Microsoft Certified
Professional Exams
Technology Specialist Exam 70-557 : TS : Microsoft Forefront
Client and Server, Configuration
Course Overview
Elements of this syllabus
are subject to change. This bootcamp combines course 50093,
Deploying and Administering Microsoft Forefront Client Security, and
course 50094, Deploying and Administering Microsoft Forefront
Security for Exchange Server, Microsoft Forefront Security for
SharePoint, and Microsoft Forefront Server Security Management
Console.
50093: Learn critical deployment and administration skills in this
400-level instructor-led course on Microsoft Forefront Client
Security. Targeted at systems integrators, consultants, and
deployment partners, this three-day class includes lecture and
hands-on labs and was developed by Microsoft Consulting Services
using their detailed implementation knowledge and best practices.
50094: This two-day instructor-led course provides students with the
knowledge and skills to deploy and administer Microsoft Forefront
Server Security products. This two-day class includes lecture and
hands-on labs (covering several server products) and was developed
by Microsoft Consulting Services using their detailed implementation
knowledge and best practices.
Audience
This course is intended for technical deployment specialists and
senior-level administrators who manage a Microsoft Exchange
Server or Microsoft SharePoint Products and Technologies
infrastructure or security practice.
At Course Completion
50093: After completing this course, students will be able to:
• Describe the Forefront Client Security components and
architecture, and identify the different server roles.
•
Complete and troubleshoot the server setup process, identify
various server topologies, and describe basic MOM concepts and
the MOM agent.
• Identify Forefront Client Security client
component characteristics and describe the client setup and
deployment processes.
• Understand Forefront Client Security
administration and user roles, Forefront Client Security Policy
UI settings and policy deployments, and know how to troubleshoot
the Management Console.
• Understand the reporting services
infrastructure used by Forefront Client Security.
• Use
Forefront Client Security reports and alerting services, and
troubleshoot reporting procedures.
• Describe the security state
assessment (SSA) component of Forefront Client Security, and
understand its architecture.
• Describe the object processor and
manifest update in SSA.
• Review the SSA Security Check messages
and results.
• Review methods and procedures used to submit
malware to Microsoft for analysis.
50094: After completing this course, students will be able to:
• Describe aspects of the multiple engine settings and the
balance of information versus performance in Forefront Security
for Exchange Server.
• Discuss how transport scanning works in
Forefront Security for Exchange Server.
• Identify and
understand the differences between default mode and outbreak
mode protection, and understand the file, content, and keyword
filtering options available with Forefront Security for Exchange
Server.
• Identify components and services within Forefront
Security for SharePoint.
• Use Forefront Security for SharePoint
filters and templates to define scanning options.
• Understand
Forefront Security for SharePoint diagnostics, logging, and
statistics gathered during maintenance and from notifications.
•
Understand the various alerts and reporting features available
in Forefront Server Security Management Console.
• Identify the
eight Management Console job categories and the basic role of
each classification.
Prerequisites
Before attending this course, students must have Windows Server
certifications or deployment experience and be familiar with the
Forefront product line: Client, Server, and Edge.
50093 Course Outline
Module 1: Course Overview
This module provides an overview of the Forefront Client
Security components and architecture. It describes what to
expect from the product, and what modules will be covered on
what days.
Lessons
• Forefront Product Overview
• Forefront Client Security
• Microsoft Forefront Client Security Components
• Training Modules
After completing this module, students will be able to:
• Describe the Forefront Client Security components and
architecture.
Module 2: Forefront Client Security Server Roles and
Topologies
This module explains the various roles involved on the
server side of a Forefront Client Security infrastructure, as
well as how they relate to each other in the various possible
topologies.
Lessons
• Forefront Client Security Server Roles
• Collection Server
• Collection Server Database
• Reporting Server
• Reporting Database Server
• Forefront Client Security Server Setup
• Role Installation Steps
• Server Topologies
• SQL Server Database Sizing
• Configuration Wizard
• MOM Concepts
• Forefront Client Security Server Setup Troubleshooting
Lab 1: Installing a Three Server Topology
• Launch the Virtual Environment
• Create Forefront Client Security Accounts
• Install the Management, Collection, and Reporting Server
• Install the Reporting Server Database
• Install the Distribution Server Role
• Configure Client Security on a Three Server Topology
• Grant Correct Permissions for Forefront Client Security
Service Accounts
• Verify the Installation of Client Security on a Three Server
Topology
After completing this module, students will be able to:
• Identify the different server roles within Forefront Client
Security.
• Complete the server setup process.
• Identify various server topologies.
• Review basic MOM concepts.
• Discuss Forefront Client Security server setup
troubleshooting.
Module 3: Forefront Client Security Client
This module explains the Forefront Client Security client
setup configuration and deployment.
Lessons
• General Information
• Antimalware
• MOM Agent
• Client Setup
• Client Deployment Planning
• Forefront Client Security Client Deployment Methods
• Troubleshooting
Lab 2: Deploying the Forefront Client Security Client
• Configure WSUS 3.0 to Deploy the Forefront Client Security
Client
• Create a Forefront Client Security Client Package and
Distribute It
• Distribute the Antimalware and Security Assessment State
Definition Updates
• Malware and Spyware Detection
• View the Malware and Spyware in the Dashboard
After completing this module, students will:
• Be able to describe Forefront Client Security client component
characteristics and information.
• Be able to describe the antimalware agent and engine.
• Understand the MOM agent.
• Understand the client setup process.
• Understand client deployment basics.
Module 4: Forefront Client Security Management
This module explains Forefront Client Security management.
Lessons
• Administration
• Administration Dashboard
• Forefront Client Security Policy Deployment
• Forefront Client Security Management Console Troubleshooting
Lab 3: End-to-End Policy Deployment
• Deploy a Test Policy
• Refresh and Verify Policy on the Client
• View Policy Application via GPResult
• View Summary Reports
• Policy Configuration Effects on Client UI
Lab 4: Configuring Forefront Data Retention
• Examine Data Retention Periods
• Modify Database Retention Settings
After completing this module, students will:
• Be familiar with Forefront Client Security administration.
• Understand Forefront Client Security Administration User
roles.
• Understand Forefront Client Security Policy UI settings and
policy deployments.
• Be familiar with Forefront Client Security Management Console
troubleshooting.
Module 5: Forefront Client Security Reporting and Alerting
This module explains Forefront Client Security Reporting and
Alerting.
Lessons
• Reporting Services Overview
• Reporting Architecture
• MOM Reporting
• Forefront Client Security Reports
• SQL Server Reporting Services Troubleshooting
• Alerts
Lab 5: Viewing Forefront Client Security Reports
• Explore Forefront Client Security Reports
Lab 6: Managing Forefront Client Security Accounts
• View Reporting Failure
• Specify SQL Server Reporting Credentials to Forefront Client
Security
Lab 7: Creating an E-Mail Report Subscription and Setting an
E-Mail Notification
• Configure SQL Server Reporting Services
• Create an E-Mail Subscription
• Create an E-Mail Notification
• Follow the Alert Notification Flow
• View E-Mail Server Settings
After completing this module, students will:
• Understand the reporting services infrastructure used by
Forefront Client Security.
• Be familiar with Forefront Client Security Reports.
• Be familiar with Forefront Client Security Alerting Services.
• Understand Forefront Client Security Reporting troubleshooting
procedures.
Module 6: Security State Assessment
This module explains security state assessment.
Lessons
• Security State Assessment
• SSA General Information
• SSA Architecture
• SSA Object Processor (OP) and Manifest Updates
• SSA Security Checks
Lab 8: Security State Assessment
• Examine Security State Assessment information in MOM and the
Forefront Client Security Management Console
• Configure WSUS for Security State Assessments
• Detect Vulnerabilities
• Update Clients
After completing this module, students will:
• Understand the security state assessment component of
Forefront Client Security.
• Be familiar with the architecture of the SSA.
• Be familiar with the object processor and manifest update in
SSA.
• Understand the SSA security check messages and results.
Module 7: Submitting Malware to Microsoft for Analysis
This module explains malware submission.
Lessons
• Malware Submission
• Assisting Customers with Malware Submissions
After completing this module, students will be able to:
• Review methods and procedures used to submit malware to
Microsoft for analysis.
Module 8: Closing
This module provides a review of the Forefront Client
Security course, and a list of Web sites that provide additional
information on Forefront Client Security.
Appendices
• Appendix A: Antimalware Client Registry Settings
• Appendix B: Antimalware Errors
• Appendix C: PP Tracing
• Appendix D: Antimalware Events
• Appendix E: SSA Scan Event Log Events
• Appendix F: MOM Command Line Reference
50094 Course Outline
Module 1: Forefront Security for Exchange Server
Lessons
• Forefront Security for Exchange Server Deployment Planning
• Forefront Security for Exchange Server Overview
• E-Mail Transport Scanning
• Store Scanning
• FSE Premium Anti-Spam Features with Exchange 2007
• Using Filters
• Settings and Templates
• Managing Forefront Security for Exchange Server
• Diagnostics and Logging
Lab 1: Protecting Exchange Server Against Viruses
• Scanning Messages for Viruses
• Using File Filtering to Block Attachments
After completing this module, students will be able to:
• Understand various aspects of the multiple engine settings and
the balance of information versus performance.
• Discuss FSE considerations.
• Discuss how transport scanning works.
• Identify and understand the difference between default mode
and outbreak mode protection.
• Identify the scanning behavior changes in Exchange 2007.
• Identify and describe the various file filtering, content
filtering, and keyword filtering options available.
Module 2: Forefront Security for SharePoint
Lessons
• Forefront Security for SharePoint Overview
• Forefront Security for SharePoint Scanning
• Forefront Security for SharePoint Using Filters and Templates
• Forefront Security for SharePoint Maintenance and
Notifications
Lab 2: Protecting SharePoint Servers
• Scanning Documents for Viruses
• Running a Manual Scan Job
• Using Keyword Filtering and Notifications
• Updating Scan Engines
After completing this module, students will be able to:
• Identify the various components and services within Forefront
Security for SharePoint.
• Understand how to scan files through realtime and manual
scans.
• Use filters and templates to further define scanning options.
• Understand diagnostics, logging, and statistics gathered
during maintenance and from notifications.
Module 3: Forefront Server Security Management Console
Lessons
• Security and Access Offerings
• System Requirements
• Forefront Server Security Management Console Features
• Managing Packages
• Reports
• Alerts
• Cluster Continuous Replication (CCR) Support
• FSSMC Redundancy
• Maintenance and Troubleshooting
• Microsoft FSSMC Summary
Lab 3: Using Forefront Server Security Management Console
• Configuring Forefront Server Security Management Console
• Using Jobs in FSSMC to Manage Forefront Servers
• Managing Reports and Quarantine Items with FSSMC
After completing this module, students will be able to:
• Describe the various alerts and reporting available through
FSSMC.
• Identify the eight different categories of FSSMC jobs and the
basic role of each classification.
• Understand the features of the Management Console.