David B. Cross Product Unit Manager Microsoft Corporation Session Code: SIA403 Donny Rose Senior Program Manager

Agenda Forefront Overview TMG Value Proposition Feature Drill Down Web client protection Deployment and Management Intrusion Prevention System Call to Action

Business Ready Security Help securely enable business by managing risk and empowering people Highly Secure & Interoperable Platform Identity Block from: Enable CostValue SiloedSeamless to:

Forefront TMG 2010 ComprehensiveIntegrated Simplified Web Client Protection ProtectionNetwork Intrusion Prevention (NIPS)Network Policy Control (Firewall)Remote Access (VPN, Secure Web Publishing) Management

Anti-Malware Integration Microsoft Confidential

HTTP Anti- virus/spyware URL Filtering HTTPS forward inspection Secure Web Access VoIP traversal (SIP) Enhanced NAT ISP Link Redundancy SQL logging Updated TMG Client Firewall Exchange Edge/FSE integration Anti-Virus Anti-spam Protection Network Inspection System (NIS) Security Assessment and Response (SAS) Intrusion Prevention NAP integration with VPN role Remote Access Array Management Scenario UI & Wizards Change tracking Enhanced reporting W2K8, R2, 64-bit Deployment & Management Update Center : HTTP: AV+URL Filtering AV+Anti-Spam NIS signatures Subscription Services TMG Feature Drill Down 7

TMG Deployment Scenarios Authenticating proxy with security Web anti-malware and URL filtering Inspection of HTTP and HTTPS traffic Secure Web Gateway All-in-one solution for medium businesses and for branch offices Firewall, Proxy, VPN, IPS, relay in a single box Unified Threat Management (UTM) Dial-in VPN Site to site VPN Secure Web Publishing Remote Access Gateway Anti Spam Anti Virus Filtering Secure Relay

Deployment and Management Microsoft Confidential

Secure Web Gateway Features Download scanning of web pages Integrated Microsoft anti-malware engine Inspection settings per rule Malware Inspection URL category sets and exclusions Integrated with forward proxy Integrated with Microsoft Reputation Services URL Filtering URL filtering, malware scanning and IPS protection TMG Client notification to end users HTTPS Inspection New log fields with URL/Malware info SQL Server Reporting Services Customizable reports Logging & Reporting

TMG Reports

URL Filtering Microsoft Confidential

HTTP Anti- virus/spyware URL Filtering HTTPS forward inspection Secure Web Access VoIP traversal (SIP) Enhanced NAT ISP Link Redundancy SQL logging Updated TMG Client Firewall Exchange Edge/FPE integration Anti-virus Anti-spam Anti-phishing Protection Network Inspection System (NIS) Intrusion Prevention NAP integration with VPN role SSTP (SSL VPN) Remote Access Array Management Scenario UI & Wizards Change tracking Enhanced reporting W2K8, R2 64-bit Deployment & Management Update Center : HTTP: AV+URL Filtering AV+Anti-Spam NIS signatures Subscription Services TMG Feature Drill Down 13

Network Inspection System (NIS) Signatures released concurrently with security patches or in response to a 0-Day attack Distribution via Microsoft Update Granular control over deployed signatures High accuracy via telemetry Closes the vulnerability window between vulnerability announcement and patch deployment Signatures distribution by Microsoft Update Concurrent with security patches or in response to a 0-Day attack Granular control over deployed signatures High accuracy via telemetry Vulnerability discovered Microsoft Signature Authoring Team

Intrusion Prevention System Microsoft Confidential

Falk Schmal Information Officer Lausitzer Wasser GmbH

Company Lausitzer Wasser GmbH Medium-sized company IO-Rationalized Public-private-partnership of Eurawasser & the City of Cottbus Eurawasser one of Germany’s leading water and waste water service companies Part of Suez-Group

Intentions to Change the IT Replacing Linux-Systems reponsible for: Proxy (Squid) SMTP-Gateway (Sendmail) SPAM-Protection (Spam-Assassin) Why One solution for all aspects Better virtualization story Reducing complexity & saving costs

TMG Advantages Better control and security, by Introducing Contentfiltering (URL-Filtering and Edge-A/V) Authenticating users against AD-groups Better monitoring & reporting Fits perfectly into the management solution SCOM management pack WSUS & Forefront

Summary Call-to-action! Test and evaluate the new release! More than next generation firewall: full featured Threat Management solution Multiple Threat Protection: Scan, detect and mitigate malware threats Secure Connectivity: Publishing, VPN and forward proxy

Sessions On-Demand & Community Resources for IT Professionals Resources for Developers Microsoft Certification & Training Resources Resources Required Slide Speakers, TechEd 2009 is not producing a DVD. Please announce that attendees can access session recordings at TechEd Online. Required Slide Speakers, TechEd 2009 is not producing a DVD. Please announce that attendees can access session recordings at TechEd Online.

Complete an evaluation on CommNet and enter to win an Xbox 360 Elite!

© 2009 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION. Required Slide