1. Secure Messaging Nick Hall & James Clifford Microsoft

2. Our Story Begins….. Once upon a time there was a man name Bill Z…..

3. The Company 1000 Users 3 Locations 8Mb Internet Pipe from HQ, 2 Smaller Branches Windows 2003 Infrastructure Exchange 2003 LCS 2005 SharePoint 2003 Mainly Web based activity for Sales

4. Setup of IT Infrastructure - HQ Live Communications Server SharePoint Server Exchange & BES Servers Cisco Firewall SendMail VirusesWorms IM and Documents E-mail

5. Branch Offices Connection via WAN Link Exchange Server in each Branch BES Server Locally Unmanaged Clients

6. Users LaptopsBlackberries Tablet PC’s Desktops Internet Access (including Office Communicator) OWA

7. Threats / Issues Viruses & Worms Spam Performance of Internet Connection Management of Products Branches Machines Expensive WAN links

8. Viruses & Worms Receiving viruses but cannot review them Recently got hit by a virus through IM AV updates once a day

9. Spam Marketing teams being targeted Sales guys having problem IT guys get some but just delete Used to be 3 or 4 a day, now 12 to 20 a day Getting charged for Spam being sent to the Blackberries

10. Performance of Internet Connection Users say times to access common everyday websites is getting slower Emails taking a long time to be delivered Cannot increase the size of the pipe to the internet as have no money in networking budget

11. Management of Products Have too many products to manage, can’t do from one console. Complicates the update process of the scan engines

12. Branches Machines Poor WAN links, no local WSUS or SUS servers so updated manually AV updates not happening because taking too long to download across the links Slow performance for users

13. Expensive WAN Links Have old slow links which are expensive Have no money in networking budget to increase bandwidth

14. So What Can Microsoft Do ? Exchange Hosted Services (EHS) ISA Server Antigen

16. Exchange Hosted Services Internet Continuity Filtering Encryption Mail Flow Archiving Firewall End Users E-Mail Server No onsite IT management Fastest response to threats Centralized control SMTP platform-agnostic

17. Remember…

19. caching Content filtering applicatio n publishing advanced application layer firewall caching content filtering application publishing advanced application layer firewall / vpn ISA Server

21. Antigen Solutions Live Communications Server SharePoint Server Exchange Servers ISA Server Windows SMTP Server VirusesWorms IM and Documents Antigen Antigen Antigen Antigen E-mail Antigen

22. Defence In Depth Multiple Scan Engines (up to 9) Multiple Scan Engines (up to 9) Eliminates single point of failure Eliminates single point of failure Reduces the window of opportunity Reduces the window of opportunity Scan Engine 1 Scan Engine 4 Scan Engine 2 Scan Engine 3 Quarantine

23. Remember…

24. Microsoft Proposed Setup Live Communications Server SharePoint Server Exchange & BES Servers ISA Server Exchange Front End Servers IM and Documents E-mail Antigen Antigen Antigen Antigen Exchange Hosted Services EHS

25. So What Did EHS Do ? Reduced viruses in environment by scanning “In The Cloud” Reduced Spam to almost zero Increased bandwidth on internet pipe Increased productivity of users Visibility of whose receiving what, when and how often

26. So What Did ISA Do ? Reduced number of potential viruses by implementing packet filtering at the gateway Secured Exchange by publishing OWA Implemented VPN’s from Main to Branch offices Implement BITS caching for software updates to Branch offices Internet experience improved through caching of websites Quarantine machines to a separate webserver for updates

27. So What Did Antigen Do ? Protected the LCS, Exchange and SharePoint products from viruses Consolidation of AV products and managed centrally Increased the number of scan engines used and therefore protection levels Produced reports on entire LCS, Exchange & SharePoint threats and mailed to management everyday Improved performance of all the servers due to the In Memory Scanning

28. Defense in Depth

29. Technical Summary Mail flow Firewall Internet Exchange Client MCP EHSISA

30. Important Dates Q1 06 Antigen V 9.0 for Exchange/SMTP & AEM – Beta Q2 06 EHS Launched Antigen V 9.0 for Exchange/SMTP & AEM Antigen for E12 – Beta Q3 06 Antigen V 9.0 for IM/SharePoint ISA 2006 Q4 06 Antigen for E12

31. Summary EHS can remove the majority of the threats in the cloud ISA can secure OWA with one domain login Antigen In-Memory Scanning can improve the performance & give defence in depth in one solution

32. www.microsoft.com/securemessaging www.microsoft.com/security http://blogs.technet.com/nick_hall/default.aspx http://blogs.technet.com/sandeep/default.aspx http://blogs.technet.com/fred/default.aspx http://blogs.technet.com/steve_lamb/default.aspx Resources

33. © 2006 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, IN THIS SUMMARY. www.microsoft.com/uk/security www.microsoft.com/uk/technet/learning