Comprehensive Protection
Multiple anti-virus engines for comprehensive protection
Forefront Security for SharePoint includes industry-leading anti-virus engines from global security firms such as Kaspersky Labs, CA and Sophos. Forefront Security for SharePoint maximizes threat protection by enabling IT to run up to five scan engines at once from industry-leading antivirus labs around the world. All documents are scanned as they are uploaded to, and retrieved from, SharePoint libraries. This provides rapid response to new threats, regardless of where the threat originates. Forefront Security for SharePoint automatically downloads the latest signatures and selects the optimal combination of engines to use, ensuring a high level of protection and reducing the window of exposure to any given threat. Diversity of anti-virus engines across messaging servers and client devices protects against a single point of failure in the IT environment.
Protection against inappropriate content
Forefront for SharePoint scans for administrator-defined keywords within most Microsoft Office documents-including Open XML documents and IRM-protected documents-helping to enforce compliance with corporate policy for language usage and confidentiality. On-the-fly encryption and decryption allows IRM-protected documents to be checked for malware and unwanted text while retaining security settings applied by information rights management (IRM). Forefront Security for SharePoint can also unpack and selectively repack compressed files, such as .zip, after removing an infected or unwanted item.
Document filtering
Forefront for SharePoint has configurable file filtering rules that help customers eliminate file types known for carrying viruses (for example, .exe) or opening organizations to legal exposure (for example, .mp3).
Protection against new and hidden threats
Forefront Security for SharePoint includes heuristics technologies that detect malicious code based on behavioral characteristics. It also has configurable file filtering rules that help customers eliminate file types that are known for carrying viruses (for example, .exe), and can identify threatening documents even if the file extension has been changed.
Multi-vendor response to new threats
The critical hours between the discovery of a new threat in the wild and the delivery of a signature to catch it leave a business highly vulnerable to attack. Dependence upon a single-engine solution only increases this risk. One security vendor may be first to deliver a signature for one threat, but last to deliver the signature for the next one, giving single-engine solutions fluctuating levels of effectiveness. With the multiple-engine solution of Forefront Security for SharePoint, multiple vendors are responding to a new virus at once, increasing the odds for a quick response, and lowering a business' overall risk of exposure to each new threat, regardless of its origin around the world. Automatic downloads help ensure that the first valid solution to the attack gets loaded to the engine set of Forefront Security for SharePoint.
Optimized Performance
Performance optimization and control
With features like in-memory scanning, multi-threaded scanning, performance control settings, and the ability to track a document's scan status to avoid redundant scanning, businesses can gain the benefits of multiple-engine scanning while making smart use of available processing time and server capability. Forefront Security for SharePoint scans documents during upload and download, using in-memory scanning, significantly improving performance over more traditional techniques (such as spooling to disk). Its multi-threaded scanning increases mail throughput by enabling the software to analyze multiple documents simultaneously. With performance settings, IT administrators can balance their wanted level of security against the required level of server performance to meet the changing needs of their environment.
Support for 32- and 64-bit servers
Gain deployment flexibility by using Forefront Security for SharePoint in mixed 32-bit and 64-bit server environments, and take advantage of the performance gains of 64-bit systems.
SharePoint VSAPI integration
Microsoft Virus Scanning API 1.4 performs real-time scanning to help ensure that documents are safe before they are saved to, or retrieved from, the SQL document library. Forefront Security for SharePoint also offers manual and scheduled scanning options.
Out-of-Policy file blocking
Forefront for SharePoint helps prevent unwanted or out-of-policy file types from consuming valuable disk space.
Performance control settings
Leverage how many engines are used for a given scan job for greater flexibility and control over security and server performance. Choose from performance control settings like "Maximum Certainty," which scans with all available engines, and "Neutral," which scans with approximately 50 percent of available engines.
Simplified Management
Forefront server security administration
The built-in management console enables administrators to fully configure Forefront Security for SharePoint, locally or remotely.
Centralized Web-based control
Forefront Security for SharePoint works with the Microsoft Forefront Server Security Server Management Console, which provides central configuration, deployment, and updating for all Forefront server security products in enterprise environments that have multiple Exchange or SharePoint servers. This enables IT administrators to easily manage servers remotely, generate comprehensive reports, and receive outbreak alerts from across the infrastructure.
One-stop, automated updates
Through its Rapid Update Process, Microsoft monitors all scan-engine vendor Web sites for updates and downloads, and validates new engine versions and signatures as they become available, and then posts them online for Forefront Security for SharePoint to automatically download and install. No IT involvement is needed to keep all the engines and signatures up-to-date. For environments that have multiple SharePoint servers, Forefront Server Security Management Console automatically distributes the signature and engine updates to all Forefront Security for SharePoint deployments within the environment.
Migration protection
Customers who purchase Forefront Security for SharePoint to help protect Microsoft SharePoint 2003 environments will also be licensed to use Antigen for SharePoint to help protect their Microsoft Office SharePoint 2007 and Windows SharePoint Services 3.0 collaboration environments.
Localization
Forefront Security for SharePoint is now localized into 11 languages, making it easier for administrators to manage their messaging server security in the language of their region. Manage collaboration server security in the regional language of choice by obtaining Forefront Security for SharePoint in one of these 11 languages: English, German, French, Japanese, Italian, Spanish, Korean, Chinese (Simplified), Chinese (Traditional), Portuguese (Brazil), and Russian.
Integrated monitoring
A management pack for Microsoft Operations Manager1 enables the IT administrator to monitor the health of Forefront Security for SharePoint sever as part of corporate operational management practices.
Processor
- Dual-processor computer with clock speed of 2.5 gigahertz (GHz)
Operating System
- Microsoft Windows Server 2003 (Standard, Enterprise, Datacenter or Web Edition), with Service Pack 1
Memory
- 1 gigabyte (GB) of available memory (2 GB is recommended)
Hard Disk
- 550 megabtyes (MB) of available disk space
Microsoft SharePoint Products and Technologies
- Microsoft Office SharePoint Server 2007 or Microsoft Windows SharePoint Services 3.0
Notes
- Customers who purchase Forefront Security for SharePoint to protect Microsoft Office SharePoint Server 2007 or Microsoft Windows SharePoint Services version 3.0, will also be licensed to use Antigen for SharePoint to protect Microsoft SharePoint Portal Server 2003 and Microsoft Windows SharePoint Services 2.0 environments.