server-and-forefront-tmg.aspx

Update on the Office Web Components Advisory

http://blogs.technet.com/isablog/archive/2009/07/22/update-on-the-office-web-components-advisory.aspx

Announcing the Availability of Forefront TMG Beta 3 Tools & SDK

http://blogs.technet.com/isablog/archive/2009/07/26/announcing-the-availability-of-forefront-tmg-beta-3-tools-sdk.aspx

Excessive Authentication Traffic accessing an IIS site when using ISA Server 2006 as Forward Proxy

http://blogs.technet.com/isablog/archive/2009/07/30/excessive-authentication-traffic-accessing-an-iis-site-when-using-isa-server-2006-as-forward-proxy.aspx

An Inside View: The Road From Beta to RTM

http://blogs.technet.com/isablog/archive/2009/08/04/an-inside-view-the-road-from-beta-to-rtm.aspx

Announcing the Availability of Forefront TMG URL Filtering Telemetry Package

http://blogs.technet.com/isablog/archive/2009/08/13/announcing-the-availability-of-forefront-tmg-url-filtering-telemetry-package.aspx

New Tales From the Edge Articles

http://blogs.technet.com/isablog/archive/2009/08/15/new-tales-from-the-edge-articles.aspx

Another Case where Users are randomly prompt for Authentication while Browsing Internet through ISA Server 2006

http://blogs.technet.com/isablog/archive/2009/08/18/another-case-where-users-are-randomly-prompt-for-authentication-while-browsing-internet-through-isa-server-2006.aspx

Redirection to OWA 2007 Directory in ISA 2004/2006

http://blogs.technet.com/isablog/archive/2009/08/24/redirection-to-owa-2007-directory-in-isa-2004-2006.aspx

Side Effects of Incorrect DNS configuration on ISA Server: 10060 Connection Timeout Scenario

http://blogs.technet.com/isablog/archive/2009/08/27/side-effects-of-incorrect-dns-configuration-on-isa-server-10060-connection-timeout-scenario.aspx

Forefront Unified Access Gateway & Intelligent Application Gateway 2007

Intelligent Application Gateway 2007 Technical Resources

http://technet.microsoft.com/en-gb/forefront/edgesecurity/bb687299.aspx

Forefront Edge Security Community

http://technet.microsoft.com/en-gb/forefront/edgesecurity/bb687298.aspx

Forefront Unified Access Gateway Product Team Blog

The UAG Product Team Blog (http://blogs.technet.com/edgeaccessblog) is updated on a regular basis. Latest entries include:

Introducing the IAG/UAG public forum

http://blogs.technet.com/edgeaccessblog/archive/2009/06/07/introducing-the-iag-uag-public-forum.aspx

Forefront UAG Beta is Coming to Town

http://blogs.technet.com/edgeaccessblog/archive/2009/06/11/forefront-uag-beta-is-coming-to-town.aspx

Introducing Forefront Unified Access Gateway

http://blogs.technet.com/edgeaccessblog/archive/2009/06/16/introducing-forefront-unified-access-gateway.aspx

Remote Access Technologies of the World – Unite!

http://blogs.technet.com/edgeaccessblog/archive/2009/06/18/remote-access-technologies-of-the-world-unite.aspx

Introducing UAG DirectAccess solution

http://blogs.technet.com/edgeaccessblog/archive/2009/06/22/introducing-uag-directaccess-solution.aspx

UAG Array and Network Load Balancing

http://blogs.technet.com/edgeaccessblog/archive/2009/06/29/array-and-network-load-balancing.aspx

Adding the SSTP Magic to the UAG Charm

http://blogs.technet.com/edgeaccessblog/archive/2009/07/05/adding-the-sstp-magic-to-the-uag-charm.aspx

Ready, Set, Download! Forefront UAG Beta is here!

http://blogs.technet.com/edgeaccessblog/archive/2009/07/13/ready-set-download-forefront-uag-beta-is-here.aspx

Forefront UAG Beta 2 Docs

http://blogs.technet.com/edgeaccessblog/archive/2009/07/14/forefront-uag-beta-2-docs.aspx

What’s in UAG for the end-users

http://blogs.technet.com/edgeaccessblog/archive/2009/07/19/what-s-in-uag-for-the-end-users.aspx

New White Paper: Implementing an ADFS Solution for Microsoft Dynamics CRM by Using Intelligent Application Gateway (IAG)

http://blogs.technet.com/edgeaccessblog/archive/2009/07/20/new-white-paper-implementing-an-adfs-solution-for-microsoft-dynamics-crm-by-using-intelligent-application-gateway-iag.aspx

Comparing UAG and TMG arrays

http://blogs.technet.com/edgeaccessblog/archive/2009/07/20/comparing-uag-and-tmg-arrays.aspx

Deep Dive Into DirectAccess - Part 1

http://blogs.technet.com/edgeaccessblog/archive/2009/07/27/deep-dive-into-directaccess-part-1.aspx

Faster, Higher, Stronger – UAG Performance

http://blogs.technet.com/edgeaccessblog/archive/2009/08/02/faster-higher-stronger-uag-performance.aspx

Considerations for Exchange Publishing

http://blogs.technet.com/edgeaccessblog/archive/2009/08/10/considerations-for-exchange-publishing.aspx

Deep Dive Into DirectAccess - Part 2

http://blogs.technet.com/edgeaccessblog/archive/2009/08/27/deep-dive-into-directaccess-part-2.aspx

Documents

Common SQL Server Security Issues and Solutions http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12355502&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Have you found yourself inadvertently in charge of a SQL Server database and don’t know all the best practices for making it secure? Get a quick overview of the top 10 security areas you should worry about, common problems, and solutions.

Securing SQL Server http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12355503&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Securing SQL Server can be viewed as a series of steps, involving four areas: the platform, authentication, objects (including data), and applications that access the system. Get detailed, step-by-step guidance on how to create and implement an effective security plan.

SQL Server 2008 Replication Security http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12355504&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Get guidance to help you protect the replication scenarios that you deploy in SQL Server 2008 from malicious attacks and improve the security of your data.

How Do I: Defend Against Truncation-Based SQL Injection Attacks? http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12355505&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

This video demonstrates how this property of truncation may be used by an attacker to circumvent the above mentioned mitigation, resulting in a SQL injection attack. Various options for fixing SQL injection issues are also discussed.

Microsoft Source Code Analyzer for SQL Injection http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12355506&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

This static code analysis tool for finding SQL Injection vulnerabilities in ASP code will scan ASP source code and generate warnings related to first-order and second-order SQL Injection vulnerabilities. It will also provide annotation support that can be used to improve the analysis of the code.

Tuning Microsoft Forefront Client Security Database Components http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12355507&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Microsoft Forefront Client Security uses SQL Server for collection and reporting databases. When you are choosing the SQL Server edition and the hardware on which it will run, take the topics discussed in this article into consideration.

Microsoft Security Update Guide http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12355508&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Gain a better understanding of the Microsoft security release information, processes, communications, and tools—and how to manage organizational risk and develop a repeatable, effective deployment mechanism for security updates.

Microsoft Operations Framework 4.0 http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12355509&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

The Microsoft Operations Framework (MOF) is designed to help IT professionals quickly access practical, relevant information on how to connect service management principles to everyday IT tasks and activities, and to ensure alignment between IT and the business. Included in MOF 4.0 is guidance on how to use the framework to achieve the governance, risk, and compliance objectives defined in the COBIT and Val IT governance frameworks.

Firewall Client Basics: Introduction to the ISA Server Firewall Client and Forefront TMG Client

http://technet.microsoft.com/en-us/library/ee291341.aspx

Troubleshooting “Primary CSS down” scenario

http://technet.microsoft.com/en-us/library/ee388575.aspx

Understanding E-Mail Protection on Forefront TMG

http://technet.microsoft.com/en-us/library/ee338733.aspx

New Forefront TMG Beta Documentation on TechNet

http://technet.microsoft.com/en-us/library/ee207140.aspx

New Forefront UAG Beta 2 Documentation on TechNet

http://technet.microsoft.com/en-us/library/dd861463.aspx

White Paper: Implementing an ADFS Solution for Microsoft Dynamics CRM by Using IAG

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=47ee7f73-6059-4b20-a305-1b8b2b23f0e9

Downloads

The Microsoft Office Visualization Tool (OffVis) Fact Sheet

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=19a1a252-c3af-4474-b33c-158c6e85115e

iDefense Review of Microsoft Exploitability Index

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=73773376-f70d-46ff-8550-77dc1c76bf99

Press Release - Black Hat 2009

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=15bcec81-e0eb-42a8-9f26-f1f7705fb310

The Microsoft Security Update Guide

Microsoft Security Update Guide: Helping IT Professionals Better Understand and Maximize Microsoft Security Update Release Information, Processes, Communications, and Tools.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=c3d986d0-ecc3-4ce0-9c25-048ec5b52a4f

Microsoft Internet Security and Acceleration Server 2006 Management Pack for OpsMgr 2007

This management pack monitors the performance and availability of ISA Server 2006.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=c576fcdf-42f0-4eb5-990d-e8e7c7e9c07e

Building a Safer, More Trusted Internet through Information Sharing

Building a Safer, More Trusted Internet through Information Sharing: A report from the Microsoft Security Response Center on the progress of three initiatives that share information to foster deeper industry collaboration, increase community-based defenses, and better protect customers.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=db611a07-9454-4daf-b799-0843625b7b60

Extended Security Update Inventory Tool

http://www.microsoft.com/downloads/en/results.aspx?displaylang=en&period=30&nr=50&sortCriteria=Date&sortOrder=Ascending&stype=s_adv

Microsoft Operations Framework (MOF) 4.0

MOF 4.0 is practical guidance for IT organizations. With the release of version 4.0, MOF now reflects a single, comprehensive IT service lifecycle—it helps IT professionals connect service management principles to everyday IT tasks and activities and ensures alignment between IT and the business.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=457ed61d-27b8-49d1-baca-b175e8f54c0c

Forefront Online Security for Exchange (FOSE) 9.1 Product Documents

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=9c34eba6-059b-455a-a44f-96b1b06b4b21

Microsoft Forefront Server Security Management Console Documentation

Forefront Server Security Management Console allows administrators to easily manage Forefront Security for Exchange Server, Forefront Security for SharePoint, and Microsoft Antigen.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=ae4ce23b-9e1e-455c-87a4-36167fe43107

Microsoft Forefront Security for SharePoint with SP1 Documentation

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=125efb1e-7ff8-4cc8-934a-28fc7c7e59f0

Microsoft Antigen SP1 Documentation

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=7d00160e-4d15-4459-98a3-89f393ac008e

Microsoft Forefront Security for Exchange Server with SP1 Documentation

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=5cd4e36e-2dab-44d6-990e-3b8184b1cb1b

Microsoft Internet Security and Acceleration Server 2006 Management Pack for OpsMgr 2007

This management pack monitors the performance and availability of ISA Server 2006.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=c576fcdf-42f0-4eb5-990d-e8e7c7e9c07e

Update for Windows Mail Junk E-mail Filter for x64-based Systems [August 2009] (KB905866)

Install this update for Windows Mail to revise the definition files that are used to detect e-mail messages that should be considered junk e-mail or that may contain phishing content

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=749e10cd-f40c-4f94-8e38-d4221ded7652

Update for Windows Mail Junk E-mail Filter [August 2009] (KB905866)

Install this update for Windows Mail to revise the definition files that are used to detect e-mail messages that should be considered junk e-mail or that may contain phishing content.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=aa029fde-f341-44fc-8b85-0c6f3d3c2d69

August 2009 Security Release ISO Image

This DVD5 ISO image file contains the security updates for Windows released on Windows Update on August 11th, 2009.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=4c9ed44e-6a3e-45ea-9830-0c23f37d77a4

Microsoft® Windows® Malicious Software Removal Tool (KB890830) x64

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=585d2bde-367f-495e-94e7-6349f4effc74

Microsoft® Windows® Malicious Software Removal Tool (KB890830)

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=ad724ae0-e72d-4f54-9ab3-75b8eb148356

Update for Microsoft Office Outlook 2003 Junk Email Filter (KB972688)

This update provides the Junk E-mail Filter in Microsoft Office Outlook 2003 with a more current definition of which e-mail messages should be considered junk e-mail.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=44f8ad34-969a-4402-aa83-8a78941de573

Update for Microsoft Office Outlook 2007 Junk Email Filter (KB972691)

This update provides the Junk E-mail Filter in Microsoft Office Outlook 2007 with a more current definition of which e-mail messages should be considered junk e-mail.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=2b832213-f733-4e90-85ea-a086c671f891

Windows Firewall with Advanced Security: Step-by-Step Guide: Deploying Windows Firewall and IPsec Policies

This step-by-step guide illustrates how to deploy Active Directory® Group Policy objects (GPOs) to configure Windows Firewall with Advanced Security.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=0b937897-ce39-498e-bb37-751c00f197d9

Extended Security Update Inventory Tool

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=2c93da1d-48a0-4e5c-991f-87e08954f61b

URL Filtering Telemetry Package for Forefront Threat Management Gateway Beta 3

Microsoft Forefront Threat Management Gateway (TMG) is a comprehensive Secure Web Gateway solution that helps protect employees from Web-based threats. Microsoft URL filtering telemetry package can be installed on servers running Forefront TMG Beta3 to assist Microsoft with improving the quality of the URL filtering database and fine-tuning it for your specific business environment.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=f7e5907d-60ae-4f39-8660-9a959db5a6e6

Windows Server 2008 R2 Core Network Companion Guide: Deploying Computer and User Certificates

This companion guide to the Core Network Guide provides instructions on how to deploy client computer and user certificates with Active Directory Certificate Services (AD CS) and Group Policy.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=3418ee02-1a6a-4286-8eec-49cacf8f8f6f

Microsoft SCEP Implementation Whitepaper.

This whitepaper provides an overview of Microsoft implementation for SCEP in the Windows Server 2008 R2

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=e11780de-819f-40d7-8b8e-10845bc8d446

Microsoft Forefront Server Security 2010 Privacy Statement

This document describes the privacy policy for Microsoft Forefront Security 2010 for Exchange and Microsoft Forefront Security 2010 for SharePoint.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=72d99943-8558-4b31-bcf8-bbc08e3a2ffa

Forefront Security 2010 for Exchange Server Release Candidate

Microsoft Forefront Security 2010 for Exchange Server provides fast and effective protection against malware and spam by including multiple scanning engines from industry-leading security partners. It also integrates with Forefront Online Security for Exchange to provide the defense-in-depth benefits of hosted and on-premise filtering in a single solution.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=b8a7d36f-cc8d-4335-ae60-8f27c48f3a37

Forefront Threat Management Gateway Beta 3

http://go.microsoft.com/fwlink/?LinkID=141234&clcid=0x409

URL Filtering Telemetry Package for Forefront Threat Management Gateway Beta 3

http://www.microsoft.com/downloads/details.aspx?FamilyID=f7e5907d-60ae-4f39-8660-9a959db5a6e6&displaylang=en

Microsoft Forefront Threat Management Gateway (TMG) Beta 3 Tools & Software Development Kit

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=dff77975-84bf-484f-a3bd-9d8dd800e220

ISA BPA 7 and Forefront TMG for Windows Essential Business Server

http://isabpa.com

Microsoft Forefront Unified Access Gateway Beta 2

http://technet.microsoft.com/evalcenter/dd183100.aspx

Events/WebCasts

Security Webcast Calendar http://go.microsoft.com/fwlink/?LinkId=37910

Find security webcasts listed in an easy-to-use calendar format.

Upcoming Security Webcasts

http://www.microsoft.com/events/security/upcoming.mspx

Register for the following Webcasts on the link above

TechNet Webcast: Information About Microsoft September Security Bulletins (Level 200)

Wednesday, September 09, 2009 11:00 A.M.-12:30 P.M. Pacific Time

Momentum Webcast: Optimize Your Desktop Infrastructure with Windows 7 and MDOP (Level 100)

Thursday, September 24, 2009 11:00 A.M.-12:00 P.M. Pacific Time

On-Demand Security Webcasts

http://www.microsoft.com/events/security/ondemand.mspx

Security Awareness Materials http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11524381&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Guidance, samples, and templates for creating a security-awareness program in your organization.

Learn Security On the Job http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11524382&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Visit TechNet Spotlight: www.microsoft.com/technetspotlight

Video on Demand, Video Downloads, PowerPoint Presentations, Audio and more

New or updated KB’s

Microsoft Internet Security and Acceleration Server

FIX: A user is prompted to change the password although the account is configured as "Password never expires" when the user tries to log on to an intranet Web site published by using ISA Server 2006 FBA

http://support.microsoft.com/kb/971142

Description of the ISA Server 2006 hotfix package: July 14, 2009

http://support.microsoft.com/kb/971143

FIX: Outlook clients cannot access the Exchange Server that is running in a Windows server cluster and is published in ISA Server 2004 by using the Exchange RPC Server protocol

http://support.microsoft.com/kb/970452

Description of the ISA Server 2004 hotfix package: June 2, 2009

http://support.microsoft.com/kb/970454

FIX: Incoming VPN connections are rejected by an ISA Server 2004 RADIUS server that is operating on a Windows Server 2003-based computer

http://support.microsoft.com/kb/970451

FIX: The ISA Server Control service cannot start after you install the MS09-012 update on a computer that operates with more than 4 CPU cores

http://support.microsoft.com/kb/970450

FIX: After you install an update for a non-English version of ISA Server 2004 with Service Pack 3, some English shortcuts are added to the Microsoft ISA Server submenu on the Start menu

http://support.microsoft.com/kb/970903

Forefront TMG and ISA Server

An ISA server or Forefront Threat Management Gateway server requests credentials when client computers in the same domain use Internet Explorer to access Web sites that contain Java programs

http://support.microsoft.com/kb/925881

A.O.B

Microsoft SDL Pro Network Member: iSEC Partners http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12355510&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

iSEC Partners is a full-service security consulting firm that offers a variety of mobile, Web application, and client/server security services. Services provided by iSEC Partners include penetration testing, secure systems development, security education, and software design verification.

Community Article of the Month: Hunting SQL Injection Bugs http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12355512&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

In this article, Brad Hill and Geng Yang from iSEC Partners offer some tips and tricks to help you hunt down and eliminate SQL injection in your applications.

Security Help and Support for IT Professionals http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12355518&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

TechNet Troubleshooting and Support Page http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12355519&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Microsoft Security Glossary http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12355520&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

TechNet Security Center http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12355521&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

MSDN Security Developer Center http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12355522&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Sign-Up for the Microsoft Security Notification Service http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12355523&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Security Bulletin Search Page http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12355524&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Home Users: Protect Your PC http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12355525&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

MCSE/MCSA: Security Certifications http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12355526&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Subscribe to TechNet http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12355527&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Register for TechNet Flash IT Newsletter http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12355528&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

August 2009 – technical Rollup Mail - Security

conuktrm — Tue, 04 Aug 2009 14:30:00 GMT

News

Introducing the Microsoft Assessment and Planning Toolkit for PC Security http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12228993&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

The Microsoft Assessment and Planning (MAP) Toolkit is a powerful inventory, assessment, and reporting tool that can securely assess IT environments for various platform migrations and virtualization without the use of any software agents. When you use the MAP Toolkit to assess the security of your client infrastructure, you also receive a PC security assessment report, a security readiness report, and a security readiness proposal.

MSDN Channel 9 Interviews and Demos - !exploitable Crash Analyzer http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12228994&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Meet the program manager behind the proactive, open-source security tool called !exploitable. It’s the only tool of its kind that increases efficiency, reduces cost, and improves security by providing automated crash analysis and security risk assessment. !exploitable Crash Analyzer puts crash analysis that previously required the help of a security expert into a tool that every developer and tester can use.

New Windows 7 and Internet Explorer 8 Security Baselines Beta Opening Soon http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12228995&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Does your organization waste valuable resources on security issues? Meet your business-critical needs and elevate the security of Microsoft products with these new security baselines. The security baselines combine best-practice guidance and tools to help you plan, deploy, and monitor the security of Windows 7 and Internet Explorer 8.0. This Beta launches in mid-July 2009. Sign-up now http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12228937&s1=68628015-2ccc-cbc7-31b9-0e76c3415474 to receive notification updates so that you will get the first look at this new release of security baselines for Windows 7 and Internet Explorer 8. Members, bookmark this link http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12228938&s1=68628015-2ccc-cbc7-31b9-0e76c3415474.

Forefront Security for Exchange Server with Service Pack 2 Now Available http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12228996&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Make protecting your Exchange Server 2007 environments easier by downloading the latest release of Microsoft Forefront Security for Exchange Server. New features include visibility of all actively published engines, alerts and notifications about new engine availability, and rollup of software fixes.

Forefront Security for SharePoint with Service Pack 3 Now Available http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12228997&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Help better protect your Microsoft Office SharePoint Server 2007 and Windows SharePoint Services 3.0 collaboration environments from malware and inappropriate content by downloading the latest release of Microsoft Forefront Security for SharePoint. New features include visibility of all actively published engines, alerts and notifications about new engine availability, and rollup of software fixes.

Microsoft Security Bulletin Summary for July, 2009

http://www.microsoft.com/technet/security/bulletin/ms09-jul.mspx

Evaluate Forefront’s Integrated Portfolio of Protection, Identity, and Access Products http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12229432&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Microsoft Forefront delivers leading malware protection solutions across endpoints, messaging and collaboration application servers, and the network, while Microsoft’s identity-based access technologies and Forefront solutions build upon Active Directory’s infrastructure to enable policy-based user access to applications, devices, and information.

Try Out Microsoft Antigen 9.0 with Service Pack 2 http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12229433&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Improve protection for Exchange Server 2003 and Exchange 2000 Server with the SP2 release of Microsoft Antigen 9.0. New features include visibility of all actively published engines, alerts and notifications of new engine availability, improved anti-spam detection through integration of Cloudmark engine, and rollup of software fixes.

Documents

Microsoft SDL – Developer Starter Kit http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12228998&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

The Microsoft SDL – Developer Starter Kit offers 14 modules of content, labs, and training to help you establish a standardized approach to rolling out the Microsoft SDL in your organization, build a customized SDL training program for your development teams, or enrich your existing development practices.

Microsoft Security Development Lifecycle for Line-of-Business Applications http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12228999&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Referred to as the SDL-LOB process for short, this mainstream approach to the SDL defines standards and best practices for securing the line-of-business applications that support your business. Get actionable guidance on requirements plus design, implementation, verification, and release processes.

Microsoft SDL Process Template for Visual Studio Team System http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12229000&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

The Microsoft SDL Process Template for Microsoft Visual Studio Team System is a downloadable template that directly integrates the Security Development Lifecycle v4.1 into your software development. It generates a detailed Final Security Review report that provides an up-to-the-minute overview of security issues, testing results, and status for all security requirements associated with a project.

How Do I: Set Up the SDL Process Template? http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12229001&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

The Microsoft SDL Process Template for Visual Studio Team System was created to ease adoption of the SDL by automatically integrating the policy, processes, and tools of SDL v4.1 into Visual Studio Team System 2008. In this video, learn how to install the SDL Process Template, and then see how to begin using the template in your next project.

Improving Web Services Security Guide http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12229002&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Using end-to-end application scenarios, this guide shows you how to design and implement authentication and authorization in Windows Communication Foundation. You will learn how to improve the security of your Windows Communication Foundation services through prescriptive guidance including practices at a glance, guidelines, a Q&A, and step-by-step how-to articles.

Downloads

Forefront Online Security for Exchange (FOSE) 9.1 Product Documents

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=9c34eba6-059b-455a-a44f-96b1b06b4b21

Group Policy Preference Client Side Extensions for Windows Vista (KB943729)

Multiple Group Policy Preferences have been added to the Windows Server 2008 Group Policy Management Console (which are also available through the Remote Server Administration Toolset (RSAT) for Windows Vista SP1).

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=ab60dc87-884c-46d5-82cd-f3c299dac7cc

Group Policy Preference Client Side Extensions for Windows Vista x64 Edition (KB943729)

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=b10a7af4-8bee-4adc-8bbe-9949df77a3cf

Security Audit Events for Windows 7 and Windows Server 2008 R2

A list of all security audit events for Windows Server 2008 R2 and Windows 7

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=3a15b562-4650-4298-9745-d9b261f35814

Microsoft Code Name "Geneva" SbS Guides and VMs

"Geneva" Step by Step Guides and Virtual Machines

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=57602615-e1ee-4775-8b79-367b7007e178

Microsoft Forefront Security for SharePoint with Service Pack 3

Forefront Security for SharePoint with Service Pack 3 helps business protect their Microsoft Office SharePoint Server 2007 and Windows SharePoint Services 3.0 collaboration environments by eliminating documents containing malicious code, confidential information, and inappropriate content.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=e06453b8-b2dd-4177-969c-2f89aa841e11

Antigen 9.2 Privacy Statement

This document describes the privacy policy for the 9.2 release of Microsoft Antigen

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=d4c0a037-0651-47d6-9ef9-7aaf21b70e69

Microsoft Antigen for SMTP Gateways with Antigen Spam Manager with SP2 Trial Only

The Messaging Security Suite includes Antigen for Exchange, Antigen for SMTP Gateways, and Antigen Spam Manager, and provides server-level protection against the latest e-mail threats.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=f5c547d4-d457-43fa-9174-c1ddf4476cf3

Microsoft Antigen for Exchange with Antigen Spam Manager with SP2 Trial Software

The Messaging Security Suite includes Antigen for Exchange, Antigen for SMTP Gateways, and Antigen Spam Manager, and provides server-level protection against the latest e-mail threats.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=866b63bf-6207-4197-9c5d-511b7212e40c

Microsoft Forefront Security for Exchange Server with Service Pack 2

Help protect your Exchange server from viruses and other malware.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=2ceb14d4-404b-4d8f-8a21-ebfc71b2e82b

FSOCS performance analysis and capacity planning document

Document provides insights into performance testing and analysis conducted for the Forefront security for Office Communication Server

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=be759065-0c0e-47e6-be56-8ffe1411cb80

IT Manager: Platform Solution Blueprint – Security

The Security Platform Solution Blueprint Poster by Advaiya gives IT managers a comprehensive view of how security technologies work within their IT environment.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=e86e9575-a868-450b-92c9-23fe456efbe2

Security, Identity, and Access Management Datasheet

This offering provides an end-to-end security solution that allows you to move toward a dynamic IT infrastructure while ensuring better security integration, manageability, and efficiency.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=b53dee69-a3f9-4800-91a8-42c1b8b365db

Forefront Online Security for Exchange (FOSE) 9.1 Product Documents

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=9c34eba6-059b-455a-a44f-96b1b06b4b21

HomeGroup and Firewall Interaction

Details how HomeGroup interacts with firewalls, using Windows Firewall as an example. Explains what ports and rules are required for firewalls to implement for HomeGroup to work correctly

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=937f3930-673d-45a0-8446-69c36e6f5c13

Introduction to Windows Firewall with Advanced Security

Learn how to manage Windows Firewall in Windows 7 and Windows Vista by using the Windows Firewall with Advanced Security Microsoft Management Control (MMC) snap-in, with Netsh commands, and with Group Policy.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=df192e1b-a92a-4075-9f69-c12b7c54b52b

White Paper: Implementing an ADFS Solution for Microsoft Dynamics CRM by Using IAG

This paper includes high-level guidance on using IAG to implement an ADFS solution for Microsoft Dynamics CRM 4.0.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=47ee7f73-6059-4b20-a305-1b8b2b23f0e9

Network Access Quarantine Control in Windows Server 2003

This white paper describes Network Access Quarantine Control in Windows Server 2003.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=5a8e763a-04bc-4806-90cb-b271365ff4da

Forefront Unified Access Gateway (UAG) Beta 2

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=a3f5729a-3989-4f60-980f-1b87dd198988

Microsoft® Windows® Malicious Software Removal Tool (KB890830) x64

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=585d2bde-367f-495e-94e7-6349f4effc74

Microsoft® Windows® Malicious Software Removal Tool (KB890830)

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=ad724ae0-e72d-4f54-9ab3-75b8eb148356

Update for Windows Mail Junk E-mail Filter [July 2009] (KB905866)

Install this update for Windows Mail to revise the definition files that are used to detect e-mail messages that should be considered junk e-mail or that may contain phishing content.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=aa029fde-f341-44fc-8b85-0c6f3d3c2d69

July 2009 Security Release ISO Image

This DVD5 ISO image file contains the security updates for Windows released on Windows Update on July 14th, 2009.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=58c72b24-2e5b-4e00-84f3-798f7d296cc2

Update for Windows Mail Junk E-mail Filter for x64-based Systems [July 2009] (KB905866)

Install this update for Windows Mail to revise the definition files that are used to detect e-mail messages that should be considered junk e-mail or that may contain phishing content.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=749e10cd-f40c-4f94-8e38-d4221ded7652

Request a Password Reset for Microsoft Online Services CTP

This document is intended for users of the July 2009 Community Technology Preview (CTP) of Microsoft® Online Services who need information about requesting a password reset.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=91a101d6-1fd1-44b1-beb8-5258460ea615

Windows Firewall Categories and User Facing Impact

Word document on best practice guidance on Windows Firewall Categories

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=08d23da9-ff0e-4e6f-b742-878ca1977c55

Microsoft Anti-Cross Site Scripting Library V3.0

AntiXSS 3.0 helps you to protect your current applications from cross-site scripting attacks, at the same time helping you to protect your legacy application with its Security Runtime Engine

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=051ee83c-5ccf-48ed-8463-02f56a6bfc09

Enabling Third party Firewall DirectAccess Clients

This Word document describes the rules and exemptions for configuring third party host-based firewalls to work with DirectAccess.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=49b42391-f924-4692-baa4-218720d3ea7b

Microsoft Directory Synchronization Tool 9.1

May 2009

The Microsoft Directory Synchronization Tool 9.1 enables you to securely synchronize selected data between an on-premise Active Directory and the Forefront Online Security for Exchange (FOSE) and Exchange Hosted Archive (EHA) services.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=3cda6dcc-1124-4e0b-b991-de9d85ed12e1

Network Access Quarantine Control in Windows Server 2003

This white paper describes Network Access Quarantine Control in Windows Server 2003.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=5a8e763a-04bc-4806-90cb-b271365ff4da

Microsoft Secured Unified Communications Datasheet

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=c516b57c-3dba-497f-8419-f2e969a28561

Microsoft Defense Solutions

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=7f5bf82d-35b8-4f0c-a16e-c11acd27c700

Defence Transformation Poster

Using the Connected Government Framework Microsoft helps defence organisations deliver open, secure, interoperable and manageable IT infrastructures to execute tactical missions and achieve strategic goals.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=bc5aa227-d93e-4c64-91f6-bd4252c7a20c

Microsoft® Forefront Threat Management Gateway (TMG) Beta 3 Tools & Software Development Kit

The tools here provide diagnostics and other feature-related tools, and the software development kit, for Forefront TMG Beta 3.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=dff77975-84bf-484f-a3bd-9d8dd800e220

Microsoft Situational Awareness

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=9bc432be-62fe-4d0d-b1c5-f2c9b8d13fb0

Microsoft Government Identity Management

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=798b31f1-7a42-450e-b739-315261934939

Microsoft Forefront Client Security 1.0 SP1

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=c980f790-23d6-4644-ad19-d0c268c63c35

Core Network Companion Guide: Deploying Server Certificates

This companion guide to the Core Network Guide provides instructions on how to deploy server certificates with Active Directory Certificate Services (AD CS) and how to autoenroll server certificates to computers running Network Policy Server (NPS) and Routing and Remote Access Service (RRAS).

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=a7f797b2-10fc-4e37-88ae-c1662fb15b11

Microsoft Threat Analysis and Modeling v3.0 beta

Threat modeling to empower application risk management.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=aad6dec7-26cf-4053-9963-d5974631c070

Security Audit Events for Windows 7 and Windows Server 2008 R2

A list of all security audit events for Windows Server 2008 R2 and Windows 7

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=3a15b562-4650-4298-9745-d9b261f35814

Forefront Online Security for Exchange (FOSE) 9.1 Product Documents

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=9c34eba6-059b-455a-a44f-96b1b06b4b21

Windows Firewall Categories and User Facing Impact

Word document on best practice guidance on Windows Firewall Categories

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=08d23da9-ff0e-4e6f-b742-878ca1977c55

Events/WebCasts

Security Webcast Calendar http://go.microsoft.com/fwlink/?LinkId=37910

Find security webcasts listed in an easy-to-use calendar format.

Upcoming Security Webcasts

http://www.microsoft.com/events/security/upcoming.mspx

Register for the following Webcasts on the link above

TechNet Webcast: Information About Microsoft August Security Bulletins (Level 200)

Wednesday, August 12, 2009 11:00 A.M.-12:30 P.M. Pacific Time

IT Manager Webcast: How Microsoft IT deployed DirectAccess to Provide Secure Access to Corporate Resources from Anywhere (Level 200)

Thursday, August 13, 2009 11:00 A.M.-12:00 P.M. Pacific Time

TechNet Webcast: Connect Remotely Using Windows 7 Direct Access (Level 300)

Wednesday, August 19, 2009 10:00 A.M.-11:00 A.M. Pacific Time

On-Demand Security Webcasts

http://www.microsoft.com/events/security/ondemand.mspx

Security Awareness Materials http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11524381&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Guidance, samples, and templates for creating a security-awareness program in your organization.

Learn Security On the Job http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11524382&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Visit TechNet Spotlight: www.microsoft.com/technetspotlight

Video on Demand, Video Downloads, PowerPoint Presentations, Audio and more

A.O.B

Security MVP of the Month: Jesper M. Johansson http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12229003&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Jesper Johansson, ISSAP, CISSP, and MSCE, is a well-known authority on information security in general and Windows security in particular. He is currently a principal software security architect, managing programs and projects related to application security, secure software development practices, and security training. He has delivered presentations on information security on five continents, has spoken at most major security events, and has written many articles on security.

MVP Article of the Month: Security Watch – Thoughts on Identity http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12229005&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

In this first part of a two-part series, Jesper Johansson delves into the concept of identity—what defines an identity, who gets to control the information, and how do we ensure that it is properly secured? In part two http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12228945&s1=68628015-2ccc-cbc7-31b9-0e76c3415474, he covers additional principles that successful digital identity systems must meet.

July 2009 – Technical Rollup Mail – Security

conuktrm — Wed, 01 Jul 2009 02:01:00 GMT

News

Security

What's New in Internet Explorer 8 (IE8) Security http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12078948&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

By Gina Narkunas, Director – IE8 Product Marketing, Microsoft Corporation Gain insight into the rapid evolution of Web-based threats and learn more about how the new security and privacy protections in Internet Explorer 8 can benefit your organization.

Evaluate Microsoft Codename “Geneva” Beta 2 http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12078949&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Microsoft Codename “Geneva” Beta 2 is an open platform that provides simplified user access and single sign-on for on-premises and cloud-based applications in the enterprise, across organizations and on the Web. Download Beta 2 today and learn more about “Geneva” at www.microsoft.com/geneva http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12078884&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

The Id Element - Your One-Stop Shop for All Things Identity on Channel9 http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12078950&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Find out what you want to know about identity and access control. From weekly interviews with product team members and developer how-tos to news and key resources, this new site offers content for identity experts and those just getting started. Don’t forget to also download the Identity Developer Training Kit http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12078885&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Security Features in Microsoft Online Services http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12078951&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Learn about the Business Productivity Online Suite—a set of subscription-based enterprise software services that operate within a complete ecosystem of features and capabilities designed to meet and in many cases to exceed the security and availability goals that you have for your business applications.

Microsoft Security Bulletin Summary for June, 2009

http://www.microsoft.com/technet/security/bulletin/ms09-jun.mspx

Integrate and Extend Security Across the Enterprise with Microsoft “Geneva” (Evaluate Beta 2) http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12041163&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

With Geneva and Active Directory federation technologies, enterprises can more efficiently deploy and manage new applications, establish a consistent security model to consolidate access management, and facilitate easy collaboration between organizations.

Download the Forefront Client Security TCO Analysis http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12041164&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Find out how Microsoft Forefront Client Security can help you reduce vulnerabilities and lower total cost of ownership. Download the datasheet on Forefront Online Security for Exchange. http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12041090&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Information Rights Management Application Patterns White Paper http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12114809&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

This white paper provides architecture and design guidance for building an information rights management (IRM)-aware application using Microsoft Active Directory Rights Management Services. The IRM Application Patterns Reference Implementation, available on MSDN, implements the patterns discussed within this article. http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12114726&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Microsoft Internet Security and Acceleration Server

Forefront Edge Security TechCenter

http://technet.microsoft.com/en-gb/forefront/edgesecurity/default.aspx

Please note that if you have feedback on documentation or wish to request new documents - email isadocs@microsoft.com

Forefront Edge Security Community

http://technet.microsoft.com/en-gb/forefront/edgesecurity/bb687298.aspx

Forefront TMG (ISA Server) Product Team Blog

The ISA Server Product Team Blog (http://blogs.technet.com/isablog/) is updated on a regular basis. Latest entries include:

Intelligent Application Gateway 2007

Intelligent Application Gateway 2007 Technical Resources

http://technet.microsoft.com/en-gb/forefront/edgesecurity/bb687299.aspx

Forefront Edge Security Community

http://technet.microsoft.com/en-gb/forefront/edgesecurity/bb687298.aspx

Intelligent Application Gateway Product Team Blog

The IAG Product Team Blog (http://blogs.technet.com/edgeaccessblog) is updated on a regular basis. Latest entries include:

Documents

What's New in Client Security http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12078952&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Get a quick overview of new security features in Windows 7, and changes to security features and technologies from Windows Vista.

BitLocker Drive Encryption Deployment Guide for Windows 7 http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12078953&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Delve deep into the various aspects of deploying BitLocker Drive Encryption on computers running Windows 7 Enterprise or Windows 7 Ultimate from using certifications and smart cards to enabling BitLocker by using the command line.

BitLocker Drive Encryption Step-by-Step Guide for Windows 7 http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12078954&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Designed to help you become familiar with BitLocker Drive Encryption in a Windows 7 test environment, this guide details basic information and procedures you need to start configuring and deploying BitLocker in your organization.

Implementing and Administering the ActiveX Installer Service in Windows 7 http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12078955&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Learn how to use the ActiveX Installer Service to manage the deployment of ActiveX controls by using Group Policy on computers in an organization.

AppLocker Step-by-Step Guide http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12078956&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

This step-by-step guide is designed to help administrators become familiar with AppLocker by providing the instructions needed to set up AppLocker in a test lab environment. Each scenario provides basic information and procedures that administrators can use to start configuring and deploying AppLocker in their network environments.

How to Turn Off Security Messages and Other System Notifications in Windows 7 http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12078957&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Windows 7 gives you more control over the Security Messages and other Notifications you may or may not want to receive. Learn how, for starters, you can configure how notifications are handled on the Taskbar—choosing to hide certain types of notifications, such as Action Center messages, Network messages, Windows Update Automatic Updates messages, and so on.

Slipstreaming a Forefront Client Security Client Installation http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12078958&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Learn how to slipstream a Forefront Client Security engine update into your System Center Configuration Manager (SCCM) or script-based initial Client Security client deployment, so that you are deploying the most up to date engine.

Internet Explorer 8 Enhanced Security Configuration http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12078959&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Internet Explorer Enhanced Security Configuration places your server and Internet Explorer in a configuration that decreases the exposure of your server to potential attacks that can occur through Web content and application scripts. Learn more about this configuration and browser security best practices.

Downloads

Update for Root Certificates [May 2009] (KB931125)

This item updates the list of root certificates on your computer to the list that is accepted by Microsoft as part of the Microsoft Root Certificate Program.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=f814ec0e-ee7e-435e-99f8-20b44d4531b0

Security Features in Microsoft Online Services

This white paper describes how the Microsoft concern for security, as defined in the Trustworthy Computing initiative, has driven key features in the design, deployment, and operation of the Microsoft Online Services environment.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=5736aaac-994c-4410-b7ce-bdea505a3413

Increasing Your Organization’s Security and Privacy with Internet Explorer 8

Guidance for Enhancing Internet Explorer Security for Desktop Users

Learn about the emerging threat types on the web today and how Internet Explorer 8’s new security features help protect against them.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=198d40a4-6896-49b3-b8f2-c151e9797634

Hotfixes and Security Updates in Windows Server 2008 SP2 and Windows Vista SP2

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=4e478e21-3d31-4a10-b8ed-e1bb770e3212

Forefront Online Security for Exchange (FOSE) 9.1 Product Documents

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=9c34eba6-059b-455a-a44f-96b1b06b4b21

Microsoft Directory Synchronization Tool 9.1

May 2009

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=3cda6dcc-1124-4e0b-b991-de9d85ed12e1

Update for Windows Mail Junk E-mail Filter [June 2009] (KB905866)

Install this update for Windows Mail to revise the definition files that are used to detect e-mail messages that should be considered junk e-mail or that may contain phishing content.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=aa029fde-f341-44fc-8b85-0c6f3d3c2d69

Update for Microsoft Office Outlook 2003 Junk Email Filter (KB970011)

This update provides the Junk E-mail Filter in Microsoft Office Outlook 2003 with a more current definition of which e-mail messages should be considered junk e-mail.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=df364c4f-eb47-4df1-b51b-dbe2b539b379

Security Features in Microsoft Online Services

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=5736aaac-994c-4410-b7ce-bdea505a3413

Update for Microsoft Office Outlook 2007 Junk Email Filter (KB970012)

This update provides the Junk E-mail Filter in Microsoft Office Outlook 2007 with a more current definition of which e-mail messages should be considered junk e-mail.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=c8d0f17b-bdcc-4378-b518-0023c03e4e70

June 2009 Security Release ISO Image

This DVD5 ISO image file contains the security updates for Windows released on Windows Update on June 9th, 2009.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=d81a8c5e-ca61-473f-bdf7-5bb3b3169d16

Microsoft® Windows® Malicious Software Removal Tool (KB890830) x64

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=585d2bde-367f-495e-94e7-6349f4effc74

Microsoft® Windows® Malicious Software Removal Tool (KB890830)

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=ad724ae0-e72d-4f54-9ab3-75b8eb148356

System Center Operations Manager 2007 R2 SCW Roles and Security Hardening Guide for Windows Server 2008

The Operations Manager 2007 R2 SCW Roles and Hardening guide help protect and harden your Operations Manager 2007 R2 environment

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=c22c81eb-c6dc-4190-a4c9-2edbf5b528f1

SQL Server 2008 Security DataSheet

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=65c2a014-5cbc-424e-ad5d-8d1da0bf6f58

Extended Security Update Inventory Tool

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=2c93da1d-48a0-4e5c-991f-87e08954f61b

Forefront Threat Management Gateway Beta 3

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=e05aecbc-d0eb-4e0f-a5db-8f236995bccd

IT Infrastructure Threat Modeling Guide

This Solution Accelerator provides you with a method to develop IT infrastructure threat modeling processes for your environment and prioritize your IT infrastructure security investments. The guide describes and considers the existing Microsoft Security Development Lifecycle (SDL) threat modeling process and uses it to establish a threat modeling process for IT infrastructure.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=e1d53e3f-a512-4668-85b3-169a777fc58f

Microsoft Forefront Codename "Stirling" Beta Privacy Statement

This document describes the privacy policy for Microsoft® Forefront Client Security

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=d34c6d9c-a555-4432-bb32-af21f5a6feab

Hotfix and Security Update List: Windows Server 2008 SP2 and Windows Vista SP2

Hotfixes and Security Updates in Windows Server 2008 SP2 and Windows Vista SP2

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=d8b2cf4b-a2df-4664-8dd8-e840001e33f3

Events/WebCasts

Security Webcast Calendar http://go.microsoft.com/fwlink/?LinkId=37910

Find security webcasts listed in an easy-to-use calendar format.

Upcoming Security Webcasts

http://www.microsoft.com/events/security/upcoming.mspx

Register for the following Webcasts on the link above

TechNet Webcast: Information About Microsoft July Security Bulletins (Level 200)

Wednesday, July 15, 2009 11:00 A.M.-12:30 P.M. Pacific Time

TechNet Webcast: Windows 7 Enhanced Security and Control (Level 300)

Wednesday, July 15, 2009 10:00 A.M.-11:00 A.M. Pacific Time

TechNet Webcast: Protecting Your Data with Windows 7 BitLocker and BitLocker To Go (Level 300)

Wednesday, July 29, 2009 10:00 A.M.-11:00 A.M. Pacific Time

On-Demand Security Webcasts

http://www.microsoft.com/events/security/ondemand.mspx

Security Awareness Materials http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11524381&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Guidance, samples, and templates for creating a security-awareness program in your organization.

Learn Security On the Job http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11524382&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Visit TechNet Spotlight: www.microsoft.com/technetspotlight

Video on Demand, Video Downloads, PowerPoint Presentations, Audio and more

A.O.B

MVP Article of the Month: Securing the Client Infrastructure http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12078962&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Learn about some of the keys to keeping clients safe in this article by Microsoft Enterprise Security MVP Deb Shinder—proper configuration settings, secure application development, and the deployment of the appropriate security mechanisms based on how and where the client computer is used.

June 2009 - Technical Rollup Mail - Security

Justin Zarb — Mon, 01 Jun 2009 03:26:00 GMT

News

Security

Impersonation and the Access Control List http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11918230&s1=68628015-2ccc-cbc7-31b9-0e76c3415474
By John Steer, Security Architect, Microsoft Application Consulting & Engineering (ACE) Team Security is a foundational component that needs to be integrated from the ground up in the development lifecycle. This article provides insight into impersonation and access control lists (ACLs) from a developer’s perspective.

GS Enhancements Planned for Visual Studio 2010 http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11918231&s1=68628015-2ccc-cbc7-31b9-0e76c3415474
First provided in Visual Studio .NET 2002, the Visual C++ compiler’s GS switch, which is on by default, is one of the built-in defenses designed to mitigate the buffer overrun attacks. Learn what Microsoft’s VC++ compiler team is proactively working on to refine and enhance the abilities of the GS switch.

Now On Demand: Scott Charney's Keynote from RSA Conference 2009 http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11918232&s1=68628015-2ccc-cbc7-31b9-0e76c3415474
Join Scott Charney, Corporate Vice President of Microsoft’s Trustworthy Computing Group, as he discusses the trusted Internet experience of the future and the need for technological innovation, global public policy, and societal shifts around the issues of privacy and security.

What's New in Windows 7 RC http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11918233&s1=68628015-2ccc-cbc7-31b9-0e76c3415474
Watch this quick video to learn about features and improvements in the Windows 7 Release Candidate (RC) in areas like performance, networking, security, and PC management—then download the Release Candidate http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11918154&s1=68628015-2ccc-cbc7-31b9-0e76c3415474 and take a test drive.

Evaluate Microsoft Forefront codename “Stirling” Beta 2 http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11918234&s1=68628015-2ccc-cbc7-31b9-0e76c3415474
By delivering simplified management and providing critical visibility into threats, vulnerabilities, and configuration risks, Forefront codename “Stirling” helps you protect your business with greater confidence and efficiency.

Download the Latest Microsoft Security Intelligence Report http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11838615&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Forefront Anti-Spam Portal Now Live http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11863106&s1=68628015-2ccc-cbc7-31b9-0e76c3415474
The Microsoft Forefront team has released an anti-spam portal to provide the latest news and tools about anti-spam resources. This portal is a “one-stop” resource for anti-spam information, including risks and business impacts associated with spam, blogs, forums and communities, evidence, and related technical and product information.

Download the New Capacity Planning Tool for Forefront Security for Exchange Server http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11863107&s1=68628015-2ccc-cbc7-31b9-0e76c3415474
The new Forefront Security for Exchange Server capacity planning tool helps you understand what hardware, architecture, and configuration settings will produce recommended system performance and message throughput results for comprehensive protection your Exchange servers.

Geneva Whitepapers and Datasheet
Whitepaper: "Geneva" Claims Based Access Platform
Learn about Microsoft's new "Geneva" claims based access platform. Read about the three main components of "Geneva" and how they work together to help solve application access problems with a single simplified access model. Understand how claims can be used across a wide variety of scenarios including enterprise, federation and Web. In this paper new concepts and terminology are introduced to help architects, developers and IT professionals understand the benefits and concepts behind the claims-based model of identity. A background in developing, deploying or managing web applications and services that entail user authentication is expected. By David Chappell

Whitepaper: "Geneva" Framework - Updated for Beta 2
Get started building claims-aware applications using Microsoft code-named "Geneva" Framework. In this paper concepts and terminology are introduced to help developers understand the benefits and concepts behind the claims-based model of identity. Security expertise is not required but familiarity with ASP.NET or WCF programming is. A background in building web applications or services that care about authentication and authorization is expected. As such, the focus of the paper is on building relying parties using the framework. By Keith Brown
http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=9ca5c685-3172-4d8f-81cb-1a59bdc9f7e3

Microsoft Code Name "Geneva" Beta 2
http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=118c3588-9070-426a-b655-6cec0a92c10b

Microsoft Security Bulletin Summary for May, 2009
http://www.microsoft.com/technet/security/bulletin/ms09-may.mspx

Microsoft Internet Security and Acceleration Server

Forefront Edge Security TechCenter
http://technet.microsoft.com/en-gb/forefront/edgesecurity/default.aspx
Please note that if you have feedback on documentation or wish to request new documents - email isadocs@microsoft.com

Forefront Edge Security Community
http://technet.microsoft.com/en-gb/forefront/edgesecurity/bb687298.aspx

Forefront TMG (ISA Server) Product Team Blog
The ISA Server Product Team Blog (http://blogs.technet.com/isablog/) is updated on a regular basis. Latest entries include:

Web Farm IP Affinity Load Balancing Algorithm
http://blogs.technet.com/isablog/archive/2009/04/30/web-farm-ip-affinity-load-balancing-algorithm.aspx

TechEd 2009: A Preview of Forefront TMG and URL Filtering
http://blogs.technet.com/isablog/archive/2009/05/03/teched-2009-a-preview-of-forefront-tmg-and-url-filtering.aspx

Announcing the Availability of ISA/TMG Best Practices Analyzer Version 7
http://blogs.technet.com/isablog/archive/2009/05/06/announcing-the-availability-of-isa-tmg-best-practices-analyzer-version-7.aspx

Quick Report From TechEd 2009: A 360-Degree View of Microsoft Forefront TMG and UAG
http://blogs.technet.com/isablog/archive/2009/05/14/quick-report-from-teched-2009-a-360-degree-view-of-microsoft-forefront-tmg-and-uag.aspx

TechEd 2009: Post Show Feedback
http://blogs.technet.com/isablog/archive/2009/05/16/teched-2009-post-show-feedback.aspx

High CPU Utilization by Wspsrv.exe Process
http://blogs.technet.com/isablog/archive/2009/05/19/high-cpu-utilization-by-wspsrv-exe-process.aspx

Fun with ISA Server and AES Cipher Suites
http://blogs.technet.com/isablog/archive/2009/05/23/fun-with-isa-server-and-aes-cipher-suites.aspx

Intelligent Application Gateway 2007

Intelligent Application Gateway 2007 Technical Resources
http://technet.microsoft.com/en-gb/forefront/edgesecurity/bb687299.aspx

Forefront Edge Security Community
http://technet.microsoft.com/en-gb/forefront/edgesecurity/bb687298.aspx

Intelligent Application Gateway Product Team Blog
The IAG Product Team Blog (http://blogs.technet.com/edgeaccessblog) is updated on a regular basis. Latest entries include:

How to configure Active Synch Trunk for Non-Windows Mobile phones sending out large email attachments
http://blogs.technet.com/edgeaccessblog/archive/2009/05/12/how-to-configure-active-synch-trunk-for-non-windows-mobile-phones-sending-out-large-email-attachments.aspx

How to configure IAG to use AES 256 encryption
http://blogs.technet.com/edgeaccessblog/archive/2009/05/14/how-to-configure-iag-to-use-aes-256-encryption.aspx

Documents

Secure Your Desktop PCs – Start a Free Security Assessment Today http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11918235&s1=68628015-2ccc-cbc7-31b9-0e76c3415474
Download the Microsoft Assessment and Planning (MAP) Toolkit, and assess your PCs’ virus and spyware vulnerability, and readiness for implementing Forefront Client Security.

Database Encryption in SQL Server 2008 Enterprise Edition http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11918236&s1=68628015-2ccc-cbc7-31b9-0e76c3415474
With the introduction of transparent data encryption (TDE) in SQL Server 2008, users now have the choice between cell-level encryption as in SQL Server 2005, full database-level encryption by using TDE, or the file-level encryption options provided by Windows. This white paper compares TDE with these other encryption methods for application developers and database administrators.

Deep Dive: Security and Protection for SQL Server 2008 http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11918237&s1=68628015-2ccc-cbc7-31b9-0e76c3415474
SQL Server includes a variety of precise, configurable security features. These features empower administrators to implement defense-in-depth that is optimized for the specific security risks of their environment. Get up to speed on security for the SQL Server Database Engine.

Administering SQL Server 2008 Servers by Using Policy-Based Management http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11918238&s1=68628015-2ccc-cbc7-31b9-0e76c3415474
Policy-Based Management is a system for managing one or more instances of SQL Server 2008. Learn monitoring and enforcement best practices and policy-based management scenarios, then get a tutorial on administering servers using Policy-Based Management.

Protect E-Mail with Forefront Security http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11918239&s1=68628015-2ccc-cbc7-31b9-0e76c3415474
Learn how to install and configure Forefront Security for Exchange Server using Windows PowerShell, fight spam with connection and content filtering, and configure multiple scanning engines and scanning policies.

ISA Server 2006 Enterprise Edition Quick Start Guide http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11918240&s1=68628015-2ccc-cbc7-31b9-0e76c3415474
Get the necessary information and resources that you need before you start the installation and configuration of ISA Server 2006. With this information, your deployment of ISA Server 2006 will be more efficient. The information in this document focuses on a few of the many features in ISA Server 2006, to enable you to quickly prepare for deployment.

Downloads

Active Directory Domain Services in the Perimeter Network (Windows Server 2008)
This guide contains direction for determining whether Active Directory Domain Services (AD DS) is appropriate for your perimeter network (also known as the DMZs or extranets), the various models for deploying AD DS in perimeter networks, and planning and deployment information for Read Only Domain Controllers (RODCs) in the perimeter network.
http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=c1d0fd00-bf31-4b20-95c6-279a4ce7c2b4

2007 Microsoft Office Security Guide
The 2007 Microsoft Office Security Guide provides prescriptive Group Policy setting and security configuration recommendations to help strengthen the security of computers running the 2007 Microsoft Office release on computers that run Windows Vista or Windows XP in domain–based environments.
http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=a12eca33-a20d-45e2-895c-5e021f3ae4c5

GPOAccelerator
The GPOAccelerator creates all the Group Policy objects (GPOs) that you need to deploy recommended security settings for your environment to save you hours of work that you would otherwise need to configure these settings. This Solution Accelerator includes guidance to assist you with this tool.
http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=a46f1dbe-760c-4807-a82f-4f02ae3c97b0

Local Security Authority Merged IDL File - English
This file contains the complete set of IDL definitions for the lsarpc interface, which is associated with the [MS-LSAD] and [MS-LSAT] protocol documents. It has been created by merging the "Full IDL" sections of said documents.
http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=7700ad04-866b-447a-9e08-21dbda94460f

2007 Office system (SP2) Administrative Template files (ADM, ADMX, ADML) and Office Customization Tool
This download includes updated Group Policy Administrative Template and Office Customization Tool OPA files; an updated Office Customization Tool; and ADMX and ADML versions of the Administrative Template files. This update assumes that you have updated your 2007 Office System applications with the 2007 Office System Service Pack 2 (SP2).
http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=73d955c0-da87-4bc2-bbf6-260e700519a8

ADMX Migrator
ADMX Migrator is a snap-in for the Microsoft Management Console (MMC) that simplifies the process of converting your existing Group Policy ADM Templates to the new ADMX format and provides a graphical user interface for creating and editing Administrative templates.
http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=0f1eec3d-10c4-4b5f-9625-97c2f731090c

Group Policy Settings Reference for Windows Internet Explorer 8
This spreadsheet lists the policy settings for computer and user configurations included in the administrative template files (admx/adml) delivered with Windows Internet Explorer 8.
http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=ab4655f2-0a3c-42eb-974d-24b2790bf592

Microsoft Internet Security and Acceleration (ISA) Server Best Practices Analyzer (BPA) Tool
The ISA Server Best Practices Analyzer Tool is designed for administrators who want to determine the overall health of their ISA Server computers and to diagnose current problems. The tool scans the configuration settings of the local ISA Server computer and reports issues that do not conform to the recommended best practices.
http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=d22ec2b9-4cd3-4bb6-91ec-0829e5f84063

Microsoft Online Services Sign In
Use this Sign In application to access Microsoft Online Services.
http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=5c2ca866-4107-4ae5-98d5-76bf1b18ff87

Microsoft Online Services Directory Synchronization
Use this tool to synchronize local directory services to Microsoft Online Services
http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=f536cac9-c0fb-48d1-b22c-378ba92c1c9f

Update for Windows Mail Junk E-mail Filter [May 2009] (KB905866)
Install this update for Windows Mail to revise the definition files that are used to detect e-mail messages that should be considered junk e-mail or that may contain phishing content.
http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=aa029fde-f341-44fc-8b85-0c6f3d3c2d69

Update for Windows Mail Junk E-mail Filter for x64-based Systems [May 2009] (KB905866)
Install this update for Windows Mail to revise the definition files that are used to detect e-mail messages that should be considered junk e-mail or that may contain phishing content.
http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=749e10cd-f40c-4f94-8e38-d4221ded7652

Microsoft® Windows® Malicious Software Removal Tool (KB890830) x64
This tool checks your computer for infection by specific, prevalent malicious software (including Blaster, Sasser, and Mydoom) and helps to remove the infection if it is found. Microsoft will release an updated version of this tool on the second Tuesday of each month.
http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=585d2bde-367f-495e-94e7-6349f4effc74

Microsoft® Windows® Malicious Software Removal Tool (KB890830)
This tool checks your computer for infection by specific, prevalent malicious software (including Blaster, Sasser, and Mydoom) and helps to remove the infection if it is found. Microsoft will release an updated version of this tool on the second Tuesday of each month.
http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=ad724ae0-e72d-4f54-9ab3-75b8eb148356

Microsoft Code Name "Geneva" SbS Guides and VMs
"Geneva" Step by Step Guides and Virtual Machines
http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=57602615-e1ee-4775-8b79-367b7007e178

Geneva Interop Whitepapers
http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=9eb1f3c7-84da-40eb-b9aa-44724c98e026

Security, Identity, and Access Management Datasheet
This offering provides an end-to-end security solution that allows you to move toward a dynamic IT infrastructure while ensuring better security integration, manageability, and efficiency.
http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=b53dee69-a3f9-4800-91a8-42c1b8b365db

Internet Explorer 8 Desktop Security Guide
Guidance for Enhancing Internet Explorer Security for Desktop Users
This white paper examines new features and settings that you can modify to provide a more "locked down" security configuration for Internet Explorer 8.
http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=44405777-51b4-4376-9cef-f0341b13fcde

Microsoft Security Development Lifecycle (SDL) - Version 4.1
Microsoft Security Development Lifecycle v4.1 Process Guidance
http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=967389d8-6ed0-4751-a8d2-9c2fad39adce

Microsoft SDL Process Template for Visual Studio Team System
The SDL Process Template is a downloadable template that integrates the Microsoft Security Development Lifecycle (SDL) directly into your Visual Studio Team System (VSTS) software development environment.
http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=79866b28-b03b-4bbb-91d2-0ed3f966dede

Forefront Identity Manager 2010 RC0 Demo Virtual Hard Disk Image
This package contains a Hyper-V-based demo of Forefront Identity Manager 2010 RC0 (formerly code-named ILM "2").
http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=4bb23110-94cd-4ad4-84e0-955d3e6ecb13

The Business Value of Extended Validation SSL Certificates
Understand the Business Value of EV Certificates
Learn about the business value of EV Certificates, and the process for obtaining the certificates for your websites.
http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=9948298f-1586-4cda-bee1-47b2ade78245

Increasing Your Organization’s Security and Privacy with Internet Explorer 8
Guidance for Enhancing Internet Explorer Security for Desktop Users
Learn about the emerging threat types on the web today and how Internet Explorer 8’s new security features help protect against them.
http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=198d40a4-6896-49b3-b8f2-c151e9797634

Forefront Threat Management Gateway and ISA Server

Announcing the Availability of ISA/TMG Best Practices Analyzer Version 7
What is new in Version 7 of IsaBPA?
• New Checks –15 new IsaBPA rules added, now collecting almost all ISA/TMG properties as well as environmental properties (now around 1500 settings collected). These settings are compared against ~235 rules. The focus on this release was targeting Configuration Storage Server and Active Directory authentication issues. This new suite joins Hardware, OS, Authentication, OWA, SSL Certificates; Site-to-site VPN with IPsec, WPLB, logging, NLB related issues and 3rd party software suites that were introduced in previous versions of IsaBPA.
• Enhanced IsaBPA viewer - It is now possible for Microsoft support engineers and the technically savvy ISA/TMG engineer to view the server configuration from the BPA report itself.
• New ISA Data Packager scenarios – The ISA Data Packager was enhanced to gather both IAG data as well as the ISA/TMG Firewall Client data. Data collection from Forefront TMG Medium Business Edition and above is now supported and also Configuration Change Tracking data is collected.
• BPA2Visio enhancement – The BPA2Visio visualization tool now includes BPA warnings and errors on the pictorial representation of the deployment in question, next to the violating links. Each node in the diagram contains now more data.
• More documentation – The IsaBPA help file has been augmented to over 130 pages. You can easily find information about how to operate IsaBPA, information about specific checks, and how to fix issues that IsaBPA has detected.
• Bug fixes –fixed several bugs and issues that were discovered in previous versions.
IsaBPAv7 is available now online at http://isabpa.com

Events/WebCasts

Security Webcast Calendar http://go.microsoft.com/fwlink/?LinkId=37910
Find security webcasts listed in an easy-to-use calendar format.

Upcoming Security Webcasts
http://www.microsoft.com/events/security/upcoming.mspx

TechNet Webcast: Fundamentals of Third-Party Security Management (Level 300)
Monday, June 01, 2009 10:00 A.M.-11:00 A.M. Pacific Time

TechNet Webcast: Microsoft Forefront code name “Stirling” - The next generation of Forefront Security for SharePoint (Level 200)
Tuesday, June 02, 2009 1:00 P.M.-2:00 P.M. Pacific Time

TechNet Webcast: Forefront code name “Stirling” - The next generation of Forefront Security for Exchange Server (Level 200)
Thursday, June 04, 2009 1:00 P.M.-2:00 P.M. Pacific Time

IT Manager Webcast: Platform Solution Blueprints: Security (Level 200)
Thursday, June 04, 2009 1:00 P.M.-2:30 P.M. Pacific Time

TechNet Webcast: Microsoft Exchange Hosted Filtering is now Forefront Online Security for Exchange (Level 200)
Tuesday, June 09, 2009 1:00 P.M.-2:00 P.M. Pacific Time

TechNet Webcast: Information About Microsoft June Security Bulletins (Level 200)
Wednesday, June 10, 2009 11:00 A.M.-12:30 P.M. Pacific Time

TechNet Webcast: Best Practices for Security with SQL Server 2008 and SafeNet Luna HSM Support (Level 300)
Thursday, June 18, 2009 8:00 A.M.-9:00 A.M. Pacific Time

On-Demand Security Webcasts
http://www.microsoft.com/events/security/ondemand.mspx

Security Awareness Materials http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11524381&s1=68628015-2ccc-cbc7-31b9-0e76c3415474
Guidance, samples, and templates for creating a security-awareness program in your organization.

Learn Security On the Job http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11524382&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Learning Paths for Security - Microsoft Training References and Resources http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11524383&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Visit TechNet Spotlight: www.microsoft.com/technetspotlight
Video on Demand, Video Downloads, PowerPoint Presentations, Audio and more

New or updated KB’s

Microsoft Internet Security and Acceleration Server

FIX: An error occurs when a Web server reads cookies that are sent from a client through ISA Server 2006
http://support.microsoft.com/kb/968217

FIX: Forms-based authentication in ISA Server 2006 still does not change a password on the second attempt if the user typed inconsistent passwords in the password confirmation of the first attempt
http://support.microsoft.com/kb/969296

FIX: The ISA Server Control service cannot start after you install the MS09-012 update on a computer that is running Windows Server 2003 and that has more than 4 CPU cores
http://support.microsoft.com/kb/970441

FIX: VPN client access through ISA Server 2006 stops unexpectedly and Event ID 21122 is logged in the Application log
http://support.microsoft.com/kb/969666

FIX: The wspsrv process in ISA Server 2006 randomly crashes and an Application Error event is logged
http://support.microsoft.com/kb/968218

FIX: A user who enters an empty user name or password on a customized logon form is redirected to the default error page of ISA Server 2006 instead of a customized error page
http://support.microsoft.com/kb/968380

FIX: The ISA Server Firewall service crashes when a third-party Web filter calls the WriteClient function
http://support.microsoft.com/kb/970440

Description of the ISA Server 2006 hotfix package: April 21, 2009
http://support.microsoft.com/kb/970443

Microsoft Intelligent Application Gateway 2007

Support for Citrix XenApp5 applications is added to Intelligent Application Gateway 2007
http://support.microsoft.com/kb/967978

Full support for unattended installation and uninstallation is added to Intelligent Application Gateway 2007 Client Components setup
http://support.microsoft.com/kb/961348

Users cannot log on again after the automatic logoff period has elapsed if you use ADFS as the authentication scheme in Intelligent Application Gateway 2007
http://support.microsoft.com/kb/967737

Intelligent Application Gateway 2007 cannot parse cookies that contain comma characters
http://support.microsoft.com/kb/962860

FIX: The logon fails when you try to access IAG 2007 portals by using a user account whose name contains multibyte characters
http://support.microsoft.com/kb/967899

FIX: Error message when IAG checks the password expiration and you use the Active Directory repository on LDAPS: "Server Not Operational"
http://support.microsoft.com/kb/967695

FIX: IAG 2007 Detection Center (WMI Detection) does not detect some security products that are installed on a Windows Vista SP1-based client computer
http://support.microsoft.com/kb/961350

FIX: The operation fails and the user receives an error message when a user tries to add an attachment in Exchange 2003 OWA that is published by using the IAG 2007 default template
http://support.microsoft.com/kb/968318

FIX: The formatting on the portal is lost when you try to use a customized cascading style sheet for an IAG 2007 portal
http://support.microsoft.com/kb/967979

FIX: Error message when you run a statistics report in Intelligent Application Gateway 2007 Web Monitor: "Active Server Pages, ASP 0113"
http://support.microsoft.com/kb/967977

Windows Mobile users cannot synchronize, or synchronization causes messages to be resent when you publish ActiveSync in Intelligent Application Gateway 2007
http://support.microsoft.com/kb/967881

FIX: You cannot connect to the IAG Web site by using Internet Explorer on a client that is running Windows 2000 after you install the IAG 2007 Service Pack 2 client components
http://support.microsoft.com/kb/967251

Users receive an error message when they change their signatures in an Exchange Server 2003 OWA site that is published in an Intelligent Application Gateway 2007 portal trunk
http://support.microsoft.com/kb/967250

FIX: The changes to the URL Set level are applied to an incorrect application in Intelligent Application Gateway 2007
http://support.microsoft.com/kb/967980

A custom endpoint detection script that uses the Whale.System.IsCertValid function in Intelligent Application Gateway 2007 cannot detect client certificates by their Subject Alternative Names
http://support.microsoft.com/kb/962861

Web Monitor pages are not displayed appropriately in IAG 2007 when an apostrophe character (') exists in a user name
http://support.microsoft.com/kb/967742

Events that are in the Application category are not logged to the Syslog server in Intelligent Application Gateway 2007 (968315)
http://support.microsoft.com/kb/967742

April 2009 - Technical Rollup Mail - Security

Justin Zarb — Wed, 01 Apr 2009 02:00:00 GMT

News

Security

Windows 7 Security Enhancements http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11524436&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

By Paul Cooke, Director, Windows Client Enterprise Security, Microsoft Corporation Security is still a top concern for IT professionals. Now that Windows 7 Beta is available, questions regarding what Microsoft has done with the Windows 7 operating system abound. This article covers a few of the key security-related changes and improvements.

Introducing the Microsoft Playbook for Application Architecture http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11524437&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Download this guide today and become more effective in building reliable, scalable, and secure applications on the Microsoft platform. Ideal for solution architects and developer leads, this guide provides design-level guidance for integrating security and other quality attributes into the architecture and design of applications built on the .NET Framework. It focuses on the most common types of applications, partitioning application functionality into layers, components, and services, and walks you through their key design characteristics.

Microsoft Forefront Threat Management Gateway Beta 2 Now Available http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11524438&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Try the next generation of Microsoft Internet Security & Acceleration (ISA) Server and experience key features that include Web antimalware, HTTPS inspection, and the Network Inspection System.

More detail on this topic is available in the downloads section.

Windows 7: To the Beta and Beyond http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11524439&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Watch as Mark Russinovich and a panel of subject matter experts discuss what's in store for IT pros with Windows 7. Learn about the evolution of features like Group Policy, BitLocker To Go, DirectAccess, BranchCache, and AppLocker then get tips on troubleshooting, security, deployment, and application compatibility.

7 Tips for Working Securely from Wireless Hotspots http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11614830&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

We all use wireless hotspots but they all have one thing in common: they are all open networks that are vulnerable to security breaches. In this article, we list seven tips to help you works securely in these public locations.

Interview: Kai Axford talking about Preventing Corporate Espionage http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11482172&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Fast, Free Readiness Assessments for Forefront Client Security http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11526588&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Download the Microsoft Assessment and Planning (MAP) Toolkit to assess the virus and spyware vulnerability of your client infrastructure, as well as your readiness for implementing Forefront Client Security.

Download New Forefront Security for Office Communications Server Trial http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11612254&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Help protect your instant messaging environment by blocking malware and out-of-policy content in IM conversations and file transfers with Forefront Security for Office Communications Server. The new release supports Office Communications Server 2007 Enterprise and Standard Editions, as well as OCS 2007 R2.

Microsoft Security Bulletin Summary for March, 2009

http://www.microsoft.com/technet/security/bulletin/ms09-mar.mspx

Microsoft Internet Security and Acceleration Server

Internet Security and Acceleration (ISA) Server 2006 is Common Criteria Evaluated

Microsoft Internet Security and Acceleration (ISA) Server 2006 has passed Common Criteria Evaluation Assurance Level 4+ (EAL 4+).

The certification work has been performed by the Federal Office for Information Security (BSI), the Common Criteria certification body of the German government.

http://www.microsoft.com/forefront/edgesecurity/isaserver/en/us/common-criteria.aspx

Microsoft Forefront Threat Management Gateway Beta 2 Now Available!

Try the next generation of Microsoft Internet Security & Acceleration (ISA) Server and experience key features that include Web antimalware, HTTPS inspection and the Network Inspection System.

http://go.microsoft.com/fwlink/?LinkID=141234&clcid=0x409

Forefront Edge Security TechCenter

http://technet.microsoft.com/en-gb/forefront/edgesecurity/default.aspx

Please note that if you have feedback on documentation or wish to request new documents - email isadocs@microsoft.com

Forefront Edge Security Community

http://technet.microsoft.com/en-gb/forefront/edgesecurity/bb687298.aspx

New Community Contributed Content includes:

Considerations when Renewing Web Listener Certificates on ISA Server 2006

http://technet.microsoft.com/en-gb/library/dd547090.aspx

Another Look at Server Publishing in ISA Server 2006

http://technet.microsoft.com/en-gb/library/dd547089.aspx

Forefront TMG (ISA Server) Product Team Blog

The ISA Server Product Team Blog (http://blogs.technet.com/isablog/) is updated on a regular basis. Latest entries include:

How to Allow HTTP 301 through ISA Server 2006

http://blogs.technet.com/isablog/archive/2009/03/04/how-to-allow-http-301-through-isa-server-2006.aspx

New Articles at Tales from the Edge

http://blogs.technet.com/isablog/archive/2009/03/06/new-articles-at-tales-from-the-edge.aspx

Internet Security and Acceleration (ISA) Server 2006 is Common Criteria Evaluated

http://blogs.technet.com/isablog/archive/2009/03/07/internet-security-and-acceleration-isa-server-2006-is-common-criteria-evaluated.aspx

It worked for us: honey pot sensor catches malware

http://blogs.technet.com/isablog/archive/2009/03/09/it-worked-for-us-honey-pot-sensor-catches-malware.aspx

Unable to Start Microsoft Firewall Service in ISA Server 2006

http://blogs.technet.com/isablog/archive/2009/03/10/unable-to-start-microsoft-firewall-service-in-isa-server-2006.aspx

Best practices for configuring ISA/TMG to allow SQM data

http://blogs.technet.com/isablog/archive/2009/03/16/best-practices-for-configuring-isa-tmg-to-allow-sqm-data.aspx

SQL Server 2005 Express Edition Service Pack 3 fails to install on a TMG machine

http://blogs.technet.com/isablog/archive/2009/03/16/sql-server-2005-express-edition-service-pack-3-fails-to-install-on-a-tmg-machine.aspx

Clients receives error 691 trying to connect to ISA Server 2006 as VPN Server

http://blogs.technet.com/isablog/archive/2009/03/19/clients-receives-error-691-trying-to-connect-to-isa-server-2006-as-vpn-server.aspx

MS09-008 may affect ISA Server or Forefront TMG Deployments

http://blogs.technet.com/isablog/archive/2009/03/30/ms09-008-may-affect-isa-server-or-forefront-tmg-deployments.aspx

Intelligent Application Gateway 2007

Intelligent Application Gateway 2007 Technical Resources

http://technet.microsoft.com/en-gb/forefront/edgesecurity/bb687299.aspx

Forefront Edge Security Community

http://technet.microsoft.com/en-gb/forefront/edgesecurity/bb687298.aspx

Intelligent Application Gateway Product Team Blog

The IAG Product Team Blog (http://blogs.technet.com/edgeaccessblog) is updated on a regular basis. Latest entries include:

Publishing CRM Outlook Client Using IAG SP2

http://blogs.technet.com/edgeaccessblog/archive/2009/03/09/publishing-crm-outlook-client-using-iag-sp2.aspx

Documents

Security Compliance Management Toolkit Series http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11524440&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Designed to help you secure and monitor Windows operating systems and the 2007 Microsoft Office system installations, this series marks the next generation of Microsoft security guides. This release includes updated security guides, predefined Group Policy policies, the GPOAccelerator tool, and configuration packs to help you plan, deploy, and monitor your Windows and Office 2007 security baselines.

What's New in Windows 7 for IT Pros http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11524441&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

With Windows 7, IT professionals can provide more capabilities and support greater flexibility for their users, while continuing to minimize cost and security risks. Check out short overviews of what’s new in Group Policy, biometrics, smart cards, and more.

Windows 7 Video Walkthrough: BitLocker and BitLocker To Go http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11524442&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Learn about enhancements to core BitLocker Drive Encryption functionality and the new BitLocker To Go, which gives system administrators control over how removable storage devices can be used and what strength of protection is required.

Windows 7 Video Walkthrough: AppLocker http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11524443&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

AppLocker is a flexible, easily administered mechanism you can use to specify exactly what is allowed to run on user desktops. Learn how you can realize the security, operational, and compliance benefits of application standardization by using AppLocker.

A Day in the Life: Windows Vista Security http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11524444&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

In this video, VistaPCGuy Kyle Rosenthal takes you on a journey through the tools that you may use every day as an IT administrator to manage and configure the security of a Windows Vista machine -- tools such as Windows Firewall and Windows Defender.

Downloads

Microsoft Forefront Server Security Management Console Documentation

Forefront Server Security Management Console allows administrators to easily manage Forefront Security for Exchange Server, Forefront Security for SharePoint, and Microsoft Antigen.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=ae4ce23b-9e1e-455c-87a4-36167fe43107

Privacy Guidelines for Developing Software Products and Services

This document is a set of privacy guidelines for developing software products and services that are based on our internal guidelines and our experience incorporating privacy into the development process.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=c48cf80f-6e87-48f5-83ec-a18d1ad2fc1f

Update for Root Certificates

This item updates the list of root certificates on your computer to the list that is accepted by Microsoft as part of the Microsoft Root Certificate Program.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=f814ec0e-ee7e-435e-99f8-20b44d4531b0

Microsoft Forefront Security for Exchange Server with SP1 Documentation

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=5cd4e36e-2dab-44d6-990e-3b8184b1cb1b

Creating a Systemized Approach to Regulatory Compliance at Microsoft

Detailed discussion of some of the processes and tools that the Microsoft Information Technology (Microsoft IT) group currently uses to systemize the approach of supporting regulatory compliance activities at Microsoft.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=89f7b1ec-b04c-4ccc-b133-efaeeb038f41

Data Encryption Toolkit for Mobile PCs

This toolkit is intended to help you secure the data on your organization’s mobile PCs--in a cost-effective way--using Encrypting File System (EFS) and Microsoft BitLocker Drive Encryption (BitLocker) technologies.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=1a99576a-fe67-418f-88b1-81e2055fe977

Microsoft Forefront Security for SharePoint with SP1 Documentation

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=125efb1e-7ff8-4cc8-934a-28fc7c7e59f0

Microsoft Antigen SP1 Documentation

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=7d00160e-4d15-4459-98a3-89f393ac008e

IT Showcase: How Microsoft Deployed and Manages Microsoft Forefront Client Security

Microsoft IT details the planning, deployment, and ongoing management of the largest currently deployment of Forefront Client Security with a supported node population of 40,000.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=4664e8b7-5eca-4ea1-ae69-898f9d6503bc

Information Privacy and Data Protection in the Public Sector

A Microsoft perspective on the role of technology in protecting citizens’ privacy and personal information

Public Sector privacy white paper, providing Microsoft's perspective on the role that technology plays in helping public organizations responsibly protect and manage personal information.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=3a43d660-54c3-47b2-810b-92df1ee12a6a

Microsoft Exchange Hosted Filtering Service Level Agreement (SLA)

Exchange Hosted Filtering SLA

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=f5714ed7-f14d-499e-b7d9-3365c9008113

Microsoft Security Assessment Tool 4.0

The Microsoft Security Assessment Tool (MSAT) is a risk-assessment application designed to provide information and recommendations about best practices for security within an information technology (IT) infrastructure.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=cd057d9d-86b9-4e35-9733-7acb0b2a3ca1

Microsoft Online Services Sign In

Use this Sign In application to access Microsoft Online Services.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=5c2ca866-4107-4ae5-98d5-76bf1b18ff87

Microsoft Online Services Directory Synchronization

Use this tool to synchronize local directory services to Microsoft Online Services.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=f536cac9-c0fb-48d1-b22c-378ba92c1c9f

Microsoft Dynamics AX 2009 White Paper: Configuring Kerberos Authentication with Role Centers

How to configure Kerberos authentication for Microsoft SQL Server reporting with Enterprise Portal Role Center pages.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=be720eb3-649a-49ff-b019-a1e4e7af6b47

Microsoft Forefront Server Security Management Console Documentation

Forefront Server Security Management Console allows administrators to easily manage Forefront Security for Exchange Server, Forefront Security for SharePoint, and Microsoft Antigen.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=ae4ce23b-9e1e-455c-87a4-36167fe43107

Microsoft HealthVault Connection Center Beta 2 for Windows XP

HealthVault Connection Center is free software from Microsoft. You can use it to upload data to HealthVault from health and fitness devices (such as blood pressure monitors, pedometers, glucometers and many others) and the HealthVault Gadget for Windows Sidebar. HealthVault Connection Center connects your device, your computer and your HealthVault record to manage the upload process for you.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=73b45ded-c81c-4505-a1a7-2dd3686e95b1

Microsoft HealthVault Connection Center Beta 2 for Windows Vista

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=a715ffaa-6111-4976-b334-f29bd5d4984d

Security Guidance for Writing and Deploying Silverlight Applications

Provides security guidance when developing and deploying Microsoft Silverlight 2 applications.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=7cef15a8-8ae6-48eb-9621-ee35c2547773

Understanding Executable Content in Microsoft Products

Microsoft uses the concept of “unsafe file types” to help better protect users from executable content that an attacker could embed in such files. This document discusses executable file types in certain Microsoft products

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=b7d03027-9791-443b-8bbe-0542b3aa4bfe

Microsoft® Forefront Threat Management Gateway (TMG), Medium Business Edition Tools & Software Development Kit

The tools available here provide diagnostics and other feature-related tools, and the software development kit, for Forefront TMG, Medium Business Edition.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=82027864-4abd-4896-8255-55f6ea775489

Certificate Revocation Checking in Windows Vista and Windows Server 2008

This document provides details to system administrators how to optimize configuration of revocation checking features in Windows Vista and Windows Server 2008 to provide more timely revocation information to clients.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=361c4644-9b1b-41fd-aaf9-370717edcbbc

SharePoint Collaboration Service Governance Plan

Outline the administration, maintenance, and support of an Office SharePoint® Server 2007 deployment.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=ed2e4753-f162-4c23-ba9e-beb8c88f74d4

Version 2 of Addressing a Commercial Grade Operating System Security Functional Requirement Set with Windows Vista and Server 2008

Addressing a Commercial Grade Operating System Security Functional Requirement Set with Windows Vista and Server 2008, Version 2.0

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=5c60d3f5-6292-4c26-8eee-373a7c4e6e6e

Group Policy Settings Reference for Windows Internet Explorer 8

This spreadsheet lists the policy settings for computer and user configurations included in the administrative template files (admx/adml) delivered with Windows Internet Explorer 8.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=ab4655f2-0a3c-42eb-974d-24b2790bf592

Forefront Threat Management Gateway

Forefront Threat Management Gateway Beta 2

http://www.microsoft.com/downloads/details.aspx?FamilyID=e05aecbc-d0eb-4e0f-a5db-8f236995bccd&displaylang=en

Microsoft Forefront Threat Management Gateway is a comprehensive secure Web gateway that helps protect Web-using employees from threats on the Web with an enterprise-class Web proxy and anti-malware functionality. Forefront TMG helps ensure that encrypted Web sessions (SSL) are protected from threats. It also delivers simple, unified perimeter security to protect networks from attack by providing an integrated application and network-layer firewall, intrusion prevention, VPN connectivity, and management of e-mail security. It enables you to easily maximize existing information technology (IT) investments by improving network security and performance. The newly added protection technologies will help you inspect e-mail traffic for spam and malware and enforce content policy compliance in your organization. Furthermore, Forefront TMG protects the organization from zero-day-attacks, and inspects outbound HTTP and HTTPS traffic to improve Internet security for your organization.

Forefront TMG Beta 2 can help you:

• Protect users from Web browsing threats (Secure Web Gateway)

• Control network Access at the edge (Firewall)

• Protect users from e-mail threats (E-mail Protection)

• Protect desktops and servers from intrusion attempts (Network Inspection System, Security Assessment Sharing)

• Enable users to remotely access corporate resources (VPN, Secure Web Publishing)

• Simplify management and deployment

• Integrate with the Forefront Security Suite (codename Stirling) to provide a unified security solution for protecting all of the assets in your organization

Note: Connecting Forefront TMG to a Stirling Server is supported only with the public Beta 2 of Forefront Codenamed Stirling

Events/WebCasts

Security Program Guide

Security Awareness Materials http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11524381&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Guidance, samples, and templates for creating a security-awareness program in your organization.

Learn Security On the Job http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11524382&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Visit TechNet Spotlight: www.microsoft.com/technetspotlight

Video on Demand, Video Downloads, PowerPoint Presentations, Audio and more

Microsoft Security Webcast Series: Upcoming and On-Demand

Security Webcast Calendar http://go.microsoft.com/fwlink/?LinkId=37910

Find security webcasts listed in an easy-to-use calendar format.

Upcoming Security Webcasts

http://www.microsoft.com/events/security/upcoming.mspx

Register for the following Webcasts on the link above

TechNet Webcast: Management Lockdown of Windows Mobile Devices (Level 300)

Thursday, April 09, 2009 11:30 A.M.-12:30 P.M. Pacific Time

TechNet Webcast: Information About Microsoft April Security Bulletins (Level 200)

Wednesday, April 15, 2009 11:00 A.M.-12:30 P.M. Pacific Time

Momentum Webcast Microsoft Online Services (Part 2 of 4): Enterprise-Class Security and Reliability (Level 200)

Thursday, April 16, 2009 11:00 A.M.-11:45 A.M. Pacific Time

On-Demand Security Webcasts

http://www.microsoft.com/events/security/ondemand.mspx

New or updated KB’s

Microsoft Internet Security and Acceleration Server

An update is available for ISA Server 2006 integrated NLB that lets you add virtual IP addresses that are outside the subnet of the dedicated IP address

http://support.microsoft.com/kb/959310

ISA Server 2006 sends back an HTTP 502 error if invalid credentials are provided to an FBA Web listener

http://support.microsoft.com/kb/958952

Description of the ISA Server 2006 hotfix package: October 29, 2008

http://support.microsoft.com/kb/959357

ISA Server 2006 resets the connection to the SMTP client when the SMTP server closes its connection to ISA Server

http://support.microsoft.com/kb/959312

FIX: A user who did not generate much Web traffic appears in a top Web users report in ISA Server 2004 Standard Edition

http://support.microsoft.com/kb/960669

How to change the default behavior for client certificate mapping when you use forms-based authentication with Active Directory in ISA Server 2006 Service Pack 1

http://support.microsoft.com/kb/953684

March 2009 - Technical Rollup Mail - Security

conuktrm — Tue, 03 Mar 2009 01:24:00 GMT

News

Security

An Introduction to Hyper-V in Windows Server 2008 http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11343487&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

By Rajiv Arunkundram, Senior Product Manager, Windows Server The introduction of Hyper-V makes virtualization an even more compelling solution for IT environments. Get an overview of today’s virtualization market and see how Hyper-V improves the manageability, reliability, and security of virtualization.

CIO Article: Can Mozilla Support Claims of Firefox Being the Most Secure Web Browser? http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11343488&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

In an article from an upcoming series in CIO Magazine, Jeff Jones from the Microsoft Trustworthy Computing (TwC) group addresses browser security and “the safest Web browser.”

Evaluate Microsoft Forefront Security for Office Communications Server Beta 3 http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11343489&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Microsoft Forefront Security for Office Communications Server provides fast and effective protection against IM-based malware by including multiple scanning engines from industry-leading security partners, and it helps reduce corporate liability by blocking IM messages containing inappropriate content.

Analyst Report: The Microsoft Security Development Lifecycle (SDL) and the Org Chart http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11343490&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Examine how Microsoft uses defense-in-depth at an organization level to ensure that there are many opportunities to detect and remove software vulnerabilities. You'll see how security responsibilities are assigned, from the individual developer to the global security team.

Analyst Report: The SDL Threat Modeling Process http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11343491&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Security doesn't start with coding, it starts with secure design. In this article, you'll see how Microsoft uses threat modeling to ensure secure design and prevent vulnerabilities that could not be fixed with simple coding changes.

Secure Your Desktops with Newly Released Microsoft Assessment and Planning Toolkit 3.2 http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11343492&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Antivirus and anti-malware protection is key to the security of your business desktops and laptops. Use the newly released Microsoft Assessment and Planning (MAP) Toolkit 3.2 to assess if they are vulnerable to viruses and malware. This free toolkit also helps you migrate to Windows Vista, the 2007 Microsoft Office system, Windows Server 2008, Windows Server 2008 Hyper-V, Microsoft Virtual Server 2005 R2, Microsoft SQL Server 2008, Microsoft Application Virtualization 4.5 (formerly SoftGrid), Microsoft Online Services, and Microsoft Forefront.

Microsoft Security Bulletin Summary for February, 2009

http://www.microsoft.com/technet/security/bulletin/ms09-feb.mspx

Download Microsoft Forefront Threat Management Gateway Beta 2 http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11431803&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Try the next generation of Microsoft Internet Security & Acceleration (ISA) Server and experience key features that include Web anti-malware, HTTPS inspection and the Network Inspection System.

Download the Security Development Lifecycle Optimization Model http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11431804&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

The Microsoft SDL Optimization Model is a strategic framework which facilitates consistent and cost-effective implementation of the SDL in development organizations outside of Microsoft. Self-assess your current state of security in development and create a strategy and roadmap to progressively attain measurable security improvements with the Security Development Lifecycle Optimization Model.

Microsoft Security Response Center Blog Alerts

The Microsoft Security Response Center (MSRC) blog provides a real-time way for the MSRC to communicate with customers. Topics include day-to-day, "behind the scenes" information to help customers understand Microsoft security response efforts; updates during the early stages of security incidents; and regular postings for the bulletin release cycle.

RSS: MSRC Blog http://blogs.technet.com/msrc/rss.xml

Windows Live Alert: MSRC Blog http://signup.alerts.msn.com/alerts/login.do?PINID=32551266&returnurl=http://blogs.technet.com/msrc

Microsoft Internet Security and Acceleration Server

Microsoft Forefront Threat Management Gateway Beta 2 Now Available! http://go.microsoft.com/fwlink/?LinkID=141234&clcid=0x409

Try the next generation of Microsoft Internet Security & Acceleration (ISA) Server and experience key features that include Web antimalware, HTTPS inspection and the Network Inspection System.

Forefront Edge Security TechCenter http://technet.microsoft.com/en-gb/forefront/edgesecurity/default.aspx

Please note that if you have feedback on documentation or wish to request new documents - email isadocs@microsoft.com

Forefront Edge Security Community http://technet.microsoft.com/en-gb/forefront/edgesecurity/bb687298.aspx

New Community Contributed Content includes: http://technet.microsoft.com/en-gb/library/dd316279.aspx

Troubleshooting Forms Base Authentication using Secure LDAP Authentication on ISA Server 2006

Forefront TMG (ISA Server) Product Team Blog

The ISA Server Product Team Blog (http://blogs.technet.com/isablog/) is updated on a regular basis. Latest entries include:

How-to get NLB to work with Forefront TMG Beta2 when running in Hyper-V. http://blogs.technet.com/isablog/archive/2009/02/23/how-to-get-nlb-to-work-with-forefront-tmg-beta2-when-running-in-hyper-v.aspx

Caching Comments from Yahoo's Mark Nottingham http://blogs.technet.com/isablog/archive/2009/02/23/caching-comments-from-yahoo-s-mark-nottingham.aspx

ISA Server Build Numbers http://blogs.technet.com/isablog/archive/2009/02/25/isa-server-build-numbers.aspx

AD Marker method used for automatic detection for Firewall clients http://blogs.technet.com/isablog/archive/2009/02/25/ad-marker-method-used-for-automatic-detection-for-firewall-clients.aspx

Forefront TMG Beta 2: Virtualization Ready http://blogs.technet.com/isablog/archive/2009/02/27/forefront-tmg-beta-2-virtualization-ready.aspx

Cannot Browse a HTTPs Site Published by ISA Server 2006 without using TLS 1.0 on Internet Explorer

http://blogs.technet.com/isablog/archive/2009/02/28/cannot-browse-a-https-published-by-isa-server-2006-without-using-tls-1-0-on-internet-explorer.aspx

Intelligent Application Gateway 2007

Try Intelligent Application Gateway (IAG) SP2 http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11345324&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

IAG SP2 improves overall IAG scalability, interoperability, and functionality. It also has the ability to run as a virtual machine on Hyper-V for lower TCO, deployment flexibility, and simplified disaster recovery. Download the fully functional trial version which can be used in the production environment without an evaluation appliance.

Intelligent Application Gateway 2007 Technical Resources http://technet.microsoft.com/en-gb/forefront/edgesecurity/bb687299.aspx

Forefront Edge Security Community http://technet.microsoft.com/en-gb/forefront/edgesecurity/bb687298.aspx

Intelligent Application Gateway Product Team Blog

The IAG Product Team Blog (http://blogs.technet.com/edgeaccessblog) is updated on a regular basis. Latest entries include:

Enabling SharePoint bookmarking for SharePoint AAM Optimizer in IAG SP1 http://blogs.technet.com/edgeaccessblog/archive/2009/02/08/enabling-sharepoint-bookmarking-for-sharepoint-aam-optimizer-in-iag-sp1.aspx

Documents

Protect Your Network from Conficker http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11343493&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Starting in November 2008, the Microsoft Malware Protection Center (MMPC) began detecting variants of the Conficker worm. Learn how to help protect your systems from Conficker -- and how to recover systems that have been infected by this worm -- which seeks to propagate itself through network-based attacks.

Planning for Hyper-V Security http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11343494&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Securing the virtualization server involves all the measures you take to secure any Windows Server 2008 server role, plus a few extra to help secure the virtual machines, configuration files, and data. This month’s tip offers best practices to improve the security of your virtualization servers configured with the Hyper-V role, many of which apply to other virtualization servers as well.

Security in a Virtual World http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11343495&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

As with any new technology, there are plenty of myths out there about protecting virtual servers. This article addresses the top-three virtual security myths and offers a few observations for those considering the virtual route.

Hyper-V Security Guide: Beta Release http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11343496&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

This security guide provides IT professionals like you with guidance, instructions, and recommendations to address your key security concerns about server virtualization: hardening Hyper-V, virtual machine management and delegation, and protecting virtual machines. The beta release is available now for your review through March 6. After joining the Beta review program, bookmark this link <http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11343416&s1=68628015-2ccc-cbc7-31b9-0e76c3415474> to the program site to get the latest information about upcoming events.

Microsoft Application Virtualization 4.5 Security Configuration Roles http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11343497&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Learn about Microsoft Application Virtualization 4.5 Security Configuration Roles, which can be used to help protect and harden your Application Virtualization environment on Windows Server 2003 and 2008 by closing or disabling unnecessary ports and services reducing the overall attack surface.

Security Considerations with Forefront Edge Virtual Deployments http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11343498&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

This article provides specific guidelines for deploying Microsoft Internet Security and Acceleration (ISA) Server and Microsoft Forefront Threat Management Gateway within hardware virtualization.

How Do I: Get Started with Code Access Security? http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11343499&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Watch this video to learn the basics of Code Access Security, the integrated security model in the Microsoft .NET Framework, particularly how Code Access Security works conceptually and how to implement it with a simple application.

How Do I: Learn More About Encryption? http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11343500&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

In this video, you can learn the basics behind encryption algorithms and practices used to create cryptographic schemes. Learn more about symmetric and asymmetric encryption algorithms, the SHA256 hash encryption algorithms, and how to implement in a simple application.

New Video on TechNet Edge: MSAT Interview http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11343501&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

View this short Microsoft Silverlight video to see two experts from TwC discuss the Microsoft Security Assessment Tool (MSAT) and how it helps IT professionals solve a common security problem -- establishing a baseline for security in your enterprise and managing an action plan for resolution of security challenges.

Downloads

Microsoft Forefront Security for SharePoint with Service Pack 2

Forefront Security for SharePoint with Service Pack 2 helps business protect their Microsoft Office SharePoint Server 2007 and Windows SharePoint Services 3.0 collaboration environments by eliminating documents containing malicious code, confidential information, and inappropriate content.

http://www.microsoft.com/downloads/details.aspx?FamilyID=e06453b8-b2dd-4177-969c-2f89aa841e11&DisplayLang=en

MSDN TV: Thinking About Security - Secure by Design, Secure by Default, Secure in Deployment and Communications

In this episode, Michael Howard outlines a simple, yet effective way of thinking about how to build secure applications using SD3+C.

http://www.microsoft.com/downloads/details.aspx?FamilyID=b1418e26-3f3f-464e-8196-da6954e1e480&DisplayLang=en

MSDN TV: Matt's Top 10 Tips for Securely Testing

Matt Clapham outlines the top 10 tips testers should know to securely test applications.

http://www.microsoft.com/downloads/details.aspx?FamilyID=6dd3da05-399a-40ec-a14e-ba3fbdff41ed&DisplayLang=en

Microsoft Forefront Server Security Management Console Trial Version

Forefront Server Security Management Console allows administrators to easily manage Forefront Security for Exchange Server, Forefront Security for SharePoint, and Microsoft Antigen.

http://www.microsoft.com/downloads/details.aspx?FamilyID=f9b669c6-6f9f-4c09-8457-c00b5b6ebd7a&DisplayLang=en

Microsoft Forefront Server Security v11 Beta 2 Privacy Statement

This document describes the privacy policy for the Beta 2 release of Microsoft Forefront Security for Exchange Server v11 and Microsoft Forefront Security for SharePoint v11.

http://www.microsoft.com/downloads/details.aspx?FamilyID=72d99943-8558-4b31-bcf8-bbc08e3a2ffa&DisplayLang=en

Microsoft Forefront Codename "Stirling" Beta Privacy Statement

This document describes the privacy policy for Microsoft® Forefront Client Security.

http://www.microsoft.com/downloads/details.aspx?FamilyID=d34c6d9c-a555-4432-bb32-af21f5a6feab&DisplayLang=en

Improving Microsoft Dynamics CRM Performance and Securing Data with Microsoft SQL Server 2008

This paper provides an overview, benchmark results, and recommendations for implementing selected Microsoft SQL Server 2008 features that can improve the performance of Microsoft Dynamics CRM 4.0 and secure the CRM database.

http://www.microsoft.com/downloads/details.aspx?FamilyID=b5bb47a4-5ece-4a2a-a9b5-5435264f627d&DisplayLang=en

Microsoft SQL Server 2008 Privacy Statement

Read the Privacy Statement document for Microsoft SQL Server 2008.

http://www.microsoft.com/downloads/details.aspx?FamilyID=e7f89bf5-d80c-46b5-a12f-fade6d41330d&DisplayLang=en

Planning Guide for Microsoft Advanced Group Policy Management

This guide provides administrators with an in-depth description of the processes, procedures, and decisions for planning the deployment of Microsoft Advanced Group Policy Management (AGPM) in a production environment.

http://www.microsoft.com/downloads/details.aspx?FamilyID=5ed2bcd7-214a-4606-8e91-369c3623ee89&DisplayLang=en

Immunity, Inc. White Paper - A Bounds Check on the Microsoft Exploitability Index

A third-party evaluation on Microsoft's Exploitability Index

http://www.microsoft.com/downloads/details.aspx?FamilyID=0c6e07b5-43ce-4da1-873e-2d604106574c&DisplayLang=en

Domain Name System Security Extensions

This guide provides an overview of Domain Name System (DNS) Security Extensions (DNSSEC) and information about how to deploy DNSSEC on the Windows Server 2008 R2 and Windows 7 operating systems.

http://www.microsoft.com/downloads/details.aspx?FamilyID=7a005a14-f740-4689-8c43-9952b5c3d36f&DisplayLang=en

Microsoft Office Communications Server 2007 R2 Client Group Policy Documentation

This download package contains the Communicator.adm file and a Group Policies Spreadsheet that lists the Group Policy settings for Office Communications Server 2007 R2 clients.

http://www.microsoft.com/downloads/details.aspx?FamilyID=5d6f4b90-6980-430b-9f97-ffadbc07b7a9&DisplayLang=en

Microsoft Online Services Sign In

Use this Sign In application to access Microsoft Online Services.

http://www.microsoft.com/downloads/details.aspx?FamilyID=5c2ca866-4107-4ae5-98d5-76bf1b18ff87&DisplayLang=en

Microsoft Forefront Security for Exchange Server with Service Pack 1

Help protect your Exchange server from viruses and other malware.

http://www.microsoft.com/downloads/details.aspx?FamilyID=2ceb14d4-404b-4d8f-8a21-ebfc71b2e82b&DisplayLang=en

Forefront Threat Management Gateway Beta 2

Microsoft Forefront Threat Management Gateway is a comprehensive secure Web gateway that helps protect your corporate assets and employees from Web threats. It also delivers easy-to-use, unified perimeter security to protect networks from attack.

http://www.microsoft.com/downloads/details.aspx?FamilyID=e05aecbc-d0eb-4e0f-a5db-8f236995bccd&DisplayLang=en

Update for Windows Mail Junk E-mail Filter [February 2009] (KB905866)

Install this update for Windows Mail to revise the definition files that are used to detect e-mail messages that should be considered junk e-mail or that may contain phishing content.

http://www.microsoft.com/downloads/details.aspx?FamilyID=aa029fde-f341-44fc-8b85-0c6f3d3c2d69&DisplayLang=en

Update for Windows Mail Junk E-mail Filter for x64-based Systems [February 2009] (KB905866)

Install this update for Windows Mail to revise the definition files that are used to detect e-mail messages that should be considered junk e-mail or that may contain phishing content.

http://www.microsoft.com/downloads/details.aspx?FamilyID=749e10cd-f40c-4f94-8e38-d4221ded7652&DisplayLang=en

February 2009 Security Release ISO Image

This DVD5 ISO image file contains the security updates for Windows released on Windows Update on February 10th, 2009.

http://www.microsoft.com/downloads/details.aspx?FamilyID=b298d437-0284-48a7-ae4a-df7fe948d133&DisplayLang=en

Forefront Security for Office Communications Server 2007 Beta 3

Microsoft Forefront Security for Office Communications Server provides fast, effective protection against malware and out-of-policy content for instant messaging environments.

http://www.microsoft.com/downloads/details.aspx?FamilyID=d128fd1a-42a2-47cb-9de8-e4ea8ba2382d&DisplayLang=en

Microsoft Online Services Sign In

Use this Sign In application to access Microsoft Online Services.

http://www.microsoft.com/downloads/details.aspx?FamilyID=5c2ca866-4107-4ae5-98d5-76bf1b18ff87&DisplayLang=en

Microsoft® Windows® Malicious Software Removal Tool (KB890830) x64

http://www.microsoft.com/downloads/details.aspx?FamilyID=585d2bde-367f-495e-94e7-6349f4effc74&DisplayLang=en

Microsoft® Windows® Malicious Software Removal Tool (KB890830)

http://www.microsoft.com/downloads/details.aspx?FamilyID=ad724ae0-e72d-4f54-9ab3-75b8eb148356&DisplayLang=en

Windows Live ID Sign-in Assistant 6.5 (Beta)

The Windows Live ID Sign-in Assistant 6.5 (Beta) installs the Windows Live ID online provider for Windows 7. This provider enables linking a Windows Live ID to a Windows 7 user account

http://www.microsoft.com/downloads/details.aspx?FamilyID=ab44f9bb-0f20-4145-8c18-04339c0e3e6c&DisplayLang=en

Microsoft Dynamic IP Restrictions for IIS 7.0 - Beta (x86)

The Dynamic IP Restrictions Extension for IIS provides IT Professionals and Hosters a configurable module that helps mitigate or block Denial of Service Attacks or cracking of passwords through brute-force by temporarily blocking Internet Protocol (IP) addresses of HTTP clients.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=78a75004-42fb-4510-8525-b0bb5b33fc67

Microsoft Dynamic IP Restrictions for IIS 7.0 - Beta (x64)

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=937fba06-2338-4394-8c20-228806c498ed

Identity Lifecycle Management (ILM) Datasheet

This offering uses Microsoft Identity Integration Server (MIIS) 2003 and best practices to simplify digital identity management and maintain data integrity.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=712704a6-82a9-4bd1-96c6-83b2c9522dfd

Security, Identity, and Access Management Datasheet

This offering provides an end-to-end security solution that allows you to move toward a dynamic IT infrastructure while ensuring better security integration, manageability, and efficiency.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=b53dee69-a3f9-4800-91a8-42c1b8b365db

Microsoft Online Services Sign In

Use this Sign In application to access Microsoft Online Services.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=5c2ca866-4107-4ae5-98d5-76bf1b18ff87

Security Compliance Management Toolkit Series

Monitor the Security Compliance State of Your IT Environment for Computers Running Windows

This toolkit series provides IT professionals with an end-to-end solution to help your organization plan, deploy, and monitor security baselines of Windows® operating systems and 2007 Microsoft® Office applications.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=5534bee1-3cad-4bf0-b92b-a8e545573a3e

SDL Threat Modeling Tool 3.1

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=a48cccb1-814b-47b6-9d17-1e273f65ae19

Defense in Depth: Securing Windows Server 2003 Datasheet

This is Microsoft Services Defense in Depth: Securing Windows Server 2003 datasheet

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=af323f48-8134-4eba-b2e6-1f973dcb96a8

Creating a Systemized Approach to Regulatory Compliance at Microsoft

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=89f7b1ec-b04c-4ccc-b133-efaeeb038f41

Events/WebCasts

Visit TechNet Spotlight: www.microsoft.com/technetspotlight

Video on Demand, Video Downloads, PowerPoint Presentations, Audio and more

Microsoft Security Webcast Series: Upcoming and On-Demand

Security Webcast Calendar http://go.microsoft.com/fwlink/?LinkId=37910

Find security webcasts listed in an easy-to-use calendar format.

Upcoming Security Webcasts

http://www.microsoft.com/events/security/upcoming.mspx

Register for the following Webcasts on the link above

TechNet Webcast: Information About Microsoft March Security Bulletins (Level 200)

Wednesday, March 11, 2009 11:00 A.M.-12:30 P.M. Pacific Time

IT Manager Webcast: How Microsoft Does IT: Rapid Deployment of Applications on the Microsoft Extranet (Level 200)

Thursday, March 12, 2009 11:00 A.M.-12:00 P.M. Pacific Time

On-Demand Security Webcasts

http://www.microsoft.com/events/security/ondemand.mspx

New or updated KB’s

Microsoft Internet Security and Acceleration Server

FIX: An incorrect result is returned when you test a Web publishing rule by using the Traffic Simulator feature in ISA Server 2006 with Service Pack 1

http://support.microsoft.com/kb/955604

FIX: The IP address is reversed in a diagnostic log event when you use the Traffic Simulator feature to test a Web publishing rule in ISA Server 2006 with Service Pack 1

http://support.microsoft.com/kb/955603

FIX: The access rule for a URL set does not work as expected in ISA Server 2006 with Service Pack 1 if the URL set contains adjacent IP addresses as the hosts

http://support.microsoft.com/kb/955529

Description of the ISA Server 2006 hotfix package: July 15, 2008

http://support.microsoft.com/kb/955605

The log query returns no results in the Japanese version of ISA Server 2006 Management Console when the logging filter contains a string parameter and the logging is not live

http://support.microsoft.com/kb/958428

SMTP traffic between an Edge Transport server and an internal Hub Transport server is blocked if the Hub server is published by using ISA Server 2006 and if SMTP filtering is enabled

http://support.microsoft.com/kb/959311

Microsoft Intelligent Application Gateway 2007

Endpoint detection fails when a client computer connects to IAG

http://support.microsoft.com/kb/955105

February 2009 – Technical Rollup Mail - Security

conuktrm — Mon, 02 Feb 2009 03:01:00 GMT

News

Monitoring Malware Through the Edge with Microsoft Forefront Threat Management Gateway http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014550&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

By Yuri Diogenes, Security Support Engineer, Microsoft ISA and IAG Team Learn how to monitor your traffic with either real-time logging or on-demand reporting. Explore how to use new fields on the dashboard and real-time logging to instantly see if the traffic contains a piece of malware, the threat level, and whether it was cured. In addition, see how you can use new reports to work proactively to investigate trends and identify systems that may be compromised.

Secure and Monitor Your Windows and Office Environment -- Join the Beta Now http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014551&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Project Codename Sundance provides you with an end-to-end solution to help your organization plan, deploy, and monitor security baselines of Windows operating systems and Microsoft Office 2007 applications. The beta release is available now for your review through January 6, 2009. After joining the beta review program, bookmark this link to the program site to get the latest information about upcoming events.

Get the Free Windows HPC Server 2008 Trial http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014552&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Windows HPC Server 2008 can help shorten time-to-insight for HPC workload through easier deployment and management. By using the existing Windows-based information technology (IT) infrastructure, HPCS brings the security benefits of Windows Server to cluster environments and can provide a seamless parallel computing environment from desktop to the server.

Live Interview and Demo from Tech•Ed EMEA: Security Assessment http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014553&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Check out the demo in this Tech•Ed Online interview with the Group Product Manager behind the Microsoft Security Assessment Tool. Through the easy-to-use assessment process, you will find prioritized tasks with industry guidance, best practices, and recommendations to resolve security issues identified in the detailed reports.

Download CAT.NET Community Technology Preview and Anti-XSS 3.0 Beta

We've released two great free tools and they're now ready for you to download:

- Download Anti-XSS 3.0 Beta here http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11083374&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

- Download CAT.NET CTP here http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11083375&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

CAT.NET - Community Technology Preview

CAT.NET is a managed code static analysis tool for finding security vulnerabilities. It's the same tool we use internally to scan all of our line of business applications; it runs as a Visual Studio plug-in or stand-alone application. You can download the current CTP build from MSDN here and submit bugs and feedback to our Connect site here.

Anti-XSS 3.0 - Beta

Cross Site Scripting (XSS) continues to plague websites and among others things has become a common attack vector for Phishing attacks to distribute payloads to unsuspecting users. With this release, we have taken a fresh look at how to provide protection to ASP.NET applications.

You can download the current beta binaries from MSDN here and source code from CodePlex here and You can submit bugs and feedback directly to our CodePlex site here.

http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11083376&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11083377&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11083378&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Microsoft Security Bulletin Summary for December, 2008

http://www.microsoft.com/technet/security/bulletin/ms08-dec.mspx

Urgent security update for Internet Explorer http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11083462&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

On the 18th Dec 2008, we released security update MS08-078 which will address a vulnerability allowing remote code execution in all affected versions of Internet Explorer products. MS08-078 has a maximum severity rating of Critical for all versions of Internet Explorer. We encourage all customers to test and deploy this update as soon as possible. Our investigation of these attacks so far has verified that they are not successful against customers who have applied the security update.

You may be interested to know that we mobilized security engineering teams worldwide immediately to develop, test and deliver a security update for more than 300 versions of IE across more than 25 languages for automatic worldwide distribution in the unprecedented time of nine days.

Microsoft Product Lifecycle Information

Find information about your particular products on the Microsoft Product Support Lifecycle http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014482&s1=68628015-2ccc-cbc7-31b9-0e76c3415474 Web site.

See a List of Supported Service Packs http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014483&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Microsoft provides free software updates for security and nonsecurity issues for all supported service packs.

Assess Your Desktop Security and Forefront Readiness with the New Security Assessment Tool http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11017293&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Find out how to assess whether your desktops are vulnerable to viruses and spyware with the new Microsoft Assessment and Planning (MAP) Toolkit 3.2. This free toolkit also assesses Forefront Client Security and Network Access Protection (NAP) readiness of your PCs.

Need to Share Methods and Practices of Writing Secure Code? http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11017294&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

The Security Development Lifecycle provides you and your team with corresponding levels of guidance and tools for strategy, assessment, and implementation of your security.

Documents

Security Tip of the Month: Security Considerations in High-Performance Computing http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014554&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

This article describes how you can monitor your traffic with either real-time logging or on-demand reporting. Learn how you can use new fields on the dashboard and real-time logging to instantly see if the traffic contains a piece of malware, the threat level, and whether it was cured. You can also see how to use new reports to work proactively to investigate trends and identify systems that may be compromised.

Technical Overview of Windows HPC Server 2008 http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014555&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Because HPC clusters are being adopted by a broad range of mainstream users for mission-critical applications, security and integration with the existing infrastructure are essential. Read this technical overview to learn how Windows HPC Server 2008 uses the Active Directory service to enable role-based security for all cluster jobs and administration.

Windows HPC Server 2008: Using MS-MPI http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014556&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

MPI and MPI2 are widely accepted specifications for managing messaging in high-performance clusters. Among the most widely accepted implementations of Message Passing Interface (MPI) is the open-source Argonne National Laboratory MPICH2 reference implementation. At the API level, MS MPI is identical to the more than 160 APIs implemented by MPICH2. At the same time, MS MPI adds enhanced security and process management capabilities for enterprise environments and a new execution-tracing feature for Windows HPC Server 2008. Read this white paper for more details.

HPC Pack 2008 SDK http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014557&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Microsoft HPC Server 2008 provides secure, scalable cluster resource management, a job scheduler, and an MPI stack for parallel programming. Download the Microsoft HPC Pack 2008 SDK to get the tools and content necessary to write parallel applications for the Windows HPC Server 2008 platform.

Securing the HPC Session http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014558&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

HPC uses HPC sessions to support the service-oriented architecture (SOA) programming model based on Windows Communication Foundation (WCF). The SOA programming model is ideal for writing interactive, parallel applications that provide near real-time calculation of complex algorithms, such as Monte Carlo simulations and BLAST searches. Read this topic for tips on how to secure the HPC session.

Use Windows Server 2008 to Develop Federation-Aware Applications http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014559&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Extend Web applications inside your firewall to vendors, partners, and other trusted organizations with secure, authenticated, and controlled external access.

Downloads

Update to Mitigate MS08-037 UDP Behavior Across NAT for Microsoft ISA Server 2006

This update causes ISA Server to use random source ports for UDP sessions created by access rules which serve hosts in networks for which ISA Server defines a network address translation (NAT) relationship.

http://www.microsoft.com/downloads/details.aspx?FamilyID=e96a6e20-0c04-4c7d-9f3e-207b02ae29cc&DisplayLang=en

Update to Mitigate MS08-037 UDP Behavior Across NAT for Microsoft ISA Server 2000 - English

http://www.microsoft.com/downloads/details.aspx?FamilyID=1455d4e6-a0b5-4583-82f1-ee8239fca207&DisplayLang=en

Update to Mitigate MS08-037 UDP Behavior Across NAT for Microsoft ISA Server 2004 Enterprise Edition

http://www.microsoft.com/downloads/details.aspx?FamilyID=55ce3623-2f7b-4900-9a2f-7e2aa2fe9c50&DisplayLang=en

Update to Mitigate MS08-037 UDP Behavior Across NAT for Microsoft ISA Server 2004 Standard Edition

http://www.microsoft.com/downloads/details.aspx?FamilyID=0ab83f12-653b-4be1-befe-594c4ef62baa&DisplayLang=en

Update for Root Certificates

This item updates the list of root certificates on your computer to the list that is accepted by Microsoft as part of the Microsoft Root Certificate Program.

http://www.microsoft.com/downloads/details.aspx?FamilyID=f814ec0e-ee7e-435e-99f8-20b44d4531b0&DisplayLang=en

Microsoft Code Name “Geneva”

Microsoft code name “Geneva”, an open platform for simplified user access based on claims.

http://www.microsoft.com/downloads/details.aspx?FamilyID=1e3c3efc-e980-4895-9095-86e51c1cd9d8&DisplayLang=en

Licensing Windows Server 2008 Terminal Services

This licensing brief helps to clarify Microsoft licensing policies for Windows Server® Terminal Services (TS), including the new components that are in the Windows Server 2008 operating system.

http://www.microsoft.com/downloads/details.aspx?FamilyID=b8a7c6ed-1bc1-4035-9110-1ee6da8f3fd4&DisplayLang=en

Update for Microsoft Office Outlook 2003 Junk Email Filter (KB958620)

This update provides the Junk E-mail Filter in Microsoft Office Outlook 2003 with a more current definition of which e-mail messages should be considered junk e-mail.

http://www.microsoft.com/downloads/details.aspx?FamilyID=d320c2b5-8888-4ef5-a624-21762516cfea&DisplayLang=en

Update for Windows Mail Junk E-mail Filter [December 2008] (KB905866)

Install this update for Windows Mail to revise the definition files that are used to detect e-mail messages that should be considered junk e-mail or that may contain phishing content.

http://www.microsoft.com/downloads/details.aspx?FamilyID=aa029fde-f341-44fc-8b85-0c6f3d3c2d69&DisplayLang=en

Microsoft® Identity Lifecycle Manager "2" (Release Candidate) Multi-forest Management Step-by-Step Guide

Learn how to use ILM "2" to manage objects in multiple forests

http://www.microsoft.com/downloads/details.aspx?FamilyID=cf34f433-0db9-4798-a08a-c42ec35d4617&DisplayLang=en

Update to Mitigate MS08-037 UDP Behavior Across NAT for Forefront Threat Management Gateway (TMG), Medium Business Edition (MBE)

This update causes TMG MBE to use random source ports for UDP sessions created by access rules which serve hosts in networks for which Forefront TMG MBE defines a network address translation (NAT) relationship.

http://www.microsoft.com/downloads/details.aspx?FamilyID=e974422f-42b0-426c-8852-ff8e67264909&DisplayLang=en

Update for Microsoft Office Outlook 2003 Junk Email Filter (KB958620)

This update provides the Junk E-mail Filter in Microsoft Office Outlook 2003 with a more current definition of which e-mail messages should be considered junk e-mail.

http://www.microsoft.com/downloads/details.aspx?FamilyID=d320c2b5-8888-4ef5-a624-21762516cfea&DisplayLang=en

Update for Microsoft Office Outlook 2007 Junk Email Filter (KB958619)

This update provides the Junk E-mail Filter in Microsoft Office Outlook 2007 with a more current definition of which e-mail messages should be considered junk e-mail.

http://www.microsoft.com/downloads/details.aspx?FamilyID=687083c2-2d36-4554-ab39-39742c8dd55b&DisplayLang=en

Microsoft® Windows® Malicious Software Removal Tool (KB890830) x64

http://www.microsoft.com/downloads/details.aspx?FamilyID=585d2bde-367f-495e-94e7-6349f4effc74&DisplayLang=en

Microsoft® Windows® Malicious Software Removal Tool (KB890830)

http://www.microsoft.com/downloads/details.aspx?FamilyID=ad724ae0-e72d-4f54-9ab3-75b8eb148356&DisplayLang=en

December 2008 Security Release ISO Image

This DVD5 ISO image file contains the security updates for Windows released on Windows Update on December 9th, 2008.

http://www.microsoft.com/downloads/details.aspx?FamilyID=a72bf06d-d755-445c-adc5-3b9561406aa4&DisplayLang=en

Extended Security Update Inventory Tool

http://www.microsoft.com/downloads/details.aspx?FamilyID=2c93da1d-48a0-4e5c-991f-87e08954f61b&DisplayLang=en

Microsoft Anti-Cross Site Scripting Library V3.0 Beta

AntiXSS 3.0 helps you to protect your current applications from cross-site scripting attacks, at the same time helping you to protect your legacy application with its Security Runtime Engine

http://www.microsoft.com/downloads/details.aspx?FamilyID=051ee83c-5ccf-48ed-8463-02f56a6bfc09&DisplayLang=en

Using Microsoft Windows IPSec to Help Secure an Internal Corporate Network Server

Describes how to configure Microsoft® Windows® 2000 IPSec and Windows XP IPSec to help secure an internal network server against network-based attacks from untrusted computers. IPSec enhancements in Windows 2000 service packs and in the Microsoft® Windows Server™ 2003 family are also described.

http://www.microsoft.com/downloads/details.aspx?FamilyID=a774012a-ac25-4a1d-8851-b7a09e3f1dc9&DisplayLang=en

AD RMS Templates Deployment Step-by-Step Guide

Step-by-step procedures for using identity federation services with Active Directory Rights Management Services (AD RMS). This guide walks you through the process of creating and deploying rights policy templates within your organization.

http://www.microsoft.com/downloads/details.aspx?FamilyID=34fd284b-3c7e-4a1f-b8ee-d58b173f2426&DisplayLang=en

Network Policy Server (NPS) Operations Guide

The Network Policy Server Operations Guide provides information about how to administer NPS after it is installed and deployed. It also includes troubleshooting information for specific issues and scenarios.

http://www.microsoft.com/downloads/details.aspx?FamilyID=585d2dca-c134-4568-b31c-a535ab0b0b3d&DisplayLang=en

AD RMS Deployment with Microsoft Office SharePoint Server 2007 Step-by-Step Guide

Step-by-step procedures for deploying Active Directory Rights Management Services with Office SharePoint Server 2007.

http://www.microsoft.com/downloads/details.aspx?FamilyID=d7d005da-b5e4-4c2e-9d44-58b5594232be&DisplayLang=en

Windows Firewall with Advanced Security Step-by-Step Guide - Deploying Firewall Policies

This step-by-step guide illustrates how to deploy Active Directory® Group Policy objects (GPOs) to configure Windows Firewall with Advanced Security in Windows Vista® and Windows Server® 2008.

http://www.microsoft.com/downloads/details.aspx?FamilyID=0b937897-ce39-498e-bb37-751c00f197d9&DisplayLang=en

AD RMS Licensing-only Cluster Deployment Step-by-Step Guide

Step-by-step procedures for deploying an Active Directory Rights Management Services licensing-only cluster

http://www.microsoft.com/downloads/details.aspx?FamilyID=d1b38f77-822b-47ed-b4b7-1a49c9e990f1&DisplayLang=en

AD RMS Decommissioning Step-by-Step Guide.doc

Step-by-step procedures for decommissioning an Active Directory Rights Management Services cluster.

http://www.microsoft.com/downloads/details.aspx?FamilyID=fa683f77-2b98-4047-9fef-6ca2d921627b&DisplayLang=en

AD RMS with AD FS Identity Federation Step-by-Step Guide

Step-by-step procedures for using identity federation services with Active Directory Rights Management Services (AD RMS). This guide walks you through the Active Directory Federation Services integration with AD RMS.

http://www.microsoft.com/downloads/details.aspx?FamilyID=1ce54040-cb96-4f37-a5b1-adf5c1e21b2b&DisplayLang=en

AD RMS Deployment in an Extranet Step-by-Step Guide

Step-by-step procedures for installing and configuring Active Directory Rights Management Services in an Extranet.

http://www.microsoft.com/downloads/details.aspx?FamilyID=262768eb-81d8-4c8f-bf2a-66a8d2dc4665&DisplayLang=en

AD RMS Step-by-Step Guide

Step-by-step procedures for installing and configuring Active Directory Rights Management Services, including installation by using Server Manager.

http://www.microsoft.com/downloads/details.aspx?FamilyID=a0ea7cd0-7de7-43a5-b1f9-b4cc679cecb3&DisplayLang=en

Identity Lifecycle Manager "2" RC Release

This download contains the Release Candidate version of Identity Lifecycle Manager "2."

http://www.microsoft.com/downloads/details.aspx?FamilyID=17489612-95f4-4dd5-a050-5da4b5d06b86&DisplayLang=en

Events/WebCasts

Visit TechNet Spotlight: www.microsoft.com/technetspotlight

Video on Demand, Video Downloads, PowerPoint Presentations, Audio and more

Microsoft Security Webcast Series: Upcoming and On-Demand

Security Webcast Calendar http://go.microsoft.com/fwlink/?LinkId=37910

Find security webcasts listed in an easy-to-use calendar format.

Upcoming Security Webcasts

http://www.microsoft.com/events/security/upcoming.mspx

Register for the following Webcasts on the link above

MSDN Webcast: Managing Cross-Site Scripting Using CAT.NET and AntiXSS (Level 200)

Friday, January 09, 2009 12:00 P.M.-1:00 P.M. Pacific Time

MSDN Webcast: Security Development Lifecycle Threat Modeling for Developers (Level 200)

Thursday, January 15, 2009 12:00 P.M.-1:00 P.M. Pacific Time

On-Demand Security Webcasts

http://www.microsoft.com/events/security/ondemand.mspx

A.O.B

Security Blogs

Michael Howard http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014499&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

RSS http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014500&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Eric Lippert http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014501&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

RSS http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014502&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Eric Fitzgerald http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014503&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

RSS http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014504&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Steve Lamb http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014505&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

RSS http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014506&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

MSRC Blog http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014507&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

RSS http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014508&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

ACE Team http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014509&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

RSS http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014510&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Jeff Jones http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014511&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

RSS http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014512&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Windows Vista Security http://blogs.msdn.com/windowsvistasecurity/default.aspx

RSS http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014513&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Solution Accelerators - Security & Compliance http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014514&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

RSS http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014515&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Kai Axford http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014516&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

RSS http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014517&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Security Vulnerability Research & Defense http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014518&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

RSS http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014519&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Steve Riley http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014520&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

RSS http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014521&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Security Development Lifecycle (SDL) http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014522&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

RSS http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014523&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

January 2009 - Technical Rollup Mail - Security

Justin Zarb — Tue, 06 Jan 2009 14:25:00 GMT

News

Get the Free Windows HPC Server 2008 Trial http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014552&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Download CAT.NET Community Technology Preview and Anti-XSS 3.0 Beta

We've released two great free tools and they're now ready for you to download:

- Download Anti-XSS 3.0 Beta here http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11083374&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

- Download CAT.NET CTP here http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11083375&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

CAT.NET - Community Technology Preview

Anti-XSS 3.0 - Beta

You can download the current beta binaries from MSDN here and source code from CodePlex here and You can submit bugs and feedback directly to our CodePlex site here.

http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11083376&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11083377&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11083378&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Microsoft Security Bulletin Summary for December, 2008

http://www.microsoft.com/technet/security/bulletin/ms08-dec.mspx

Urgent security update for Internet Explorer http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11083462&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Microsoft Product Lifecycle Information

See a List of Supported Service Packs http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014483&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Microsoft provides free software updates for security and nonsecurity issues for all supported service packs.

Need to Share Methods and Practices of Writing Secure Code? http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11017294&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

The Security Development Lifecycle provides you and your team with corresponding levels of guidance and tools for strategy, assessment, and implementation of your security.

Documents

Technical Overview of Windows HPC Server 2008 http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014555&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Windows HPC Server 2008: Using MS-MPI http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014556&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

HPC Pack 2008 SDK http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014557&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Securing the HPC Session http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014558&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Extend Web applications inside your firewall to vendors, partners, and other trusted organizations with secure, authenticated, and controlled external access.

Downloads

Update to Mitigate MS08-037 UDP Behavior Across NAT for Microsoft ISA Server 2006

http://www.microsoft.com/downloads/details.aspx?FamilyID=e96a6e20-0c04-4c7d-9f3e-207b02ae29cc&DisplayLang=en

Update to Mitigate MS08-037 UDP Behavior Across NAT for Microsoft ISA Server 2000 - English

http://www.microsoft.com/downloads/details.aspx?FamilyID=1455d4e6-a0b5-4583-82f1-ee8239fca207&DisplayLang=en

Update to Mitigate MS08-037 UDP Behavior Across NAT for Microsoft ISA Server 2004 Enterprise Edition

http://www.microsoft.com/downloads/details.aspx?FamilyID=55ce3623-2f7b-4900-9a2f-7e2aa2fe9c50&DisplayLang=en

Update to Mitigate MS08-037 UDP Behavior Across NAT for Microsoft ISA Server 2004 Standard Edition

http://www.microsoft.com/downloads/details.aspx?FamilyID=0ab83f12-653b-4be1-befe-594c4ef62baa&DisplayLang=en

Update for Root Certificates

This item updates the list of root certificates on your computer to the list that is accepted by Microsoft as part of the Microsoft Root Certificate Program.

http://www.microsoft.com/downloads/details.aspx?FamilyID=f814ec0e-ee7e-435e-99f8-20b44d4531b0&DisplayLang=en

Microsoft Code Name “Geneva”

Microsoft code name “Geneva”, an open platform for simplified user access based on claims.

http://www.microsoft.com/downloads/details.aspx?FamilyID=1e3c3efc-e980-4895-9095-86e51c1cd9d8&DisplayLang=en

Licensing Windows Server 2008 Terminal Services

This licensing brief helps to clarify Microsoft licensing policies for Windows Server® Terminal Services (TS), including the new components that are in the Windows Server 2008 operating system.

http://www.microsoft.com/downloads/details.aspx?FamilyID=b8a7c6ed-1bc1-4035-9110-1ee6da8f3fd4&DisplayLang=en

Update for Microsoft Office Outlook 2003 Junk Email Filter (KB958620)

This update provides the Junk E-mail Filter in Microsoft Office Outlook 2003 with a more current definition of which e-mail messages should be considered junk e-mail.

http://www.microsoft.com/downloads/details.aspx?FamilyID=d320c2b5-8888-4ef5-a624-21762516cfea&DisplayLang=en

Update for Windows Mail Junk E-mail Filter [December 2008] (KB905866)

Install this update for Windows Mail to revise the definition files that are used to detect e-mail messages that should be considered junk e-mail or that may contain phishing content.

http://www.microsoft.com/downloads/details.aspx?FamilyID=aa029fde-f341-44fc-8b85-0c6f3d3c2d69&DisplayLang=en

Microsoft® Identity Lifecycle Manager "2" (Release Candidate) Multi-forest Management Step-by-Step Guide

Learn how to use ILM "2" to manage objects in multiple forests

http://www.microsoft.com/downloads/details.aspx?FamilyID=cf34f433-0db9-4798-a08a-c42ec35d4617&DisplayLang=en

Update to Mitigate MS08-037 UDP Behavior Across NAT for Forefront Threat Management Gateway (TMG), Medium Business Edition (MBE)

http://www.microsoft.com/downloads/details.aspx?FamilyID=e974422f-42b0-426c-8852-ff8e67264909&DisplayLang=en

Update for Microsoft Office Outlook 2003 Junk Email Filter (KB958620)

This update provides the Junk E-mail Filter in Microsoft Office Outlook 2003 with a more current definition of which e-mail messages should be considered junk e-mail.

http://www.microsoft.com/downloads/details.aspx?FamilyID=d320c2b5-8888-4ef5-a624-21762516cfea&DisplayLang=en

Update for Microsoft Office Outlook 2007 Junk Email Filter (KB958619)

This update provides the Junk E-mail Filter in Microsoft Office Outlook 2007 with a more current definition of which e-mail messages should be considered junk e-mail.

http://www.microsoft.com/downloads/details.aspx?FamilyID=687083c2-2d36-4554-ab39-39742c8dd55b&DisplayLang=en

Microsoft® Windows® Malicious Software Removal Tool (KB890830) x64

http://www.microsoft.com/downloads/details.aspx?FamilyID=585d2bde-367f-495e-94e7-6349f4effc74&DisplayLang=en

Microsoft® Windows® Malicious Software Removal Tool (KB890830)

http://www.microsoft.com/downloads/details.aspx?FamilyID=ad724ae0-e72d-4f54-9ab3-75b8eb148356&DisplayLang=en

December 2008 Security Release ISO Image

This DVD5 ISO image file contains the security updates for Windows released on Windows Update on December 9th, 2008.

http://www.microsoft.com/downloads/details.aspx?FamilyID=a72bf06d-d755-445c-adc5-3b9561406aa4&DisplayLang=en

Extended Security Update Inventory Tool

http://www.microsoft.com/downloads/details.aspx?FamilyID=2c93da1d-48a0-4e5c-991f-87e08954f61b&DisplayLang=en

Microsoft Anti-Cross Site Scripting Library V3.0 Beta

AntiXSS 3.0 helps you to protect your current applications from cross-site scripting attacks, at the same time helping you to protect your legacy application with its Security Runtime Engine

http://www.microsoft.com/downloads/details.aspx?FamilyID=051ee83c-5ccf-48ed-8463-02f56a6bfc09&DisplayLang=en

Using Microsoft Windows IPSec to Help Secure an Internal Corporate Network Server

http://www.microsoft.com/downloads/details.aspx?FamilyID=a774012a-ac25-4a1d-8851-b7a09e3f1dc9&DisplayLang=en

AD RMS Templates Deployment Step-by-Step Guide

http://www.microsoft.com/downloads/details.aspx?FamilyID=34fd284b-3c7e-4a1f-b8ee-d58b173f2426&DisplayLang=en

Network Policy Server (NPS) Operations Guide

http://www.microsoft.com/downloads/details.aspx?FamilyID=585d2dca-c134-4568-b31c-a535ab0b0b3d&DisplayLang=en

AD RMS Deployment with Microsoft Office SharePoint Server 2007 Step-by-Step Guide

Step-by-step procedures for deploying Active Directory Rights Management Services with Office SharePoint Server 2007.

http://www.microsoft.com/downloads/details.aspx?FamilyID=d7d005da-b5e4-4c2e-9d44-58b5594232be&DisplayLang=en

Windows Firewall with Advanced Security Step-by-Step Guide - Deploying Firewall Policies

This step-by-step guide illustrates how to deploy Active Directory® Group Policy objects (GPOs) to configure Windows Firewall with Advanced Security in Windows Vista® and Windows Server® 2008.

http://www.microsoft.com/downloads/details.aspx?FamilyID=0b937897-ce39-498e-bb37-751c00f197d9&DisplayLang=en

AD RMS Licensing-only Cluster Deployment Step-by-Step Guide

Step-by-step procedures for deploying an Active Directory Rights Management Services licensing-only cluster

http://www.microsoft.com/downloads/details.aspx?FamilyID=d1b38f77-822b-47ed-b4b7-1a49c9e990f1&DisplayLang=en

AD RMS Decommissioning Step-by-Step Guide.doc

Step-by-step procedures for decommissioning an Active Directory Rights Management Services cluster.

http://www.microsoft.com/downloads/details.aspx?FamilyID=fa683f77-2b98-4047-9fef-6ca2d921627b&DisplayLang=en

AD RMS with AD FS Identity Federation Step-by-Step Guide

http://www.microsoft.com/downloads/details.aspx?FamilyID=1ce54040-cb96-4f37-a5b1-adf5c1e21b2b&DisplayLang=en

AD RMS Deployment in an Extranet Step-by-Step Guide

Step-by-step procedures for installing and configuring Active Directory Rights Management Services in an Extranet.

http://www.microsoft.com/downloads/details.aspx?FamilyID=262768eb-81d8-4c8f-bf2a-66a8d2dc4665&DisplayLang=en

AD RMS Step-by-Step Guide

Step-by-step procedures for installing and configuring Active Directory Rights Management Services, including installation by using Server Manager.

http://www.microsoft.com/downloads/details.aspx?FamilyID=a0ea7cd0-7de7-43a5-b1f9-b4cc679cecb3&DisplayLang=en

Identity Lifecycle Manager "2" RC Release

This download contains the Release Candidate version of Identity Lifecycle Manager "2."

http://www.microsoft.com/downloads/details.aspx?FamilyID=17489612-95f4-4dd5-a050-5da4b5d06b86&DisplayLang=en

Events/WebCasts

Visit TechNet Spotlight: www.microsoft.com/technetspotlight

Video on Demand, Video Downloads, PowerPoint Presentations, Audio and more

Microsoft Security Webcast Series: Upcoming and On-Demand

Security Webcast Calendar http://go.microsoft.com/fwlink/?LinkId=37910

Find security webcasts listed in an easy-to-use calendar format.

Upcoming Security Webcasts

http://www.microsoft.com/events/security/upcoming.mspx

Register for the following Webcasts on the link above

MSDN Webcast: Managing Cross-Site Scripting Using CAT.NET and AntiXSS (Level 200)

Friday, January 09, 2009 12:00 P.M.-1:00 P.M. Pacific Time

MSDN Webcast: Security Development Lifecycle Threat Modeling for Developers (Level 200)

Thursday, January 15, 2009 12:00 P.M.-1:00 P.M. Pacific Time

On-Demand Security Webcasts

http://www.microsoft.com/events/security/ondemand.mspx

A.O.B

Security Blogs

Michael Howard http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014499&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

RSS http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014500&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Eric Lippert http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014501&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

RSS http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014502&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Eric Fitzgerald http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014503&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

RSS http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014504&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Steve Lamb http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014505&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

RSS http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014506&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

MSRC Blog http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014507&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

RSS http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014508&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

ACE Team http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014509&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

RSS http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014510&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Jeff Jones http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014511&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

RSS http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014512&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Windows Vista Security http://blogs.msdn.com/windowsvistasecurity/default.aspx

RSS http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014513&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Solution Accelerators - Security & Compliance http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014514&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

RSS http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014515&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Kai Axford http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014516&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

RSS http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014517&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Security Vulnerability Research & Defense http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014518&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

RSS http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014519&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Steve Riley http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014520&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

RSS http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014521&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Security Development Lifecycle (SDL) http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014522&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

RSS http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11014523&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

December 2008 - Technical Rollup Mail - Security

conuktrm — Mon, 01 Dec 2008 15:00:46 GMT

NEWS

Security

The Great Debate: Security by Obscurity http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=10859047&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

By Jesper M. Johansson, Software Architect and Microsoft MVP in Enterprise Security, and Roger Grimes, Senior Security Consultant, Microsoft ACE Team Security by obscurity involves taking measures that do not remove an attack vector but instead conceal it. Some argue that this is a bad practice while others claim that as part of a larger strategy, every bit counts. The debate is quite heated, and, in this article, some of our finest security experts face off, explaining security by obscurity and presenting both sides of the debate.

New Microsoft Security Intelligence Report Released http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=10859048&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Volume 5 of the Security Intelligence Report (SIR) contains an all-new examination of the threat ecosystem and the use of botnets to spread threats. It also includes unique content on browser-based exploits and updated information on software vulnerability disclosures, vulnerability exploits, security and privacy breaches and trends in malicious and potentially unwanted software. With extensive guidance on mitigations and countermeasures, SIR is a valuable tool for all IT professionals who need to know what is happening in the threat ecosystem.

Download the Latest Microsoft Security Intelligence Report (SIRv5) http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=10846335&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Get the free report with in-depth perspectives on the changing threat landscape, including software vulnerability disclosures and exploits, malicious software, and potentially unwanted software. Also watch the latest “Bret and Vinnie Show” as they discuss the latest report.

Get Dynamic Reports with Extended Content http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=10846336&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Download the Microsoft Security Assessment Tool (MSAT) and access a set of dynamic reports that are generated from the assessment answers. The authoritative prescriptive guidance that is generated from your assessment answers will help you speed remediation of the security issues found.

Microsoft Code Name “Geneva” http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=10859049&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Microsoft code name “Geneva” is an open platform for simplified user access based on claims. This release consists of three components: Geneva Framework for .NET developers, Geneva Server for IT Pros, and Windows CardSpace Geneva for users. Read the white paper http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=10858969&s1=68628015-2ccc-cbc7-31b9-0e76c3415474 David Chappell for an overview of the platform, and then visit the Microsoft Connect Geneva home page http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=10858970&s1=68628015-2ccc-cbc7-31b9-0e76c3415474 for access to downloads and other resources.

Research Paper: Malware Development Lifecycle http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=10859050&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Presented at the Virus Bulletin 2008 (VB2008) Conference in October, this paper tracks the evolution of certain families of malware as they have grown and diversified, adapting and improving to effectively accomplish their required results.

Microsoft Security Bulletin Summary for November, 2008

http://www.microsoft.com/technet/security/bulletin/ms08-nov.mspx

Basic Alerts

Microsoft's free monthly Security Notification Service provides links to security-related software updates and notification of re-released Microsoft Security Bulletins. The goal of this service is to provide accurate information you can use to protect your computers and systems from malicious attacks. These bulletins are written for IT professionals, contain in-depth technical information, and e-mails are digitally-signed with PGP.

E-mail: Security Notification Service https://profile.microsoft.com/RegSysProfileCenter/subscriptionwizard.aspx?wizid=5a2a311b-5189-4c9b-9f1a-d5e913a26c2e&lcid=1033

RSS: Security for IT Professionals http://www.microsoft.com/technet/security/bulletin/secrss.aspx

Windows Live Alert: Technical Security Update Alerts http://signup.alerts.live.com/alerts/jump.do?PINID=3274

Web Site: Bulletin Search http://www.microsoft.com/technet/security/bulletin

Comprehensive Alerts

The free Comprehensive alerts serve as an incremental supplement to the Basic Alerts. It provides advance notification of upcoming security bulletins, Security advisories, and timely notification of any minor changes to previously released Microsoft Security Bulletins or Advisories. These notifications are written for IT professionals, contain in-depth technical information, and e-mails are digitally-signed with PGP.

E-mail: Security Notification Service Comprehensive Edition https://profile.microsoft.com/RegSysProfileCenter/subscriptionwizard.aspx?wizid=5a2a311b-5189-4c9b-9f1a-d5e913a26c2e&lcid=1033

RSS: Comprehensive Alerts http://www.microsoft.com/technet/security/bulletin/RssFeed.aspx?snscomprehensive

Web Site: Bulletin Search http://www.microsoft.com/technet/security/current.aspx

Security Advisories Alerts

Microsoft Security Advisories are a way for Microsoft to communicate security information to customers about issues that may not be classified as vulnerabilities and may not require a security bulletin. Each advisory will be accompanied with a unique Microsoft Knowledge Base Article number for reference to provide additional information about the changes.

E-mail: Security Notification Service Comprehensive Edition [1] https://profile.microsoft.com/RegSysProfileCenter/subscriptionwizard.aspx?wizid=5a2a311b-5189-4c9b-9f1a-d5e913a26c2e&lcid=1033

RSS: Security Advisories http://www.microsoft.com/technet/security/advisory/RssFeed.aspx?securityadvisory

Windows Live Alert: Technical Security Advisory Alerts http://signup.alerts.live.com/alerts/jump.do?PINID=3274

Web Site: Security Advisories http://www.microsoft.com/technet/security/advisory

[1] Note There is not a separate Comprehensive E-mail Notification service for Security Bulletins and Security Advisories

Microsoft Security Response Center Blog Alerts

RSS: MSRC Blog http://blogs.technet.com/msrc/rss.xml

Windows Live Alert: MSRC Blog http://signup.alerts.msn.com/alerts/login.do?PINID=32551266&returnurl=http://blogs.technet.com/msrc

Microsoft Internet Security and Acceleration Server

Forefront Edge Security TechCenter

http://technet.microsoft.com/en-gb/forefront/edgesecurity/default.aspx

Please note that if you have feedback on documentation or wish to request new documents - email isadocs@microsoft.com

Forefront Edge Security Community

http://technet.microsoft.com/en-gb/forefront/edgesecurity/bb687298.aspx

New Community Contributed Content includes:

Overview of the Logging Improvements in Forefront Threat Management Gateway (TMG)

http://technet.microsoft.com/library/dd183731.aspx

Forefront TMG (ISA Server) Product Team Blog

The ISA Server Product Team Blog (http://blogs.technet.com/isablog/) is updated on a regular basis. Latest entries include:

ISA Policy Storage 101

http://blogs.technet.com/isablog/archive/2008/10/29/isa-policy-storage-101.aspx

Adventures in NLB Troubleshooting

http://blogs.technet.com/isablog/archive/2008/10/29/adventures-in-nlb-troubleshooting.aspx

Walk-through for RSA SecurID Delegation for ISA Server 2006

http://blogs.technet.com/isablog/archive/2008/10/29/walk-through-for-rsa-securid-delegation-for-isa-server-2006.aspx

New TMG Logging Architecture

http://blogs.technet.com/isablog/archive/2008/10/30/new-tmg-logging-architecture.aspx

Web requests from an ISA-local web application may receive unexpected authentication prompts.

http://blogs.technet.com/isablog/archive/2008/11/11/web-requests-from-an-isa-local-web-application-may-receive-unexpected-authentication-prompts.aspx

ISA UI trick: Move rule several places

http://blogs.technet.com/isablog/archive/2008/11/18/isa-ui-trick-move-rule-several-places.aspx

Did you miss it? The Launch of Windows Essential Business Server 2008

http://blogs.technet.com/isablog/archive/2008/11/19/did-you-miss-it-the-launch-of-windows-essential-business-server-2008.aspx

Error Installing SQL Server 2005 SP2 Security Update 948109 on TMG

http://blogs.technet.com/isablog/archive/2008/11/21/error-installing-sql-server-2005-sp2-security-update-948109-on-tmg.aspx

Error 10060 while browsing Internet through ISA Server 2006

http://blogs.technet.com/isablog/archive/2008/11/24/error-10060-while-browsing-internet-through-isa-server-2006.aspx

Intelligent Application Gateway 2007

Intelligent Application Gateway 2007 Technical Resources

http://technet.microsoft.com/en-gb/forefront/edgesecurity/bb687299.aspx

Forefront Edge Security Community

http://technet.microsoft.com/en-gb/forefront/edgesecurity/bb687298.aspx

Intelligent Application Gateway Product Team Blog

The IAG Product Team Blog (http://blogs.technet.com/edgeaccessblog) is updated on a regular basis. Latest entries include:

IAG SP2 – It is all about the application

http://blogs.technet.com/edgeaccessblog/archive/2008/11/02/iag-sp2-it-is-all-about-the-application.aspx

Securely Publishing Dynamics CRM 4.0 by Using IAG SP2

http://blogs.technet.com/edgeaccessblog/archive/2008/11/06/securely-publishing-dynamics-crm-4-0-by-using-iag-sp2.aspx

IAG SP2 Goes Virtual

http://blogs.technet.com/edgeaccessblog/archive/2008/11/26/iag-sp2-goes-virtual.aspx

DOCUMENTS

Microsoft Security Assessment Tool 4.0 http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=10859051&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

The Microsoft Security Assessment Tool employs a holistic approach to measuring your security posture by covering topics across people, process, and technology. This revised version features an updated defense-in-depth assessment plus questions related to the evolving threat landscape. Findings are coupled with prescriptive guidance and recommended mitigation efforts, including links to more information for additional industry guidance.

IT Compliance Management Guide http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=10859052&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

The IT Compliance Management Guide can help you shift your governance, risk, and compliance (GRC) efforts from people to technology. Use its configuration guidance to help efficiently address your organization's GRC objectives.

Microsoft Encrypting File System Assistant http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=10859053&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

The Encrypting File System (EFS) Assistant is a software tool you can use to centrally control EFS settings on your mobile or desktop PCs. The EFS Assistant can help you encrypt the sensitive files on your users' laptops, regardless of where those files are located. Part of the Data Encryption Toolkit for Mobile PCs http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=10858971&s1=68628015-2ccc-cbc7-31b9-0e76c3415474, a community version of the tool, is also available from CodePlex at www.codeplex.com/EFSAssistant http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=10858972&s1=68628015-2ccc-cbc7-31b9-0e76c3415474.

Configuring Security in IIS 7.0 http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=10859054&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Windows Server 2008 featuring Internet Information Services 7.0 (IIS 7.0) is a powerful Web application and services platform that delivers rich Web-based experiences. Learn how to install and configure security settings for IIS 7.0, including built-in user and group accounts, URL authorization, SSL, and request filtering.

UrlScan v3.0 http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=10859055&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

UrlScan version 3.1 is a security tool that restricts the types of HTTP requests that Internet Information Services (IIS) 6.0 will process. UrlScan screens all incoming requests to the server by filtering the requests based on rules that are set by the administrator. Filtering requests helps secure the server by ensuring that only valid requests are processed.

Checklist: Securing Web Services http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=10859056&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Part of the patterns and practices guide for "Improving Web Application Security," this checklist is designed to help developers build and secure Web services by outlining design, development, and administrative considerations.

A Guide to Securing ISA Server 2006 http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=10859057&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Get best practices for securing your servers, using the Security Configuration Wizard, and assigning administrative roles.

DOWNLOADS

IT Compliance Management Guide

The IT Compliance Management Guide is intended for IT managers and IT professionals who must plan for and address the governance, risk, and compliance (GRC) requirements of their organizations.

http://www.microsoft.com/downloads/details.aspx?FamilyID=bd930882-0d39-4900-9a79-b91f213ed15d&DisplayLang=en

Data Encryption Toolkit for Mobile PCs

http://www.microsoft.com/downloads/details.aspx?FamilyID=1a99576a-fe67-418f-88b1-81e2055fe977&DisplayLang=en

.NET Rocks! - Andrew Delin on SOX Compliance

Carl and Richard talk to Andrew Delin about why developers should care about the Sarbanes Oxley Act and why a compliance plan is in your best interest.

http://www.microsoft.com/downloads/details.aspx?FamilyID=13fe0c9c-b5a9-48b6-bec2-530df5bbe0ab&DisplayLang=en

Microsoft Antigen SP1 Documentation

http://www.microsoft.com/downloads/details.aspx?FamilyID=7d00160e-4d15-4459-98a3-89f393ac008e&DisplayLang=en

Microsoft Security Assessment Tool 4.0

http://www.microsoft.com/downloads/details.aspx?FamilyID=cd057d9d-86b9-4e35-9733-7acb0b2a3ca1&DisplayLang=en

Microsoft Online Services Sign In Tool V1

Client application that enables single sign-on to Microsoft Online Services

http://www.microsoft.com/downloads/details.aspx?FamilyID=01f6c0e4-f897-442a-8462-425f8edddad9&DisplayLang=en

Microsoft Urlscan Filter v3.1 (x64)

This MSI package will install Urlscan v3.1 on your system.

http://www.microsoft.com/downloads/details.aspx?FamilyID=361e5598-c1bd-46b8-b3e7-3980e8bdf0de&DisplayLang=en

Microsoft Security Intelligence Report (January – June 2008)- Executive Summary

This is the fifth volume of the Microsoft Security Intelligence Report (SIR).

http://www.microsoft.com/downloads/details.aspx?FamilyID=1eab2902-46df-4ed6-8149-a7f7a935dbe7&DisplayLang=en

Microsoft Security Intelligence Report volume 5 (January – June 2008)

This is the fifth volume of the Microsoft Security Intelligence Report (SIR).

http://www.microsoft.com/downloads/details.aspx?FamilyID=b2984562-47a2-48ff-890c-edbeb8a0764c&DisplayLang=en

Identity Lifecycle Manager "2" RC Release

This download contains the Release Candidate version of Identity Lifecycle Manager "2."

http://www.microsoft.com/downloads/details.aspx?FamilyID=17489612-95f4-4dd5-a050-5da4b5d06b86&DisplayLang=en

Identity Lifecycle Manager "2" RC Demo Virtual Hard Disk Image

This package contains a Hyper-V-based demo of Identity Lifecycle Manager "2" RC.

http://www.microsoft.com/downloads/details.aspx?FamilyID=7117b168-e71d-47cc-9739-35f1a68a5e43&DisplayLang=en

SDL Threat Modeling Tool 3.1 beta

http://www.microsoft.com/downloads/details.aspx?FamilyID=a48cccb1-814b-47b6-9d17-1e273f65ae19&DisplayLang=en

Security Features in Microsoft Online

http://www.microsoft.com/downloads/details.aspx?FamilyID=5736aaac-994c-4410-b7ce-bdea505a3413&DisplayLang=en

Enterprise Data Security Optimization Datasheet

This offering integrates multiple data-protection technologies and “always on” persistent protection to provide comprehensive coverage of the data stored on desktops and servers, as well as data in transit.

http://www.microsoft.com/downloads/details.aspx?FamilyID=eb91333a-c26b-4a0d-9251-80a494df9e5c&DisplayLang=en

Deployment for Microsoft Forefront Server Security Datasheet

Deployment for Forefront Server Security integrates the level of security into your environment, and Microsoft Services can turn that vision into reality in as little as six weeks

http://www.microsoft.com/downloads/details.aspx?FamilyID=6892eaaa-0450-4b78-98e4-34c7a771006d&DisplayLang=en

Security, Identity, and Access Management Datasheet

This offering provides an end-to-end security solution that allows you to move toward a dynamic IT infrastructure while ensuring better security integration, manageability, and efficiency.

http://www.microsoft.com/downloads/details.aspx?FamilyID=b53dee69-a3f9-4800-91a8-42c1b8b365db&DisplayLang=en

Deployment for Microsoft Forefront Client Security Datasheet

Deployment for Microsoft Forefront Client Security easily deploys an advanced, centralized solution to help protect your enterprise.

http://www.microsoft.com/downloads/details.aspx?FamilyID=f3dce10f-b007-4188-a836-5e2cd7d94496&DisplayLang=en

Podcasts: How Microsoft IT Manages Physical Security through Strategic IT Convergence

The purpose of World Wide Security Operations is to protect Microsoft’s assets in a manner consistent with corporate culture.

http://www.microsoft.com/downloads/details.aspx?FamilyID=b72ea3fb-6905-48b6-a987-cc4c032de7e1&DisplayLang=en

SQL Server 2008 Analysis Services Datasheet

Microsoft® SQL Server™ 2008 helps enable organizations to build comprehensive, enterprise-scale analytic solutions that deliver actionable insights through familiar tools.

http://www.microsoft.com/downloads/details.aspx?FamilyID=1ad953e6-2ca9-4d8b-95ff-d5242c4c627a&DisplayLang=en

Security Update for MSXML 4.0 Service Pack 2 (KB954430)

A Security issue has been identified in Microsoft XML Core Services (MSXML) that could allow an atacker to compromise your Windows-based system and gain control over it.

http://www.microsoft.com/downloads/details.aspx?FamilyID=96a4413c-5261-4f69-83d0-932c430abd14&DisplayLang=en

November 2008 Security Release ISO Image

This DVD5 ISO image file contains the security updates for Windows released on Windows Update on November 11th, 2008.

http://www.microsoft.com/downloads/details.aspx?FamilyID=4269c703-a4cf-4071-ab4d-90070348e9b5&DisplayLang=en

Update for Windows Mail Junk E-mail Filter for x64-based Systems [November 2008] (KB905866)

Install this update for Windows Mail to revise the definition files that are used to detect e-mail messages that should be considered junk e-mail or that may contain phishing content.

http://www.microsoft.com/downloads/details.aspx?FamilyID=749e10cd-f40c-4f94-8e38-d4221ded7652&DisplayLang=en

Update for Windows Mail Junk E-mail Filter [November 2008] (KB905866)

Install this update for Windows Mail to revise the definition files that are used to detect e-mail messages that should be considered junk e-mail or that may contain phishing content.

http://www.microsoft.com/downloads/details.aspx?FamilyID=aa029fde-f341-44fc-8b85-0c6f3d3c2d69&DisplayLang=en

Extended Security Update Inventory Tool

http://www.microsoft.com/downloads/details.aspx?FamilyID=2c93da1d-48a0-4e5c-991f-87e08954f61b&DisplayLang=en

Microsoft® Windows® Malicious Software Removal Tool (KB890830) x64

http://www.microsoft.com/downloads/details.aspx?FamilyID=585d2bde-367f-495e-94e7-6349f4effc74&DisplayLang=en

Microsoft® Windows® Malicious Software Removal Tool (KB890830)

http://www.microsoft.com/downloads/details.aspx?FamilyID=ad724ae0-e72d-4f54-9ab3-75b8eb148356&DisplayLang=en

Security Update for Microsoft XML Core Services 6.0 and Service Pack 1 (KB954459)

A security issue has been identified in Microsoft XML Core Services (MSXML) that could allow an attacker to compromise your Windows-based system and gain control over it.

http://www.microsoft.com/downloads/details.aspx?FamilyID=59914795-60c7-4ebe-828d-f28cb457e6e3&DisplayLang=en

Windows Essential Business Server Security and Protection

This document provides information about the configuration of the security components in Windows® Essential Business Server.

http://www.microsoft.com/downloads/details.aspx?FamilyID=cf9a2c7b-3e30-4f38-9b58-d3b4fde780e0&DisplayLang=en

Identity Lifecycle Manager "2" Datasheet

http://www.microsoft.com/downloads/details.aspx?FamilyID=b931926a-8fd6-4983-beeb-45976198b9ba&DisplayLang=en

SQL Server White Paper: SQL Server 2008 Compliance Guide

This paper provides an overview of how to approach compliance for the management of the SQL Server database. It describes the compliance-related features of SQL Server 2008 and how to apply them to IT controls. This paper includes tips and scripts to help jump-start compliance solution development.

http://www.microsoft.com/downloads/details.aspx?FamilyID=6e1021dd-65b9-41c2-8385-438028f5acc2&DisplayLang=en

Microsoft Online Services Sign In Tool V1

Client application that enables single sign-on to Microsoft Online Services

http://www.microsoft.com/downloads/details.aspx?FamilyID=01f6c0e4-f897-442a-8462-425f8edddad9&DisplayLang=en

Microsoft Security Intelligence Report volume 5 (January – June 2008)

This is the fifth volume of the Microsoft Security Intelligence Report (SIR).

http://www.microsoft.com/downloads/details.aspx?FamilyID=b2984562-47a2-48ff-890c-edbeb8a0764c&DisplayLang=en

Microsoft® Forefront™ codename "Stirling" Beta

An integrated security system that is easier to manage and control

Microsoft® Forefront™ codename "Stirling" is an integrated security system that delivers comprehensive, coordinated protection across endpoints, messaging and collaboration servers and the network edge that is easier to manage and control.

http://www.microsoft.com/downloads/details.aspx?FamilyID=65bd5f8a-d94c-457a-9f88-2046597130e1&DisplayLang=en

Update to Mitigate MS08-037 UDP Behavior Across NAT for Microsoft ISA Server 2004 Standard Edition

http://www.microsoft.com/downloads/details.aspx?FamilyID=0AB83F12-653B-4BE1-BEFE-594C4EF62BAA&displaylang=en

Update to Mitigate MS08-037 UDP Behavior Across NAT for Microsoft ISA Server 2004 Enterprise Edition

http://www.microsoft.com/downloads/details.aspx?FamilyID=0AB83F12-653B-4BE1-BEFE-594C4EF62BAA&displaylang=en

Update to Mitigate MS08-037 UDP Behavior Across NAT for Microsoft ISA Server 2006

http://www.microsoft.com/downloads/details.aspx?FamilyID=E96A6E20-0C04-4C7D-9F3E-207B02AE29CC&displaylang=en

EVENTS/WEBCASTS

Visit TechNet Spotlight: www.microsoft.com/technetspotlight

Video on Demand, Video Downloads, PowerPoint Presentations, Audio and more

Microsoft Security Webcast Series: Upcoming and On-Demand

Security Webcast Calendar http://go.microsoft.com/fwlink/?LinkId=37910

Find security webcasts listed in an easy-to-use calendar format.

Upcoming Security Webcasts

http://www.microsoft.com/events/security/upcoming.mspx

Register for the following Webcasts on the link above

TechNet Webcast: Microsoft Security Intelligence Report 5: Latest Trends in Vulnerabilities, Exploits, and Malicious Software (Level 200)

Wednesday, December 8, 2008 8:00 A.M.-9:30 A.M. Pacific Time

TechNet Webcast: Information About Microsoft December Security Bulletins (Level 200)

Wednesday, December 10, 2008 11:00 A.M.-12:00 P.M. Pacific Time

On-Demand Security Webcasts

http://www.microsoft.com/events/security/ondemand.mspx

NEW OR UPDATED KB’s

Microsoft Internet Security and Acceleration Server

DNS queries that pass through Forefront Threat Management Gateway NAT do not use random source ports

http://support.microsoft.com/kb/957298

FIX: After you configure the rules in ISA Server 2006 to apply to all users, ISA Server may sometimes try to authenticate users

http://support.microsoft.com/kb/956924

FIX: ISA Server 2006 may be overloaded with authorization attempts after you apply hotfix 955113

http://support.microsoft.com/kb/956922

FIX: A VPN client that uses RADIUS authentication may not log on to the internal network when the User Mapping option is enabled in ISA Server 2006

http://support.microsoft.com/kb/956923

Description of the ISA Server 2006 hotfix package: August 20, 2008

http://support.microsoft.com/kb/956925

FIX: When you use HTTP to HTTPS redirection in ISA Server 2006, port 0 is appended to the URL

http://support.microsoft.com/kb/956858

DNS queries that pass through an ISA Server 2000 NAT gateway do not use random source ports

http://support.microsoft.com/kb/956637

DNS queries that are passed through ISA Server 2004 NAT do not use random source ports

http://support.microsoft.com/kb/958024

DNS queries that are passed through the ISA Server 2006 NAT do not use random source ports

http://support.microsoft.com/kb/956570

How to block traffic from an Internet-based music sharing service in Microsoft Forefront Threat Management Gateway, Medium Business Edition

http://support.microsoft.com/kb/837447

Kerberos authentication to remote Web servers fails for Web proxy clients

http://support.microsoft.com/kb/840613

How to configure ISA Server 2004, ISA Server 2006 Windows Essential Business Server 2008 to skip name resolution in a Web proxy chaining configuration

http://support.microsoft.com/kb/891244

A.O.B

Join the Discussion on End-to-End Trust http://go.microsoft.com/?linkid=9480793

Microsoft believes the time is ripe for a broad public dialog about how to build a roadmap for bringing Trustworthy Computing to the Internet. To that end, we have established a public discussion forum where anyone concerned about online security and privacy can let their voice be heard.

Security Help and Support for IT Professionals http://go.microsoft.com/?linkid=9480842

TechNet Troubleshooting and Support Page http://go.microsoft.com/?linkid=9480843

Microsoft Security Glossary http://go.microsoft.com/?linkid=9480844

TechNet Security Center http://go.microsoft.com/?linkid=9480845

MSDN Security Developer Center http://go.microsoft.com/?linkid=9480846

Midsize Business Security Center http://go.microsoft.com/?linkid=9480847

Sign-Up for the Microsoft Security Notification Service http://go.microsoft.com/?linkid=9480848

Security Bulletin Search Page http://go.microsoft.com/?linkid=9480849

Home Users: Protect Your PC http://go.microsoft.com/?linkid=9480850

MCSE/MCSA: Security Certifications http://go.microsoft.com/?linkid=9480851

Subscribe to TechNet http://go.microsoft.com/?linkid=9480852

November 2008 - Technical Rollup Mail - Security

Justin Zarb — Sat, 01 Nov 2008 20:52:00 GMT

NEWS

Download the Urgent Security Update for Windows http://www.microsoft.com/protect/computer/updates/bulletins/200810_oob.mspx

Microsoft released an out-of-band security update on October 23 for all currently supported versions of Microsoft Windows. Download and install the update from Microsoft Update today.

Restore Infected PCs with the Malware Removal Starter Kit! https://partner.microsoft.com/40011132?campaign_type=ms_com_webpage&campaign=securityhomepage&landing_page=SolutionAcc_securitysuite_MSPP

You’ll get free, tested guidance and tools to help you combat malware attacks and restore infected systems—so your customers can safely get back to work.

Microsoft Seeks to End Lottery Fraud http://www.microsoft.com/security/lottery/default.mspx Our new effort to end lottery scams includes a reporting system for victims of identity theft, partnerships with other companies, and providing analyzed data to global law enforcement agencies.

Microsoft Security Assessment Tool http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=10773471&s1=3be15275-38db-4726-9c6c-235b08032b7c

Wouldn't it be great if you had a report created for your business that detailed specific actions you should take to further secure your IT environment? Wouldn't it be great if that report was built from an assessment of your current security requirements cross-checked against an assessment of your current security investments? Wouldn't it be great if there was a free tool to do this? Guess what? The Microsoft Security Assessment Tool (MSAT) is that free tool. We've just released a new version (v4) with a new UI and a new extended report. Download MSAT here.

Online Identity Theft: Changing the Game - Protecting Personal Information on the Internet http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=10773473&s1=3be15275-38db-4726-9c6c-235b08032b7c

Identity theft is not only a threat faced by consumers but also a significant concern for organisations as they handle growing volumes of personally identifiable information (PII) and use it in more diverse ways. This paper outlines a set of near-term tactics for mitigating online identity theft as well as a longer-range strategic vision for fundamentally 'changing the game' with regard to how people assert their identity on the Internet and how such identity claims are verified by other parties during an online interaction or transaction.

Security Development Lifecycle: Three New Programmes http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=10773474&s1=3be15275-38db-4726-9c6c-235b08032b7c

As part of its commitment to make the Security Development Lifecycle (SDL) available to every developer, Microsoft is delivering three new SDL programmes and tools in November 2008: the SDL Pro Network, the SDL Optimisation Model, and the Microsoft SDL Threat Modelling Tool. These offerings will enable the industry to create more secure and privacy-enhanced technology for an online world. Learn more about these programmes or watch a demo about the SDL Threat Modelling Tool.

Microsoft Security Bulletin Summary for October, 2008

http://www.microsoft.com/technet/security/bulletin/ms08-oct.mspx

Search for previous security bulletins http://go.microsoft.com/?linkid=3992478

Security Bulletin Feed http://go.microsoft.com/?linkid=3992479 RSS http://go.microsoft.com/?linkid=3992480

Microsoft Internet Security and Acceleration Server

Internet Security and Acceleration (ISA) Server TechCenter

http://technet.microsoft.com/en-gb/forefront/edgesecurity/default.aspx

Please note that if you have feedback on documentation or wish to request new documents - email isadocs@microsoft.com

Forefront Edge Security Community

http://technet.microsoft.com/en-gb/forefront/edgesecurity/bb687298.aspx

Forefront TMG (ISA Server) Product Team Blog

The ISA Server Product Team Blog (http://blogs.technet.com/isablog/) is updated on a regular basis. Latest entries include:

Using a Client Certificate when Bridging SSL traffic from ISA Server

http://blogs.technet.com/isablog/archive/2008/10/22/using-a-client-certificate-when-bridging-ssl-traffic-from-isa-server.aspx

A Preview of Exciting Things to Come

http://blogs.technet.com/isablog/archive/2008/10/19/a-preview-of-exciting-things-to-come.aspx

ISA Server wins Readers' Choice award

http://blogs.technet.com/isablog/archive/2008/10/07/isa-server-wins-readers-choice-award.aspx

Unable to “Check Out” a Document in MOSS 2007 Published Through ISA Server 2006

http://blogs.technet.com/isablog/archive/2008/10/02/unable-to-check-out-a-document-in-moss-2007-published-through-isa-server-2006.aspx

Intelligent Application Gateway 2007

Intelligent Application Gateway 2007 Technical Resources

http://technet.microsoft.com/en-gb/forefront/edgesecurity/bb687299.aspx

Forefront Edge Security Community

http://technet.microsoft.com/en-gb/forefront/edgesecurity/bb687298.aspx

Intelligent Application Gateway Product Team Blog

The IAG Product Team Blog (http://blogs.technet.com/edgeaccessblog) is updated on a regular basis. Latest entries include:

Publishing SharePoint with IAG 2007 – Part 1: What is SharePoint AAM and why do we need it?

http://blogs.technet.com/edgeaccessblog/archive/2008/10/12/publishing-sharepoint-with-iag-2007-part-1-what-is-sharepoint-aam-and-why-do-we-need-it.aspx

Publishing SharePoint with IAG 2007 – Part 2: Common Questions

http://blogs.technet.com/edgeaccessblog/archive/2008/10/13/publishing-sharepoint-with-iag-2007-part-2-common-questions.aspx

Publishing SharePoint with IAG 2007 – Part 3: SharePoint Topologies

http://blogs.technet.com/edgeaccessblog/archive/2008/10/13/publishing-sharepoint-with-iag-2007-part-3-sharepoint-topologies.aspx

DOCUMENTS

White Paper: Managing a Public Key Infrastructure Using Active Directory Certificate Services and Identity Lifecycle Manager (ILM) http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=10773472&s1=3be15275-38db-4726-9c6c-235b08032b7c

This white paper, from Oxford Computer Group explores many of the business drivers for a Microsoft-centric Certificate and Card Management System (CCMS), a term coined to describe the conjoined capabilities of Active Directory Certificate Services and Identity Lifecycle Manager. It explores the challenges and opportunities of implementing a CCMS solution from the perspectives of design, implementation, operations, etc.

Patterns & Practices Security Engineering Update http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=10773476&s1=3be15275-38db-4726-9c6c-235b08032b7c

Check out J. D. Meier's overview of the patterns & practices approach to security engineering, which covers - among other topics - the security frame used to perform security code and design inspections.

Security Tip of the Month: Planning for Hyper-V Security http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=10773477&s1=3be15275-38db-4726-9c6c-235b08032b7c

How do you know who is accessing what in your IT environment? This vital question is often faced by security administrators, and many IT organisations have challenges identifying and understanding patterns of client access to enterprise resources. This article offers some quick tips and tools to help you understand which users or system accounts have access to which resources, and when.

Windows Vista Security Guide http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=10773479&s1=3be15275-38db-4726-9c6c-235b08032b7c

This guide provides you with specific recommendations and automated tools to help strengthen the security of desktop and laptop computers running Windows Vista in a domain with the Active Directory service. You'll also learn how to use the GPOAccelerator tool that accompanies the guide to help you automatically deploy security settings in minutes instead of hours.

WFAS Design and Deployment Guide http://www.microsoft.com/downloads/info.aspx?na=22&p=121&SrcDisplayLang=en&SrcCategoryId=&SrcFamilyId=&u=%2fdownloads%2fdetails.aspx%3fFamilyID%3de4a6d0d6-c8c3-414a-ad61-abce6889449d%26DisplayLang%3den

This guide helps you design and deploy Windows Firewall with Advanced Security settings and rules that meet your goals for network security.

Full Volume Encryption using Windows BitLocker Drive Encryption Datasheet http://www.microsoft.com/downloads/info.aspx?na=22&p=130&SrcDisplayLang=en&SrcCategoryId=&SrcFamilyId=&u=%2fdownloads%2fdetails.aspx%3fFamilyID%3d7abb19b9-385f-450a-ba25-aa505ca8935c%26DisplayLang%3den

The Full Volume Encryption using Windows BitLocker Drive Encryption offering capitalizes on the Microsoft Solution Framework (MSF) to envision, plan, develop, stabilize (test), and deploy BitLocker in your environment.

Understanding the Servicing Models for Major Microsoft Software http://www.microsoft.com/downloads/info.aspx?na=22&p=138&SrcDisplayLang=en&SrcCategoryId=&SrcFamilyId=&u=%2fdownloads%2fdetails.aspx%3fFamilyID%3d0e39a542-2c07-41e4-868b-6f39762bcbed%26DisplayLang%3den

Understanding the Servicing Models for Major Microsoft Software describes the business and technical reasoning in, and the processes comprising the evaluation and delivery of code changes within security update packages.

Network Access Protection with IPsec Enforcement Datasheet http://www.microsoft.com/downloads/info.aspx?na=22&p=137&SrcDisplayLang=en&SrcCategoryId=&SrcFamilyId=&u=%2fdownloads%2fdetails.aspx%3fFamilyID%3d3d551f59-6318-4244-b3b0-463d33a4e2e3%26DisplayLang%3den

Network Access Protection is designed to protect both remote and local users from viruses, worms, and malicious software by helping to verify and directly update any computer attempting to access the network while restricting the network access of non-compliant clients

Enterprise Data Security Optimization Datasheet http://www.microsoft.com/downloads/info.aspx?na=22&p=136&SrcDisplayLang=en&SrcCategoryId=&SrcFamilyId=&u=%2fdownloads%2fdetails.aspx%3fFamilyID%3deb91333a-c26b-4a0d-9251-80a494df9e5c%26DisplayLang%3den

DOWNLOADS

UrlScan v3.0 Released to the Web http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=10773475&s1=3be15275-38db-4726-9c6c-235b08032b7c

UrlScan version 3.0 is a security tool that restricts the types of HTTP requests that Internet Information Services (IIS) 6.0 will process. UrlScan screens all incoming requests to the server by filtering the requests by rules that are set by the administrator. Filtering the requests helps secure the server by ensuring that only valid requests are processed.

Data Encryption Toolkit for Mobile PCs http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=10773480&s1=3be15275-38db-4726-9c6c-235b08032b7c

Benefit from tested guidance and powerful tools to help you protect your most vulnerable information - the data residing on your laptops. This toolkit shows you how to use two key encryption technologies: BitLocker Drive Encryption, which is included with specific versions of Windows Vista, and the Encrypting File System, which is included with Windows XP Professional and Windows Vista.

Security Compliance Management Toolkit http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=10773481&s1=3be15275-38db-4726-9c6c-235b08032b7c

This toolkit provides you with best practices to plan, deploy, monitor and remediate a security baseline for your organisation. It also offers a proven method that you can use to effectively monitor the compliance state of a security baseline for Windows Vista, Windows XP Service Pack 2 (SP2) and Windows Server 2003 SP2.

Podcast: BitLocker Drive Encryption http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=10773482&s1=3be15275-38db-4726-9c6c-235b08032b7c

In this podcast, Paul Cooke, Director in the Windows Client division specialising in security, discusses BitLocker Drive Encryption, and how it has been extended in Windows Vista SP1.

Podcast: Advanced Group Policy Podcast http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=10773483&s1=3be15275-38db-4726-9c6c-235b08032b7c

Learn how to effectively use the new Group Policy objects in Windows Vista to improve manageability and strengthen security with this podcast by Derek Melber, author, IT consultant and Microsoft MVP for Group Policy.

October 2008 Security Release ISO Image http://www.microsoft.com/downloads/info.aspx?na=22&p=60&SrcDisplayLang=en&SrcCategoryId=7&SrcFamilyId=&u=%2fdownloads%2fdetails.aspx%3fFamilyID%3d0a678ca9-5953-44cd-a781-9990d49e5c21%26DisplayLang%3den

This DVD5 ISO image file contains the security updates for Windows released on Windows Update on October 14th, 2008.

Enterprise Library 4.1--October 2008 http://www.microsoft.com/downloads/info.aspx?na=22&p=60&SrcDisplayLang=en&SrcCategoryId=&SrcFamilyId=&u=%2fdownloads%2fdetails.aspx%3fFamilyID%3d1643758b-2986-47f7-b529-3e41584b6ce5%26DisplayLang%3den

Microsoft Enterprise Library is a collection of reusable application blocks designed to assist software developers with common enterprise development challenges. This release includes: Caching, Cryptography, Data Access, Exception Handling, Logging, Policy Injection, Security, Validation, and Unity.

Data Encryption Toolkit http://www.microsoft.com/downloads/info.aspx?na=22&p=84&SrcDisplayLang=en&SrcCategoryId=&SrcFamilyId=&u=%2fdownloads%2fdetails.aspx%3fFamilyID%3d1a99576a-fe67-418f-88b1-81e2055fe977%26DisplayLang%3den

EVENTS/WEBCASTS

Visit TechNet Spotlight: http://www.microsoft.com/technetspotlight

Video on Demand, Video Downloads, PowerPoint Presentations, Audio and more

Microsoft Security Webcast Series: Upcoming and On-Demand

Security Webcast Calendar http://go.microsoft.com/fwlink/?LinkId=37910

Find security webcasts listed in an easy-to-use calendar format.

Upcoming Security Webcasts

http://www.microsoft.com/events/security/upcoming.mspx

How Microsoft does IT: Managing Network Access Protection (Level 300)

Tuesday, November 11, 2008 9:30 AM Pacific Time

Network Access Protection (NAP) is a powerful new Windows Server 2008 feature that can help protect networks from malicious software (malware) and other threats. This webcast explains how organizations can use NAP to institute requirements for accessing a network, create policies that check for compliance with those requirements, and update and manage devices that are not in compliance. Join us to learn how Microsoft IT manages NAP within Microsoft and how organizations can leverage this feature to report on health policy compliance, and to take action to address identified risks.

On-Demand Security Webcasts

http://www.microsoft.com/events/security/ondemand.mspx

New or updated KB’s

Microsoft Internet Security and Acceleration Server

Error 0x80072020 installing ISA Configuration Storage Server

http://support.microsoft.com/kb/958895

AOB

Security Help and Support for IT Professionals http://go.microsoft.com/?linkid=9480842

TechNet Troubleshooting and Support Page http://go.microsoft.com/?linkid=9480843

Microsoft Security Glossary http://go.microsoft.com/?linkid=9480844

TechNet Security Center http://go.microsoft.com/?linkid=9480845

MSDN Security Developer Center http://go.microsoft.com/?linkid=9480846

Midsize Business Security Center http://go.microsoft.com/?linkid=9480847

Sign-Up for the Microsoft Security Notification Service http://go.microsoft.com/?linkid=9480848

Security Bulletin Search Page http://go.microsoft.com/?linkid=9480849

Home Users: Protect Your PC http://go.microsoft.com/?linkid=9480850

MCSE/MCSA: Security Certifications http://go.microsoft.com/?linkid=9480851

Subscribe to TechNet http://go.microsoft.com/?linkid=9480852

October 2008 - Technology Rollup Mail - Security

conuktrm — Wed, 01 Oct 2008 02:01:45 GMT

News

End-to-End Trust: What We've Learned So Far http://go.microsoft.com/?linkid=9480785

At the RSA Conference 2008 in April, Microsoft proposed a vision for End-to-End Trust and began an internal effort to identify scenarios that would realize this vision in a concrete form. This communication shares some of the feedback we have received to date from governments, industry partners, customers, industry analysts, and public interest groups. The article expresses our thoughts on that feedback and provides an update on our efforts around in-person-proofing (IPP) as the basis for authenticating identity attributes on the Internet.

Microsoft Code Name “Zermatt” http://go.microsoft.com/?linkid=9480786

The Federated Identity team is excited to offer a public beta of Microsoft Code Name "Zermatt." “Zermatt” is a .NET developer framework and SDK that helps developers build claims-aware applications to address today’s application security requirements. “Zermat” uses a simplified model that is open and extensible, can improve security, and boosts productivity for developers. Developers can build externalized authentication (authN) capabilities for “relying party” applications and build custom “identity providers,” often referred to as Security Token Services (STS).

Internet Explorer 8 (IE8) beta 2 http://go.microsoft.com/?linkid=9569283

IE8 beta 2 has just been released and at the core of its feature set is a strong focus on security. You will find ActiveX improvements including per site and per user activation, malware, phishing and cross site scripting

(XSS) prevention as well as a brand new In-Private browsing mode. IE8 makes using the web a safe and productive experience. You can read more about these security features and much more on the IE8 team blog. http://go.microsoft.com/?linkid=9569364

Forefront Client Security Service Pack 1 Now Available http://go.microsoft.com/?linkid=9446396

Forefront Client Security SP1 provides new support for Windows Server 2008 roles and the ability to run both the FCS agent and management console on Hyper-V. Forefront Client Security customers will be automatically prompted to install Forefront Client Security SP1 via Microsoft Update. New customers who download the evaluation software will be prompted to upgrade to SP1 after installing.

Proactive Security Management for Your Business http://go.microsoft.com/?linkid=9446397

Discover a free security assessment tool that leads you through a series of questions to help you confidently harden your security.

Webcast: Microsoft Security Intelligence Report 4 - Latest Trends in Vulnerabilities, Exploits, and Malicious Software (Level 200) http://go.microsoft.com/?linkid=9522162

With data gathered from more than 450 million computers worldwide, the Microsoft Security Intelligence Report offers a unique insight into the IT threat landscape.

Microsoft Security Bulletin Summary for September, 2008

http://www.microsoft.com/technet/security/bulletin/ms08-sep.mspx

Search for previous security bulletins http://go.microsoft.com/?linkid=3992478

Security Bulletin Feed http://go.microsoft.com/?linkid=3992479 RSS http://go.microsoft.com/?linkid=3992480

Microsoft Internet Security and Acceleration Server

Internet Security and Acceleration (ISA) Server TechCenter

http://technet.microsoft.com/en-gb/forefront/edgesecurity/default.aspx

Please note that if you have feedback on documentation or wish to request new documents - email isadocs@microsoft.com

Forefront Edge Security Community

http://technet.microsoft.com/en-gb/forefront/edgesecurity/bb687298.aspx

Forefront TMG (ISA Server) Product Team Blog

The ISA Server Product Team Blog (http://blogs.technet.com/isablog/) is updated on a regular basis. Latest entries include:

Announcing: Forefront Threat Management Gateway, Medium Business Edition

http://blogs.technet.com/isablog/archive/2008/09/16/announcing-forefront-threat-management-gateway-medium-business-edition.aspx

ISA Administrative Roles - NTFS and Registry Permissions

http://blogs.technet.com/isablog/archive/2008/09/08/isa-administrative-roles-ntfs-and-registry-permissions.aspx

New Articles on Tales from the Edge

http://blogs.technet.com/isablog/archive/2008/09/04/new-articles-on-tales-from-the-edge.aspx

Intelligent Application Gateway 2007

Intelligent Application Gateway 2007 Technical Resources

http://technet.microsoft.com/en-gb/forefront/edgesecurity/bb687299.aspx

Forefront Edge Security Community

http://technet.microsoft.com/en-gb/forefront/edgesecurity/bb687298.aspx

Intelligent Application Gateway Product Team Blog

The IAG Product Team Blog (http://blogs.technet.com/edgeaccessblog) is updated on a regular basis. Latest entries include:

How IAG 2007 Can Mitigate Against SQL Injection Attacks – Demo Scenario

http://blogs.technet.com/edgeaccessblog/archive/2008/09/19/how-iag-2007-can-mitigate-sql-injection-attacks-demo-scenario.aspx

ISA 2006 SP1 and IAG 2007 Supportability Statement

http://blogs.technet.com/edgeaccessblog/archive/2008/09/18/isa-2006-sp1-and-iag-2007-supportability-statement.aspx

Certificates on IAG 2007

http://blogs.technet.com/edgeaccessblog/archive/2008/09/17/certificates-on-iag-2007.aspx

Performance Degradation in eGap 3.6 after apply Windows Server 2003 SP2

http://blogs.technet.com/edgeaccessblog/archive/2008/09/04/performance-degradation-in-egap-3-6-after-apply-windows-server-2003-sp2.aspx

Documents

Security Tip of the Month: Planning for Hyper-V Security http://go.microsoft.com/?linkid=9480787

Hyper-V Planning and Deployment Guide http://go.microsoft.com/?linkid=9480788

Gain an initial understanding of the considerations you should take into account when planning to deploy Hyper-V, and find installation and configuration details that will help you deploy it. Learn about virtual networking basics and how to configure the Hyper-V role for remote management on a full installation of Windows Server 2008.

Microsoft Assessment and Planning Toolkit 3.1 http://go.microsoft.com/?linkid=9480789

Download this free tool to identify servers for Hyper-V virtualization. This tool also offers migration assessment for Windows Vista, the 2007 Microsoft Office system, Windows Server 2008, and Microsoft SQL Server.

Ensure Safe Compliance of Your Offline Virtual Machine Library http://go.microsoft.com/?linkid=9480790

Download the new Offline Virtual Machine Servicing Tool Solution Accelerator, which automates software updates for virtual machines stored in a library managed by Virtual Machine Manager. This solution works with either System Center Configuration Manager 2007 or Windows Server Update Services.

Protecting Virtualized Environments with System Center Data Protection Manager 2007 http://go.microsoft.com/?linkid=9480791

This document discusses how Data Protection Manager offers comprehensive data protection for organizations of all sizes, helping to maintain the business value of your Virtual Server infrastructure by making it better protected and more available.

Deployment Cookbook: Microsoft Data Protection Manager and Virtual Machine Manager http://go.microsoft.com/?linkid=9480792

This step-by-step guide covers installing Microsoft Virtual Server and System Center Virtual Machine Manager; converting a workload to a virtual machine; installing Microsoft System Center Data Protection Manager; and backing up a running virtual machine.

Downloads

Microsoft Forefront Security for SharePoint with SP1 Documentation

http://www.microsoft.com/downloads/details.aspx?FamilyID=125efb1e-7ff8-4cc8-934a-28fc7c7e59f0&DisplayLang=en

Microsoft Forefront Server Security Management Console

Documentation

Forefront Server Security Management Console allows administrators to easily manage Forefront Security for Exchange Server, Forefront Security for SharePoint, and Microsoft Antigen.

http://www.microsoft.com/downloads/details.aspx?FamilyID=ae4ce23b-9e1e-455c-87a4-36167fe43107&DisplayLang=en

Microsoft Antigen SP1 Documentation

The Messaging Security Suite includes Antigen for Exchange, Antigen for SMTP Gateways, and Antigen Spam Manager, and provides server-level protection against the latest e-mail threats.

http://www.microsoft.com/downloads/details.aspx?FamilyID=7d00160e-4d15-4459-98a3-89f393ac008e&DisplayLang=en

Microsoft Forefront Security for Exchange Server with SP1 Documentation

http://www.microsoft.com/downloads/details.aspx?FamilyID=5cd4e36e-2dab-44d6-990e-3b8184b1cb1b&DisplayLang=en

Windows Genuine Advantage Notifications

Windows Genuine Advantage Notifications is a tool to help reduce software piracy. This tool will confirm that the copy of Windows installed on the PC is genuine and properly licensed. If it is not genuine, the tool will provide periodic reminders to help you take the appropriate action.

http://www.microsoft.com/downloads/details.aspx?FamilyID=f89b6508-bf26-4a5e-84eb-11c35a249d7a&DisplayLang=en

Internet Security and Acceleration (ISA) Server 2006 180-Day Trial Version

ISA Server 2006 is the integrated edge security gateway that helps protect your IT environment from Internet-based threats while providing your users with fast and secure remote access to applications and data. ISA Server 2006 is available for download in both Standard Edition and Enterprise Edition.

http://www.microsoft.com/downloads/details.aspx?FamilyID=84504cad-893b-4212-9ab2-999ad1d8fe68&DisplayLang=en

Managing Compliance with Microsoft Dynamics AX 2009

Learn how Microsoft Dynamics AX can help organizations manage compliance adoption and turn them into business benefits.

http://www.microsoft.com/downloads/details.aspx?FamilyID=2d60ea0e-79a2-4700-802a-84d790fa10b7&DisplayLang=en

Microsoft Forefront Security for Exchange Server with SP1 Documentation

http://www.microsoft.com/downloads/details.aspx?FamilyID=5cd4e36e-2dab-44d6-990e-3b8184b1cb1b&DisplayLang=en

Microsoft Antigen 9 with SP1 Readme

The Messaging Security Suite includes Antigen for Exchange, Antigen for SMTP Gateways, and Antigen Spam Manager, and provides server-level protection against the latest e-mail threats.

http://www.microsoft.com/downloads/details.aspx?FamilyID=7793ba73-50c0-4e07-9cd9-211558cbd890&DisplayLang=en

Podcasts: How Microsoft IT Manages Physical Security through Strategic IT Convergence

The purpose of World Wide Security Operations is to protect Microsoft’s assets in a manner consistent with corporate culture.

http://www.microsoft.com/downloads/details.aspx?FamilyID=b72ea3fb-6905-48b6-a987-cc4c032de7e1&DisplayLang=en

Visio 2007 Connector for Microsoft Baseline Security Analyzer (MBSA) 2.1

The Microsoft Office Visio 2007 Connector for Microsoft Baseline Security Analyzer (MBSA) lets you view the results of an MBSA scan in a clear, comprehensive Microsoft Office Visio 2007 network diagram.

http://www.microsoft.com/downloads/details.aspx?FamilyID=95e0f821-9c2c-4287-9157-49c1205e08ef&DisplayLang=en

September 2008 Security Release ISO Image

This DVD5 ISO image file contains the security updates for Windows released on Windows Update on September 9th, 2008.

http://www.microsoft.com/downloads/details.aspx?FamilyID=e15ba462-d99e-4129-a050-e9e3617a332a&DisplayLang=en

Microsoft® Windows® Malicious Software Removal Tool (KB890830)

http://www.microsoft.com/downloads/details.aspx?FamilyID=ad724ae0-e72d-4f54-9ab3-75b8eb148356&DisplayLang=en

Microsoft® Windows® Malicious Software Removal Tool (KB890830) x64

http://www.microsoft.com/downloads/details.aspx?FamilyID=585d2bde-367f-495e-94e7-6349f4effc74&DisplayLang=en

Update for Office Outlook 2003 Junk Email Filter (KB956077)

This update provides the Junk E-mail Filter in Microsoft Office Outlook 2003 with a more current definition of which e-mail messages should be considered junk e-mail.

http://www.microsoft.com/downloads/details.aspx?FamilyID=50b2f49e-5c5e-40a9-b59b-ff3ec147334c&DisplayLang=en

Update for Microsoft Office Outlook 2007 Junk Email Filter (KB956080)

This update provides the Junk E-mail Filter in Microsoft Office Outlook 2007 with a more current definition of which e-mail messages should be considered junk e-mail.

http://www.microsoft.com/downloads/details.aspx?FamilyID=2065e3dd-0af9-4333-bc8d-331ddb0fe906&DisplayLang=en

Extended Security Update Inventory Tool

http://www.microsoft.com/downloads/details.aspx?FamilyID=2c93da1d-48a0-4e5c-991f-87e08954f61b&DisplayLang=en

Windows XP Common Criteria Administrator Guide 3.0

This document is the Microsoft Windows XP Evaluated Configuration Administrator’s Guide that was used in the Common Criteria security evaluation of Windows XP and Windows Server 2003.

http://www.microsoft.com/downloads/details.aspx?FamilyID=9a7f0b16-72ce-4675-aec8-58785c4e37ee&DisplayLang=en

Windows Server 2003 SP2 R2 Common Criteria Administrator Guide 3.0

This document is the Microsoft Windows Server 2003 SP2 R2 Evaluated Configuration Administrator’s Guide version 3.0 that was used in the completion of the Windows XP SP2 and Windows Server 2003 SP2 R2 Common Criteria security evaluation.

http://www.microsoft.com/downloads/details.aspx?FamilyID=39598841-e693-4891-9234-cfd1550f3949&DisplayLang=en

Windows Client Springboard Series: BitLocker Drive Encryption

Paul Cooke, Director in the Windows Client division specializing in security, discusses BitLocker Drive Encryption, and how it has been extended in Windows Vista SP1.

http://www.microsoft.com/downloads/details.aspx?FamilyID=4607a585-df7f-4940-b956-5ae3d2815055&DisplayLang=en

Public Key Infrastructure (PKI) for Security Solutions Datasheet

This offering uses the customer’s existing investments in Microsoft technologies to create an internal PKI solution that corresponds to the customer’s needs.

http://www.microsoft.com/downloads/details.aspx?FamilyID=4832cf1f-7dfa-4ca3-b92a-7fd121b22703&DisplayLang=en

Events/WebCasts

Visit TechNet Spotlight: www.microsoft.com/technetspotlight

Video on Demand, Video Downloads, PowerPoint Presentations, Audio and more

Microsoft Security Webcast Series: Upcoming and On-Demand

Security Webcast Calendar http://go.microsoft.com/fwlink/?LinkId=37910

Find security webcasts listed in an easy-to-use calendar format.

Upcoming Security Webcasts

http://www.microsoft.com/events/security/upcoming.mspx

Register for the following Webcasts on the link above

TechNet Webcast: Deploying Forefront Client Security in the Enterprise Using Virtualization (Level 300)

Wednesday, October 15, 2008 8:00 A.M.-9:00 A.M. Pacific Time

TechNet Webcast: Information About Microsoft October Security Bulletins (Level 200)

Wednesday, October 15, 2008 11:00 A.M.-12:00 P.M. Pacific Time

On-Demand Security Webcasts

http://www.microsoft.com/events/security/ondemand.mspx

New or updated KB’s

Microsoft Internet Security and Acceleration Server

Error message when you try to copy a Web proxy log record to a clipboard in ISA Server 2004: "Error message 0x8007013d: ERROR_MR_MID_NOT_FOUND"

http://support.microsoft.com/kb/951957

The compression and caching functionalities of ISA Server 2004 and ISA Server 2006 may cause file corruption in files that are larger than 64 KB

http://support.microsoft.com/kb/954264

Description of the ISA Server 2006 hotfix package: July 28, 2008

http://support.microsoft.com/kb/956269

An Outlook Anywhere client continually uses the wrong credentials every time that it tries to authenticate itself on an Exchange server after you install ISA Server 2006 Service Pack 1

http://support.microsoft.com/kb/956192

The Firewall service (Wspsrv.exe) may crash intermittently after you apply ISA Server 2006 Service Pack 1

http://support.microsoft.com/kb/956268

After you apply hotfix 955151, ISA Server 2006 supports the Secure/MIME feature in Exchange Server 2007

http://support.microsoft.com/kb/955127

Packets from the branch office may not reach the destination servers in the central office in ISA Server 2006

http://support.microsoft.com/kb/955118

The Outlook Web Access logon form does not display the "This is a private computer" option when you publish an Outlook Web Access site by using ISA Server 2006 with Service Pack 1

http://support.microsoft.com/kb/955112

Description of the ISA Server 2006 hotfix package: July 6, 2008

http://support.microsoft.com/kb/955151

The logon page does not appear correctly if you select French for the Internet Explorer language when you try to log on to an Outlook Web Access site that is published by using ISA Server 2006

http://support.microsoft.com/kb/955122

A request fails from a VPN client if the user who is dialed in belongs to a remote domain that has one-way trust in ISA Server 2006

http://support.microsoft.com/kb/955113

External clients cannot access the published server when you use a server publishing rule in ISA Server 2006 to publish one or more services

http://support.microsoft.com/kb/955110

Packets from a branch office may not reach the destination servers in the central office after you use ISA Server 2006 to create a site-to-site VPN connection between a central office and a branch office

http://support.microsoft.com/kb/955150

Intelligent Application Gateway 2007

Description of Update 5 for Intelligent Application Gateway 2007 Service Pack 1

http://support.microsoft.com/kb/956927

A.O.B

Join the Discussion on End-to-End Trust http://go.microsoft.com/?linkid=9480793

Security Help and Support for IT Professionals http://go.microsoft.com/?linkid=9480842

TechNet Troubleshooting and Support Page http://go.microsoft.com/?linkid=9480843

Microsoft Security Glossary http://go.microsoft.com/?linkid=9480844

TechNet Security Center http://go.microsoft.com/?linkid=9480845

MSDN Security Developer Center http://go.microsoft.com/?linkid=9480846

Midsize Business Security Center http://go.microsoft.com/?linkid=9480847

Sign-Up for the Microsoft Security Notification Service http://go.microsoft.com/?linkid=9480848

Security Bulletin Search Page http://go.microsoft.com/?linkid=9480849

Home Users: Protect Your PC http://go.microsoft.com/?linkid=9480850

MCSE/MCSA: Security Certifications http://go.microsoft.com/?linkid=9480851

Subscribe to TechNet http://go.microsoft.com/?linkid=9480852

September 2008 - Technical Rollup Mail - Security

Justin Zarb — Mon, 01 Sep 2008 02:00:00 GMT

News

Inside the Windows Vista Kernel http://go.microsoft.com/?linkid=9239060

By Mark Russinovich, Technical Fellow, Microsoft Platform and Services Division In this article, Mark discusses Windows Vista kernel features and enhancements in the areas of reliability, recovery, and security including the Kernel Transaction Manager, enhanced crash support, Volume Shadow Copy, BitLocker, and Code Integrity verification.

Evaluate System Center Configuration Manager 2007 SP1 http://go.microsoft.com/?linkid=9239062

Manage the full deployment and update life cycle with streamlined, policy-based automation and enhanced insight into -- and control over -- assets and systems compliance. Microsoft System Center Configuration Manager 2007 offers optimization for Windows--particularly Windows Server 2008 and Windows Vista--and extensibility to customized administration experiences and third-party applications.

patterns & practices Improving Web Services Security: Scenarios and Implementation Guidance for WCF http://go.microsoft.com/?linkid=9313821

Download the beta version of the WCF Security guide from the CodePlex web site. The guide, Improving Web Services Security: Scenarios and Implementation Guidance for WCF, is our Microsoft playbook for Windows Communication Foundation (WCF /"Indigo".) and shows you how to build secure services using WCF. A compendium of proven practices, product team recommendations and insights from the field, it includes end-to-end application scenarios (web applications / Smart Clients), as well as step-by-step 'How To's'. Most importantly, it frames the web services security space and shows you how to be effective with WCF.

Hyper-V RTM Now Available http://go.microsoft.com/?linkid=9239063

Take advantage of the scalability, high performance, reliability, security, flexibility, and manageability that an ideal virtualization platform should provide. A key feature of Windows Server 2008, Hyper-V has a thin, micro-kernelized hypervisor architecture with minimal attack surface, and can easily plug into your IT infrastructure so you can capitalize on your existing tools and processes for patching, provisioning, management, and support.

Windows Vista Security Guide http://go.microsoft.com/?linkid=9239064

Get the guidance and tools you need to use new and enhanced security technologies in Windows Vista to better defend the client computers in your organization against malware and protect corporate data. Application compatibility testing recommendations are also included.

Security Compliance Management http://go.microsoft.com/?linkid=9260645

Solution Accelerators are authoritative resources that help IT pros plan, deliver, operate, and manage IT systems that address real-world scenarios. Solution Accelerators provide free, prescriptive guidance and automation to accelerate cross-product integration, core infrastructure development, and other enhancements.

How Do I: Export and Import Certificates? http://go.microsoft.com/?linkid=9239072

Learn how to export and import certificates with this short, How-Do-I video.

Security White Papers http://go.microsoft.com/?linkid=9215650

Security white papers that address the specific security needs of particular industries, such as the professional services and financial services industries.

Microsoft Security Bulletin Summary for July, 2008

http://www.microsoft.com/technet/security/bulletin/ms08-jul.mspx

Search for previous security bulletins http://go.microsoft.com/?linkid=3992478

Security Bulletin Feed http://go.microsoft.com/?linkid=3992479 RSS http://go.microsoft.com/?linkid=3992480

Microsoft Internet Security and Acceleration Server

Internet Security and Acceleration (ISA) Server TechCenter

http://technet.microsoft.com/en-gb/forefront/edgesecurity/default.aspx

Please note that if you have feedback on documentation or wish to request new documents - email isadocs@microsoft.com

New Community Contributed Content includes:

Security Considerations with Forefront Edge Virtual Deployments

http://technet.microsoft.com/en-us/library/cc891502.aspx

Considerations when using antivirus software on ISA Server

http://technet.microsoft.com/en-us/library/cc707727.aspx

"Deep Packet Inspection"; What Does it Mean, Really?

http://technet.microsoft.com/en-us/library/cc707728.aspx

Deploying Forefront Client Security to non domain joined servers on a perimeter network through ISA Server 2006

http://technet.microsoft.com/en-us/library/cc752954.aspx

Security Considerations with Forefront Edge Virtual Deployments

http://technet.microsoft.com/en-us/library/cc891502.aspx

ISA Server Branch Office Policies Best Practices: ISA Server co-location with a domain controller

http://technet.microsoft.com/en-us/library/cc891503.aspx

KCD with Cross-Forest Accounts

http://technet.microsoft.com/en-us/library/cc752953.aspx

Forefront Edge Security Community

http://technet.microsoft.com/en-gb/forefront/edgesecurity/bb687298.aspx

Forefront TMG (ISA Server) Product Team Blog

The ISA Server Product Team Blog (http://blogs.technet.com/isablog/) is updated on a regular basis. Latest entries include:

Files larger than 512MB are not served from cache after ISA Server firewall service is restarted

http://blogs.technet.com/isablog/archive/2008/07/30/files-larger-than-512mb-are-not-served-from-cache-after-isa-server-firewall-service-is-restarted.aspx

New Article on Enhancing TS Gateway Security with ISA Server 2006

http://blogs.technet.com/isablog/archive/2008/08/03/new-article-on-enhancing-ts-gateway-security-with-isa-server-2006.aspx

Understanding how you use this blog

http://blogs.technet.com/isablog/archive/2008/08/07/understanding-how-you-use-this-blog.aspx

Tales from the Edge

http://blogs.technet.com/isablog/archive/2008/08/07/tales-from-the-edge.aspx

ISA Server 2006 SP1 – New Perfmon Counter

http://blogs.technet.com/isablog/archive/2008/08/19/isa-server-2006-sp1-new-perfmon-counter.aspx

ISA & TMG NAT behavior And MS08-037

http://blogs.technet.com/isablog/archive/2008/08/28/isa-tmg-nat-behavior-and-ms08-037.aspx

Intelligent Application Gateway 2007

Intelligent Application Gateway 2007 Technical Resources

http://technet.microsoft.com/en-gb/forefront/edgesecurity/bb687299.aspx

Forefront Edge Security Community

http://technet.microsoft.com/en-gb/forefront/edgesecurity/bb687298.aspx

Intelligent Application Gateway Product Team Blog

The IAG Product Team Blog (http://blogs.technet.com/edgeaccessblog) is updated on a regular basis. Latest entries include:

Anouncement: Two AES Ciphersuites (128/256 bits) are now supported

http://blogs.technet.com/edgeaccessblog/archive/2008/08/05/anouncement-two-aes-ciphersuites-128-256-bits-are-now-supported.aspx

Documents

Understanding and Configuring User Account Control in Windows Vista http://go.microsoft.com/?linkid=9239065

Find out how UAC works, including deployment scenarios and ensuring that older applications will be compatible.

Windows Vista Application Development Requirements for UAC http://go.microsoft.com/?linkid=9239066

This article is intended to assist application developers with designing Windows Vista-capable applications that are compliant with UAC. Detailed steps about the design process are included, along with code samples, requirements, and best practices. This article also details technical updates and changes to the user experience in Windows Vista.

Step-by-Step Guide to Controlling Device Installation and Usage with Group Policy http://go.microsoft.com/?linkid=9239067

Controlling installation and device usage this way improves your security, and it enhances the effectiveness of your help desk by limiting the devices that users can install to those your organization approves and supports. Learn how to control the installation and usage of devices on the computers that you manage with Windows Vista and Windows Server 2008.

Step-by-Step Guide to Managing Multiple Local Group Policy http://go.microsoft.com/?linkid=9239068

This guide covers the fundamental concepts needed to successfully configure Multiple Local Group Policy objects on stand-alone computers running Windows Vista and offers several task-based scenarios that show you how to use each feature.

Microsoft Forefront Client Security Enterprise Manager http://go.microsoft.com/?linkid=9239069

The Enterprise Manager tool allows you to aggregate reporting and management of up to 10 Forefront Client Security down-level deployments. With this tool, you can manage up to 100,000 client computers from a single Forefront Client Security console.

Microsoft Forefront Integration Kit for Network Access Protection http://go.microsoft.com/?linkid=9239070

Together, Forefront Client Security and NAP can provide an additional defense-in-depth layer against malicious attacks and give you a significant degree of control over the security and health of networked computers. This collection of software components and guidance will help you configure a compliance health policy for computers that run Forefront Client Security and isolate noncompliant computers to a restricted network until compliance can be properly addressed.

New Microsoft Security Development Lifecycle (SDL) Center http://go.microsoft.com/?linkid=9239071

Find information about this industry-leading software security assurance process, and quickly access process guidance, training and resources, tools, and blogs.

Downloads

Microsoft Antigen for Exchange with Antigen Spam Manager with SP1 Trial Software

http://www.microsoft.com/downloads/details.aspx?FamilyID=866b63bf-6207-4197-9c5d-511b7212e40c&DisplayLang=en

Microsoft Source Code Analyzer for SQL Injection

http://www.microsoft.com/downloads/details.aspx?FamilyID=58a7c46e-a599-4fcb-9ab4-a4334146b6ba&DisplayLang=en

Forefront Security for Office Communications Server 2007 Beta

http://www.microsoft.com/downloads/details.aspx?FamilyID=d128fd1a-42a2-47cb-9de8-e4ea8ba2382d&DisplayLang=en

July 2008 Security Releases ISO Image

http://www.microsoft.com/downloads/details.aspx?FamilyID=b9456bd2-f6ef-4d61-9d3c-fa855118397d&DisplayLang=en

Office 2003/XP Add-in: Remove Hidden Data

http://www.microsoft.com/downloads/details.aspx?FamilyID=144e54ed-d43e-42ca-bc7b-5446d34e5360&DisplayLang=en

Microsoft Internet Security and Acceleration (ISA) Server 2006 Service Pack 1

http://www.microsoft.com/downloads/details.aspx?FamilyID=d2feca6d-81d7-430a-9b2d-b070a5f6ae50&DisplayLang=en

Microsoft® Windows® Malicious Software Removal Tool (KB890830)

http://www.microsoft.com/downloads/details.aspx?FamilyID=ad724ae0-e72d-4f54-9ab3-75b8eb148356&DisplayLang=en

Microsoft® Windows® Malicious Software Removal Tool (KB890830) x64

http://www.microsoft.com/downloads/details.aspx?FamilyID=585d2bde-367f-495e-94e7-6349f4effc74&DisplayLang=en

Update for Microsoft Office Outlook 2007 Junk Email Filter (KB953463)

http://www.microsoft.com/downloads/details.aspx?FamilyID=e269e6f4-afaf-4703-9238-5b84951f6324&DisplayLang=en

Update for Microsoft Office Outlook 2003 Junk Email Filter (KB953465)

http://www.microsoft.com/downloads/details.aspx?FamilyID=8f008afb-f6a9-42b2-8472-279623063dfb&DisplayLang=en

Update for Windows Mail Junk E-mail Filter for x64-based Systems [July 2008] (KB905866)

http://www.microsoft.com/downloads/details.aspx?FamilyID=749e10cd-f40c-4f94-8e38-d4221ded7652&DisplayLang=en

Update for Windows Mail Junk E-mail Filter [July 2008] (KB905866)

http://www.microsoft.com/downloads/details.aspx?FamilyID=aa029fde-f341-44fc-8b85-0c6f3d3c2d69&DisplayLang=en

Step-by-Step Guide: Demonstrate NAP IPsec Enforcement in a Test Lab

http://www.microsoft.com/downloads/details.aspx?FamilyID=298ff956-1e6c-4d97-a3ed-7e7ffc4bed32&DisplayLang=en

Microsoft Internet Security and Acceleration Server 2006 Management Pack for OpsMgr 2007

http://www.microsoft.com/downloads/details.aspx?FamilyID=c576fcdf-42f0-4eb5-990d-e8e7c7e9c07e&DisplayLang=en

Secure Web and Remote Access Enablement Datasheet

http://www.microsoft.com/downloads/details.aspx?FamilyID=3d253737-4cda-4b35-99e3-08ebbc02efc8&DisplayLang=en

Enterprise Network Protection Datasheet

http://www.microsoft.com/downloads/details.aspx?FamilyID=74bb13dc-15a5-483a-a879-1882aaef3268&DisplayLang=en

Enterprise Data Security Optimization Datasheet

http://www.microsoft.com/downloads/details.aspx?FamilyID=eb91333a-c26b-4a0d-9251-80a494df9e5c&DisplayLang=en

Security, Identity, and Access Management Datasheet

http://www.microsoft.com/downloads/details.aspx?FamilyID=b53dee69-a3f9-4800-91a8-42c1b8b365db&DisplayLang=en

Identity and Access Optimization Datasheet

http://www.microsoft.com/downloads/details.aspx?FamilyID=e6daec91-7669-47a6-a9f7-39fcce339bcc&DisplayLang=en

Application and Host Protection Datasheet

http://www.microsoft.com/downloads/details.aspx?FamilyID=1c60fb1f-d23a-4d51-a6b4-15dd3c633ce3&DisplayLang=en

System Center Solution: Managing Data Server Compliance

http://www.microsoft.com/downloads/details.aspx?FamilyID=f5db44ae-7017-43fc-a65b-4948173c409d&DisplayLang=en

A Guide to Group Policy Preferences for Users of PolicyMaker Standard Edition

http://www.microsoft.com/downloads/details.aspx?FamilyID=8d5f2917-7b6d-460d-83c1-497b721d666c&DisplayLang=en

Events/WebCasts

Visit TechNet Spotlight: www.microsoft.com/technetspotlight

Video on Demand, Video Downloads, PowerPoint Presentations, Audio and more

Microsoft Security Webcast Series: Upcoming and On-Demand

Security Webcast Calendar http://go.microsoft.com/fwlink/?LinkId=37910

Find security webcasts listed in an easy-to-use calendar format.

Upcoming Security Webcasts

http://www.microsoft.com/events/security/upcoming.mspx

Register for the following Webcasts on the link above

TechNet Webcast: Information About Microsoft August Security Bulletins (Level 200)

Wednesday, August 13, 2008 11:00 A.M.-12:00 P.M. Pacific Time

On-Demand Security Webcasts

http://www.microsoft.com/events/security/ondemand.mspx

New or updated KB’s

Microsoft Internet Security and Acceleration Server

Microsoft server software and supported virtualization environments

http://support.microsoft.com/kb/957006

Intelligent Application Gateway 2007

Supported browsers, applications, and AV products in IAG

http://support.microsoft.com/kb/956907

Message of the Day feature in IAG

http://support.microsoft.com/kb/956906

Microsoft server software and supported virtualization environments

http://support.microsoft.com/kb/957006

Troubleshooting e-gap appliance sync issues

http://support.microsoft.com/kb/956895

A.O.B

Microsoft Product Lifecycle Information

Find information about your particular products on the Microsoft Product Lifecycle http://go.microsoft.com/?linkid=9239140 Web site.

See a List of Supported Service Packs http://go.microsoft.com/?linkid=9239141: Microsoft provides free software updates for security and nonsecurity issues for all supported service packs.

Security Awareness Materials http://go.microsoft.com/?linkid=9239085

Guidance, samples, and templates for creating a security-awareness program in your organization.

Learn Security On the Job http://go.microsoft.com/?linkid=9239086

Learning Paths for Security - Microsoft Training References and Resources http://go.microsoft.com/?linkid=9239087

August 2008 - Technical Rollup Mail - Security

Justin Zarb — Fri, 01 Aug 2008 02:00:00 GMT

News

Inside the Windows Vista Kernel http://go.microsoft.com/?linkid=9239060

Evaluate System Center Configuration Manager 2007 SP1 http://go.microsoft.com/?linkid=9239062

patterns & practices Improving Web Services Security: Scenarios and Implementation Guidance for WCF http://go.microsoft.com/?linkid=9313821

Hyper-V RTM Now Available http://go.microsoft.com/?linkid=9239063

Windows Vista Security Guide http://go.microsoft.com/?linkid=9239064

Security Compliance Management http://go.microsoft.com/?linkid=9260645

How Do I: Export and Import Certificates? http://go.microsoft.com/?linkid=9239072

Learn how to export and import certificates with this short, How-Do-I video.

Security White Papers http://go.microsoft.com/?linkid=9215650

Security white papers that address the specific security needs of particular industries, such as the professional services and financial services industries.

Microsoft Security Bulletin Summary for July, 2008

http://www.microsoft.com/technet/security/bulletin/ms08-jul.mspx

Search for previous security bulletins http://go.microsoft.com/?linkid=3992478

Security Bulletin Feed http://go.microsoft.com/?linkid=3992479 RSS http://go.microsoft.com/?linkid=3992480

Documents

Understanding and Configuring User Account Control in Windows Vista http://go.microsoft.com/?linkid=9239065

Find out how UAC works, including deployment scenarios and ensuring that older applications will be compatible.

Windows Vista Application Development Requirements for UAC http://go.microsoft.com/?linkid=9239066

Step-by-Step Guide to Controlling Device Installation and Usage with Group Policy http://go.microsoft.com/?linkid=9239067

Step-by-Step Guide to Managing Multiple Local Group Policy http://go.microsoft.com/?linkid=9239068

Microsoft Forefront Client Security Enterprise Manager http://go.microsoft.com/?linkid=9239069

Microsoft Forefront Integration Kit for Network Access Protection http://go.microsoft.com/?linkid=9239070

New Microsoft Security Development Lifecycle (SDL) Center http://go.microsoft.com/?linkid=9239071

Find information about this industry-leading software security assurance process, and quickly access process guidance, training and resources, tools, and blogs.

Downloads

Microsoft Antigen for Exchange with Antigen Spam Manager with SP1 Trial Software

http://www.microsoft.com/downloads/details.aspx?FamilyID=866b63bf-6207-4197-9c5d-511b7212e40c&DisplayLang=en

Microsoft Source Code Analyzer for SQL Injection

http://www.microsoft.com/downloads/details.aspx?FamilyID=58a7c46e-a599-4fcb-9ab4-a4334146b6ba&DisplayLang=en

Forefront Security for Office Communications Server 2007 Beta

http://www.microsoft.com/downloads/details.aspx?FamilyID=d128fd1a-42a2-47cb-9de8-e4ea8ba2382d&DisplayLang=en

July 2008 Security Releases ISO Image

http://www.microsoft.com/downloads/details.aspx?FamilyID=b9456bd2-f6ef-4d61-9d3c-fa855118397d&DisplayLang=en

Office 2003/XP Add-in: Remove Hidden Data

http://www.microsoft.com/downloads/details.aspx?FamilyID=144e54ed-d43e-42ca-bc7b-5446d34e5360&DisplayLang=en

Microsoft Internet Security and Acceleration (ISA) Server 2006 Service Pack 1

http://www.microsoft.com/downloads/details.aspx?FamilyID=d2feca6d-81d7-430a-9b2d-b070a5f6ae50&DisplayLang=en

Microsoft® Windows® Malicious Software Removal Tool (KB890830)

http://www.microsoft.com/downloads/details.aspx?FamilyID=ad724ae0-e72d-4f54-9ab3-75b8eb148356&DisplayLang=en

Microsoft® Windows® Malicious Software Removal Tool (KB890830) x64

http://www.microsoft.com/downloads/details.aspx?FamilyID=585d2bde-367f-495e-94e7-6349f4effc74&DisplayLang=en

Update for Microsoft Office Outlook 2007 Junk Email Filter (KB953463)

http://www.microsoft.com/downloads/details.aspx?FamilyID=e269e6f4-afaf-4703-9238-5b84951f6324&DisplayLang=en

Update for Microsoft Office Outlook 2003 Junk Email Filter (KB953465)

http://www.microsoft.com/downloads/details.aspx?FamilyID=8f008afb-f6a9-42b2-8472-279623063dfb&DisplayLang=en

Update for Windows Mail Junk E-mail Filter for x64-based Systems [July 2008] (KB905866)

http://www.microsoft.com/downloads/details.aspx?FamilyID=749e10cd-f40c-4f94-8e38-d4221ded7652&DisplayLang=en

Update for Windows Mail Junk E-mail Filter [July 2008] (KB905866)

http://www.microsoft.com/downloads/details.aspx?FamilyID=aa029fde-f341-44fc-8b85-0c6f3d3c2d69&DisplayLang=en

Step-by-Step Guide: Demonstrate NAP IPsec Enforcement in a Test Lab

http://www.microsoft.com/downloads/details.aspx?FamilyID=298ff956-1e6c-4d97-a3ed-7e7ffc4bed32&DisplayLang=en

Microsoft Internet Security and Acceleration Server 2006 Management Pack for OpsMgr 2007

http://www.microsoft.com/downloads/details.aspx?FamilyID=c576fcdf-42f0-4eb5-990d-e8e7c7e9c07e&DisplayLang=en

Secure Web and Remote Access Enablement Datasheet

http://www.microsoft.com/downloads/details.aspx?FamilyID=3d253737-4cda-4b35-99e3-08ebbc02efc8&DisplayLang=en

Enterprise Network Protection Datasheet

http://www.microsoft.com/downloads/details.aspx?FamilyID=74bb13dc-15a5-483a-a879-1882aaef3268&DisplayLang=en

Enterprise Data Security Optimization Datasheet

http://www.microsoft.com/downloads/details.aspx?FamilyID=eb91333a-c26b-4a0d-9251-80a494df9e5c&DisplayLang=en

Security, Identity, and Access Management Datasheet

http://www.microsoft.com/downloads/details.aspx?FamilyID=b53dee69-a3f9-4800-91a8-42c1b8b365db&DisplayLang=en

Identity and Access Optimization Datasheet

http://www.microsoft.com/downloads/details.aspx?FamilyID=e6daec91-7669-47a6-a9f7-39fcce339bcc&DisplayLang=en

Application and Host Protection Datasheet

http://www.microsoft.com/downloads/details.aspx?FamilyID=1c60fb1f-d23a-4d51-a6b4-15dd3c633ce3&DisplayLang=en

System Center Solution: Managing Data Server Compliance

http://www.microsoft.com/downloads/details.aspx?FamilyID=f5db44ae-7017-43fc-a65b-4948173c409d&DisplayLang=en

A Guide to Group Policy Preferences for Users of PolicyMaker Standard Edition

http://www.microsoft.com/downloads/details.aspx?FamilyID=8d5f2917-7b6d-460d-83c1-497b721d666c&DisplayLang=en

Events/WebCasts

Visit TechNet Spotlight: www.microsoft.com/technetspotlight

Video on Demand, Video Downloads, PowerPoint Presentations, Audio and more

Microsoft Security Webcast Series: Upcoming and On-Demand

Security Webcast Calendar http://go.microsoft.com/fwlink/?LinkId=37910

Find security webcasts listed in an easy-to-use calendar format.

Upcoming Security Webcasts

http://www.microsoft.com/events/security/upcoming.mspx

Register for the following Webcasts on the link above

TechNet Webcast: Information About Microsoft August Security Bulletins (Level 200)

Wednesday, August 13, 2008 11:00 A.M.-12:00 P.M. Pacific Time

On-Demand Security Webcasts

http://www.microsoft.com/events/security/ondemand.mspx

A.O.B

Microsoft Product Lifecycle Information

Find information about your particular products on the Microsoft Product Lifecycle http://go.microsoft.com/?linkid=9239140 Web site.

See a List of Supported Service Packs http://go.microsoft.com/?linkid=9239141: Microsoft provides free software updates for security and nonsecurity issues for all supported service packs.

Security Awareness Materials http://go.microsoft.com/?linkid=9239085

Guidance, samples, and templates for creating a security-awareness program in your organization.

Learn Security On the Job http://go.microsoft.com/?linkid=9239086

Learning Paths for Security - Microsoft Training References and Resources http://go.microsoft.com/?linkid=9239087