Implementing Forefront Identity Manager 2010

After completing this module, students will be able to:

Describe a brief history of the Microsoft edge security products.

Explain the current threat landscape and how this drove changes in the edge security strategy.

List the new features in Forefront TMG and their value propositions.

Describe the key scenarios for Forefront TMG and how it differentiates from Microsoft IAG/UAG.

Describe the SKU differentiation and subscription model.

Explain the installation requirements and install process for Forefront TMG.

This module explains the new features introduced in Forefront TMG 2010, and how they can be used to enable users to securely and safely browse the Web.

Secure Web Gateway Overview

HTTPS Inspection

URL Filtering

Malware Protection

Intrusion Prevention

Create web access policies for Contoso users, including inspection of HTTPS sessions

Modify web access policy to include protection from malware

Investigate the Network Inspection System (NIS)

After completing this module, students will be able to:

Describe the threats affecting enterprise users browsing the Web.

Identify the key Forefront TMG features that address those threats (application proxy, granular access control, malware inspection, URL filtering, HTTPS inspection, NIS), and describe each of these features in detail.

This module explains the new features introduced in Forefront TMG 2010 can be used to enable users to securely access corporate network resources from anywhere.

Remote Access Gateway Overview

Non-HTTP Server Publishing

Web Publishing

Virtual Private Networking (VPN) Connectivity

Use Web Publishing to publish Exchange Web Services

After completing this module, students will be able to:

Understand how Forefront TMG can publish Web and non-Web services to external users.

Explain the security features and benefits added by Forefront TMG in each of these publishing scenarios.

Discuss the new Forefront TMG features for virtual private networking, such as Secure SocketTunneling Protocol (SSTP) and Network Access Protection (NAP).

This module explains how Forefront TMG 2010 and Forefront Protection 2010 for Exchange Server can work together with Microsoft Exchange Server to provide premium protection from spam and malware.

Secure Mail Relay Overview

Solution Components

Configuring SMTP Protection

Install Active Directory LDS and Exchange Edge Server

Install Forefront Protection 2010 for Exchange Server

Install Forefront Threat Management Gateway

Configure Exchange EdgeSync

Define an E-mail Policy

After completing this module, students will be able to:

Describe the mail threats facing organization, and explain what the key Forefront TMG features are that address these threats.

Explain how Forefront TMG and Forefront Protection 2010 for Exchange Server are deployed together for premium antispam and antimalware protection.

Describe in detail how Forefront TMG performs spam filtering, malware filtering, and content filtering.

Describe the implementation process for this scenario and how the solution is configured.

This module explains the common deployment scenarios for Forefront TMG 2010, and what to consider when designing Forefront TMG 2010 solutions.

Logical Design Considerations

Scalability and Availability

Client Configuration

Migration Options

After completing this module, students will be able to:

Review the network, scalability, availability and operational considerations and best practices when designing and deploying a solution based on Forefront TMG.

Identify the best practices when configuring clients to use Forefront TMG.

Describe migration procedures from ISA Server to Forefront TMG, and between the different versions of Forefront TMG.