Eduardo Petizme.com | MVP

! Four mistakes that can kill virtual machine performance

Petizme — Mon, 28 Sep 2009 14:18:51 GMT

Hi,

From SeachVirtualization site, see below:

1: Virtual machine screensavers
Screensavers are an absolute requirement for desktops in the hallways of our brick-and-mortar offices. They ensure that a user who walks away from his computer returns to one that has been secured against prying eyes. Screensavers can also provide protection in data centers. If screensavers on servers activate and lock the console after a few minutes of inactivity, they can protect that environment from an intruder who gains physical access.

But screensavers are a quiet consumer of processor resources. No matter how insignificant that screensaver seems, the processor power required to draw the pipes crawling across the screen or to scroll your favorite company slogan consume a percentage points of overall processor power. While that might not seem like much, consolidated virtual environments might have 10 or 15 virtual machines (VMs) running on a single virtual host. These percentage points add up when they are multiplied by the number of VMs. Even worse, if your environment uses hosted desktops through a virtual desktop implementation, this practice likely costs even more.

So turn them off. Remember that many environments enforce screensavers through group policies, which may mean an exclusion from existing group and corporate security policies.

2: Managing from the console
As with screensavers, this practice is a big no-no in virtualized environments because of the level of resources required to create and maintain an instance of the Explorer shell. Just logging into a virtual machine is hard on that VM's processor utilization. The process of creating a shell for the console can spike processor utilization during the login and logout process. Actually using any of the consoles on that server further consumes valuable resources. Logging in and accomplishing activity on your VMs' desktops increases the amount of memory they consume.

Microsoft provides the Remote Systems Administration Toolkit, PowerShell and VBScript, as well as many other tools for efficient virtual machine management. All these lightweight tools require much less VM capacity than a traditional login. So use them, and avoid wasting processing power and memory like an amateur.

3: Antivirus and anti-malware scanning of VM disk files
Your corporate security policy might not allow for the exclusion of Virtual Hard Disk or Virtual Machine Disk Format (VMDK) files from antivirus and anti-malware scans. But be aware that the real-time scans of such products can substantially reduce the overall performance of these files -- and, thus, their virtual machines. Since a VM's processing is highly dependent on its disk subsystem, any extra activities that slow down that process slow it down as well.

That's not to say that VM disk files shouldn't be subject to security scanning. Scheduled scans of such files can ensure that they don't get infected, without the processing overhead of real-time scans. Also, some of today's more advanced scanning products are beginning to incorporate virtualization awareness to reduce their overall impact. If your security policy will allow it -- or if you can bribe your security officer to look the other way -- definitely consider excluding these files from your real-time scans.

4: Windows Server's power options
At conferences around the country, I've encountered the final mistake repeatedly. The default power option of Windows Server 2008 upon installation is set to "Balanced." Of the three options available -- Balanced, Power Saver and High-Performance -- this is the second of the three in terms of overall system performance. You might save a few dollars on energy, but at the cost of wasting some of the server's processing power. Resetting the radio button to the high-performance option has a noticeable effect on how well VMs will perform.

More information and source here.

Eduardo Petizme.com
Microsoft MVP – Most Valuable Professional
MCSA Security 2000 & 2003 | MCITP Server 2008
Blogs: http://blog.petizme.com ( USA | BRA )
Twitter: http://twitter.com/petizme

! ! URL Filtering Telemetry Package for TMG Beta3

Petizme — Wed, 09 Sep 2009 13:18:02 GMT

Hi,

Last month the TMG Team announced that is available to download (public) the “URL Filtering Telemetry Package”.

”With Forefront TMG Beta3, we introduced URL filtering leveraging the Microsoft Reputation Service (MRS). As we approach the Forefront TMG release candidate and release to market, we are working to improve the coverage and accuracy of our URL filtering offering and fine-tune it to address the Web traffic you see in your business.

As part of this effort, the MRS team has recently completed a significant database update, merging URL categorization data from partners such as Marshal8e6 and BrightCloud. Those of you who have installed TMG Beta3 and enabled URL filtering will begin receiving the enhanced data in the next several days. URL filtering database coverage and accuracy enhancements will continue to take place on an ongoing basis. …”

“Once you install the telemetry package, you will be automatically opted-in to the Microsoft telemetry service with basic membership (unless you were already signed in with advanced membership). In the context of URL filtering, this means reports collected by Microsoft from you include:

Random URL samples. The URLs are truncated to avoid disclosure of personal information.
The local list of URL category overrides.
A few statistical counters such as the ratio of requests that MRS failed to categorize.
Globally unique identifiers (GUIDs) to uniquely identify a Forefront TMG server for statistical analysis. The GUIDs are randomly generated during installation and do not contain any personal information or customer identity information. ”

More information and source here.

Download: http://www.microsoft.com/downloads/details.aspx?FamilyID=f7e5907d-60ae-4f39-8660-9a959db5a6e6&displaylang=en

[]’s

! Free Copy of Windows 7 to Beta Testers…

Petizme — Thu, 30 Jul 2009 18:32:43 GMT

Hi all,

Official Windows 7 Beta Testers will receive free copy of Windows 7…

Thanks ;)

More info at http://windowsteamblog.com/blogs/windows7/archive/2009/07/30/showing-our-thanks-to-windows-7-beta-testers.aspx

Eduardo Petizme
Microsoft MVP – Most Valuable Professional
MCSA Security 2000 & 2003 | MCITP Server 2008
Site: http://petizme.com
Blogs: http://blog.petizme.com ( USA | BRA )

! Windows Server 2008 R2 – RTM – July 22

Petizme — Thu, 23 Jul 2009 13:23:31 GMT

Hi all,

Together w/ Windows 7, Windows Server 2008 R2 is RTM (Release to Manufacturing) ! Product team announced yesterday in your blog.

“With evaluation software available for download in the first half of August and the full product available to customers with Software Assurance in the second half of August, RTM is more than just an engineering milestone. Occurring in lock-step with the release of the Windows 7 RTM, these two platforms are now ready for our partners to start testing and installing on their hardware. And that lock-step isn't a coincidence, it's a design goal.”

Some highghts:

For Administrators:

Hyper-V and Live Migration - still the big stars. R2's Hyper-V enables a complete server virtualization solution available out-of-the-box. Live Migration allows server administrators to migrate VMs between physical machines with no perceived downtime for current server connections and work streams. That means a more dynamic datacenter and more agility in meeting new business needs For more information on Hyper-V in R2, check out today's in-depth post on the Virtualization Team blog.
File Classification Infrastructure - FCI lets you manage your data based on its characteristics, including things like file type, user credentials and even content. Based on this kind of criteria, FCI can assign data different access restrictions, store it in different locations or simply push it into an entirely customized lifecycle scheme - all done automatically via policy. For me, this is one of the most exciting new features in R2.
Active Directory and Pervasive PowerShell - 240 new PowerShell cmdlets and several management consoles (including a new Active Directory interface) have been built on top of PowerShell. Active Directory has also been enhanced with the Active Directory Recycle Bin as well as AD Group Policy objects that give desktop administrators deeper capabilities when it comes to managing Windows 7 clients.
IIS 7.5 - The latest edition of Internet Information Server also sports updated management tools as well as application serving capabilities that now including support for PHP and .NET on Server Core installations.
Server Scalability - Not only is R2 Microsoft's first 64-bit-only operating system, it also supports up to 256 logical processors in a single server as well as all the latest CPU technologies. And, R2 has support for advanced storage technologies, including SAN management and solid state hardware.

For Users:

DirectAccess, for example, provides secure, always-on access to corporate networks no matter from what network a client might be connecting. Better yet, it provides a two-way relationship allowing desktop admins to manage clients the same way whether they're local or remote.
BranchCache allows users in remote offices to cache corpnet data locally, providing a better work experience for remote workers while simultaneously lowering expensive WAN bandwidth costs.
Remote Desktop and Applications - Windows Server 2008's Terminal Services has now evolved into R2's Remote Desktop Services, and it integrates so tightly with Windows 7 that administrators will be able to roll out virtualized applications and even entire desktop environments without users being able to tell that these tools aren't running locally. It's fast and can even be managed via policy. Very cool stuff.

Source: http://blogs.technet.com/windowsserver/archive/2009/07/22/windows-server-2008-r2-rtm.aspx

Bye,

Eduardo Petizme
Microsoft MVP – Most Valuable Professional
MCSA Security 2000 & 2003 | MCITP Server 2008
Site: http://petizme.com
Blogs: http://blog.petizme.com ( USA | BRA )

! Windows 7 is RTM | July 22

Petizme — Thu, 23 Jul 2009 13:09:06 GMT

Hi people,

Good news, Windows 7 RTM is RTM ! The product team announced in your blog yesterday.

The final build is 7600 and the product team did an special thanks to beta testers “A special thank you goes out to all the people who helped test Windows 7”

OEMs will receive Windows 7 RTM software images beginning approximately 2 days after we officially RTM.

ISV (Independent software vendor) and IHV (Independent hardware vendor) Partners will be able to download Windows 7 RTM from Microsoft Connect or MSDN on August 6th.

Microsoft Partner Program Gold/Certified Members will be able to download Windows 7 RTM in English through the Microsoft Partner Network (MPN) Portal on August 16th.

Microsoft Action Pack Subscribers will be about to download Windows 7 RTM in English starting August 23rd.

Business Customers with Volume License (VL) customer with an existing Software Assurance (SA) license you will be able to download Windows 7 RTM in English starting August 7th via the Volume License Service Center (VLSC). Volume License customers without a SA license will be able to purchase Windows 7 through Volume Licensing on September 1st.

IT Professionals and Developers will be able to download through TechNet and MSDN Subscriptions on August 6th.

Sources:

http://windowsteamblog.com/blogs/windows7/archive/2009/07/22/windows-7-has-been-released-to-manufacturing.aspx

http://windowsteamblog.com/blogs/windows7/archive/2009/07/21/when-will-you-get-windows-7-rtm.aspx

Bye,

Eduardo Petizme
Microsoft MVP – Most Valuable Professional
MCSA Security 2000 & 2003 | MCITP Server 2008
Site: http://petizme.com
Blogs: http://blog.petizme.com ( USA | BRA )

! How to keep offline VMs updated ? Offline Virtual Machine Servicing Tool 2.0.1

Petizme — Fri, 10 Jul 2009 14:04:32 GMT

Hi,

This Solution Accelerator provides automated tools and guidance that IT professionals can use to update offline virtual machines efficiently and without exposing them to security risks.

Amazing !

Bye,

----

The Offline Virtual Machine Servicing Tool 2.0.1 helps organizations maintain virtual machines that are stored offline in a Microsoft® System Center Virtual Machine Manager library. While stored, virtual machines do not receive operating system updates. The tool provides a way to keep offline virtual machines up-to-date so that bringing a virtual machine online does not introduce vulnerabilities into the organization’s IT infrastructure.

http://www.microsoft.com/downloads/details.aspx?FamilyId=8408ECF5-7AFE-47EC-A697-EB433027DF73&displaylang=en

Eduardo Petizme
Microsoft MVP – Most Valuable Professional
MCSA Security 2000 & 2003 | MCITP Server 2008
Site: http://petizme.com
Blogs: http://blog.petizme.com ( USA | BRA )

! Download Forefront Threat Management Gateway (TMG) Beta 3

Petizme — Tue, 16 Jun 2009 21:13:14 GMT

Hi,

Forefront TMG Team make available last week the Beta 3.

“The Microsoft Forefront Threat Management Gateway is a comprehensive Secure Web Gateway solution that helps protect employees from threats on the Web with enterprise-class anti-malware scanning and blocking, URL filtering (new in Forefront TMG Beta 3), web proxy and caching functionality. Microsoft Forefront TMG also helps to ensure that encrypted (SSL) Web sessions have the correct security policy applied and enforced according to organizational policy. In addition, it can also be used to manage unified perimeter security that protects networks from attacks with an integrated application and network-layer firewall, intrusion detection and response capabilities, VPN connectivity, and management of e-mail security. The newly added protection technologies will enable organizations to inspect e-mail traffic for spam and malware and enforce content policy compliance in your organization. Last, but not least, Microsoft Forefront TMG enables IT administrators to easily maximize existing information technology (IT) investments by improving network security and performance.

At the time of this release, the MRS database content is being populated and updated continuously as part of the initial beta service offering. As this process continues, URL filtering categorization accuracy and comprehensiveness will increase. A telemetry package designed for improving the quality of URL filtering database and collecting your feedback is planned to be released soon. Please check back for updates in August.”

https://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=e05aecbc-d0eb-4e0f-a5db-8f236995bccd

Bye,

Eduardo Petizme
Microsoft MVP – Most Valuable Professional
MCSA Security 2000 & 2003 | MCITP Server 2008
Site: http://petizme.com
Blogs: http://blog.petizme.com ( USA | BRA )

! Forefront Security for Exchange Server SP1 capacity planning tool

Petizme — Mon, 01 Jun 2009 16:19:27 GMT

Hi,

“Quickly understand what hardware, architecture, and configuration settings will produce recommended system performance and message throughput results for comprehensive protection of your Exchange Servers. Download the free Forefront Security for Exchange Server SP1 capacity planning tool, an excel spreadsheet with built in workflow, that applies to the Forefront Security for Exchange Server SP1 product. You’ll be able to plan the details for a new deployment or understand the impact of adding security protection to an existing deployment.”

Download: http://www.microsoft.com/downloads/details.aspx?FamilyID=522da65d-5263-4f5d-b929-8428a394b9af&displaylang=en

More information and source here.

Bye,

Eduardo Petizme
Microsoft MVP – Most Valuable Professional
MCSA Security 2000 & 2003 | MCITP Server 2008
Site: http://petizme.com
Blogs: http://blog.petizme.com ( USA | BRA )

! Bing.com (new search provider from Microsoft)

Petizme — Mon, 01 Jun 2009 16:17:17 GMT

Hi,

Microsoft release new search provider called, bing.com

Know it at http://www.bing.com

You could add it to your IE at http://www.ieaddons.com/en/searchproviders

Bye,

Eduardo Petizme
Microsoft MVP – Most Valuable Professional
MCSA Security 2000 & 2003 | MCITP Server 2008
Site: http://petizme.com
Blogs: http://blog.petizme.com ( USA | BRA )

! Some Changes Since Beta for the RC

Petizme — Sat, 16 May 2009 16:36:37 GMT

Hi,

From Engineering Windows 7 Blog:

“We’ve been quite busy for the past two months or so working through all the feedback we’ve received on Windows 7. It should be no surprise but the Release Candidate for Windows 7 will have quite a few changes, many under the hood so to speak but also many visible. Some have asked if the featureset is "frozen" then what will we change--we change a lot of things in the beta based on feedback and we try to do so in a systematic manner with the focus on the goals for the release. The goal of having a fully functional Beta was to make sure we received reliable feedback and not a lot of "hey this doesn't work at all" sorts of reports. This has allowed us to really focus on delivering a refined RC where the changes we made are all the reflection of feedback we have received.

Building on the previous post that looked at the broad view of feedback, we want to start posting on the feedback and the engineering actions we’ve taken in responding to the feedback. We won’t be able to cover all the changes (as we’re still busy making them), but for today we wanted to start with a sampling of some of the more visible changes. We’re still on the same path working towards the release candidate and of course we know everyone is anxious for the next phase of our path to RTM. In the meantime, our full time machines are still running the Beta build.

Today’s post is from Chaitanya, who has previously posted on some of the core user interface work. --Steven

This blog post talks about a few of the improvements that will be in our Release Candidate (RC) based upon customer feedback. There are many under the hood changes (bug fixes, compatibility fixes, performance improvements, and improvements) across the entire dev team that we just don’t have room to discuss here, but we thought you’d enjoy a taste of some changes made by three of our feature teams: Core User Experience, Find & Organize and Devices & Media. The comments in this article come from a variety of verbatim sources, with identifying information withheld …”

More information at source: http://blogs.msdn.com/e7/archive/2009/02/26/some-changes-since-beta.aspx

Bye,

Eduardo Petizme
Microsoft MVP – Most Valuable Professional
MCSA Security 2000 & 2003 | MCITP Server 2008
Site: http://petizme.com
Blogs: http://blog.petizme.com ( USA | BRA )

! Coming Soon: Windows XP Mode and Windows Virtual PC

Petizme — Sat, 16 May 2009 15:50:56 GMT

Hi,

“Windows XP Mode is specifically designed to help small businesses move to Windows 7. Windows XP Mode provides you with the flexibility to run many older productivity applications on a Windows 7 based PC.

All you need to do is to install suitable applications directly in Windows XP Mode which is a virtual Windows XP environment running under Windows Virtual PC. The applications will be published to the Windows 7 desktop and then you can run them directly from Windows 7.

Windows XP Mode and Windows Virtual PC are best experienced on your new Windows 7 PC. We will be soon releasing the beta of Windows XP Mode and Windows Virtual PC for Windows 7 Professional and Windows 7 Ultimate.”

More information at source: http://windowsteamblog.com/blogs/business/archive/2009/04/24/coming-soon-windows-xp-mode-and-windows-virtual-pc.aspx

Bye,

Eduardo Petizme
Microsoft MVP – Most Valuable Professional
MCSA Security 2000 & 2003 | MCITP Server 2008
Site: http://petizme.com
Blogs: http://blog.petizme.com ( USA | BRA )

! Selected MVPs to talk with Mr. Steve Ballmer – I was one

Petizme — Sun, 12 Apr 2009 20:11:02 GMT

Hi,

A little late but I think that is a nice story…

This will be a long text ...

In MVP Global Summit 2007, I had the opportunity to attend a Bill Gates keynote. When I thought that would be the best opportunity of my life, came my rearward of MVP and the opportunity to see Steve Ballmer [CEO] last year in the MVP Global Summit 2008. It was amazing, I was able to see and hear him at the headquarters of Microsoft in the U.S. - Seattle / Redmond.

Again I thought were unique opportunities and that perhaps is not repeated soon. But came the announcement of Steve Ballmer's Keynote here in Brazil. Of course it is not the same thing, but I can say that I was very happy to have him open our event here in Sao Paulo, Brazil. Our public has the same taste that I had there in Seattle / Redmond.

But an invitation did everything that small. I was one of the few Brazilians MVPs selected for a meeting with Mr. Steve Ballmer. More than listening to him in a presentation, there would be listening and talking with him in the same room.

For some it may seem silly, but for a technology and Microsoft lover as I do, was a dream that maybe never be realized. Face to face with the world president of Microsoft. Unbelievable. I was very happy with the invitation and will be eternally grateful for this opportunity.

We had some conditions and restrictions to participate, how to get there before the time, did not disclose the meeting and does not come with any electronics.
The meeting happened on Tuesday, October,14 /2008, in a room reserved there in “Transamerica Expo”, where was the Tech-Ed Brazil in 2008.

I arrived on time and knew that there was other people who were invited.

MVPs of IT (5) made 5 questions and DEV (8) made other 5. The idea was to use the best possible way those precious minutes.

We made a circle with chairs and sofas where were the MVPs, the Michel Levy (President), Carlos Ferreira (Director of DPE), Renata Rochel (MSDN Manager), Mark Rodrigues (TechNet Manager) and Daniel Ferreira (Expert. NET's MSDN ) all of Microsoft Brazil.

The expectation was great, after the time was passing and I thought that his stay with us would be lower than hoped, but to my surprise it was not.

He is very nice. Shook the hand of all of us, introduced himself "Hi, I'm Steve Ballmer" in a tone of "as if they do not know who I am" with each of us. It was very special.
He made a brief thanks to the MVPs, so our time there with him (believe?) And Carlos Ferreira asked if we could make some questions to him.

We made ten questions, I particularly asked about the security in "Cloud Computing" [he had announced the previous week that MSFT will develop a Windows Cloud Computing] and on two occasions expressed my opinion, one on the "Live Mesh" and another on the use of PHP in IIS. Sometimes he wrote something in his role of notes ...

At the end I went to him and thanked him for coming to Brazil, a chance meeting and that it be our keynote, and that was of great value to our public and businesses.

Shook back his hand and leaves the room as a child that wins this that both hold.

I tried to explain here how valuable are our dreams and when you get there, dream higher.

The "simple" to help the community ITPros since 2006 which is a passion, I am increasingly satisfactory results. Be recognized as MVP, to me, but for most it is something inexplicable.

If you have to help and support (love and love) without getting anything in return is the secret to a happy life.

Who wants to leave the comments, please do ...

Bye, see you.

Eduardo Petizme
MVP Forefront Security
Site: http://petizme.com
Blogs: http://blog.petizme.com ( USA | BRA )

! MVP 3.0 – Forefront Security

Petizme — Tue, 27 Jan 2009 12:03:17 GMT

I’m very happy to announce that I won for the third consecutive year (2007, 2008 and 2009) the MVP Award.

“Microsoft Most Valuable Professionals (MVPs) are exceptional technical community leaders from around the world who are awarded for voluntarily sharing their high quality, real world expertise in offline and online technical communities. Microsoft MVPs are a highly select group of experts that represents the technical community's best and brightest, and they share a deep commitment to community and a willingness to help others.”

More info at MVP site program.

Bye,

Eduardo Petizme
MVP Forefront Security
Site: http://petizme.com
Blogs: http://blog.petizme.com ( USA | BRA )

! Official Windows 7 Beta Tester

Petizme — Tue, 27 Jan 2009 11:59:25 GMT

Hi,

Before Christmas I received an invite to be a official Windows 7 Beta tester.

As part of this team, Microsoft will see every bug report that I’m doing…

I sent some and received some replies like a problem that was a bug and they already fix it.

Bye,

Eduardo Petizme
MVP Forefront Security
Site: http://petizme.com
Blogs: http://blog.petizme.com ( USA | BRA )

! Tech-Ed Brazil Oct/2008

Petizme — Tue, 27 Jan 2009 11:28:07 GMT

Hi,

This time I presented two session at this very big event.

Stirling and FCSv2 was my sessions.

Some pictures…

Eduardo Petizme
MVP Forefront Security
Site: http://petizme.com
Blogs: http://blog.petizme.com ( USA | BRA )

! MVP Open Day Brazil Oct/2008

Petizme — Tue, 27 Jan 2009 11:20:15 GMT

Hi,

One day before our Tech-Ed (Brazil) it’s usual to have MVP Open Days. This is a closed event only for MVPs… We received some news, time to give feedback ;) and see/talk w/ our friends.

At that time, Rodolfo Roim (our MVP Lead) invited Toby Richards and Karen Young (from Microsoft Corp.) and we had opportunity to have a Q&A w/ them.

This event is under NDA, so we cannot talk more about it… sorry…

bye,

Eduardo Petizme
MVP Forefront Security
Site: http://petizme.com
Blogs: http://blog.petizme.com ( USA | BRA )

! Back again…

Petizme — Tue, 27 Jan 2009 11:11:57 GMT

Hi all,

How are you?

I’m out since october last yer, I’m sorry for that.

I move company and my work increase three times… my nights and weekends I had to work a lot…

Now, february, I think my nights and weekends will return to normal.

I’ll post some news late today…

Bye,

Eduardo Petizme
MVP Forefront Security
Site: http://petizme.com
Blogs: http://blog.petizme.com ( USA | BRA )

! Bill Gates' mysterious new company

Petizme — Fri, 24 Oct 2008 19:34:50 GMT

Hi,

From TechFlash:

“Just months after his Microsoft farewell, Bill Gates is quietly creating a new company -- complete with high-tech office space, a cryptic name and even its own trademark.

Public documents describe the new Gates entity -- bgC3 LLC -- as a “think tank.” It’s housed within a Kirkland office that the Microsoft co-founder established on his own after leaving his day-to-day executive role at the company this summer.

Is this Bill Gates’ next big business? A Gates insider gives an emphatic no -- saying it’s not a commercial venture but rather a vehicle to coordinate the software mogul’s work on his business and philanthropic endeavors.

However, bgC3 will also oversee Gates’ personal pursuit of breakthrough ideas in science and technology. The insider said the goal isn’t necessarily to create new companies, although ideas could be passed along to Microsoft, the Bill & Melinda Gates Foundation -- or others – as it makes sense.

Whatever the ultimate role of the company, the circumstances surrounding its creation provide a behind-the-scenes glimpse into the new era of Gates’ life.

State records show that the company, originally called Carillon Holdings, was established in March 2008. It formally changed its name to bgC3 in early July, 10 days after Gates left his full-time job at the company he built into an industry giant. He remains Microsoft’s chairman and continues to work part-time on projects.

”

More information and source here.

Bye,

Eduardo Petizme
MVP Forefront Security
Site: http://petizme.com
Blogs: http://blog.petizme.com ( USA | BRA )

! Interview: Forefront Stirling

Petizme — Tue, 23 Sep 2008 14:46:50 GMT

Hi all,

Ronald Beekelaar is the VM guy! He do a very good work preparing VM’s for Microsoft Teams.

See this interview w/ him about Forefront Stirling.

Ronald Beekelaar on Stirling and being your own boss

More info and source here or here.

Bye,

Eduardo Petizme
MVP Forefront Security
Site: http://petizme.com
Blogs: http://blog.petizme.com ( USA | BRA )

! Forefront Stirling Policies

Petizme — Tue, 23 Sep 2008 14:35:34 GMT

Hi,

From Extreme Blog:

“Even in Beta 1 of Forefront Stirling you can check out the security policy capabilities the product has. I know what you’re thinking – “whoopee, more policies”, but what you can do with the policies in Stirling are quite impressive.

What can you do with Stirling policies?

For each policy, you can easily specify granular compliance settings for Forefront Client Security (FCS), Forefront Server for Exchange (FSE), and various other security state assessments AND specify granular automated actions to be taken to remediate - all from a single console. Some ideas for what you might do with Stirling policies:

If a client doesn’t have the correct firewall or latest anti-malware updates, remediate this using NAP.
Scan email using two engines and when a virus is found to be sent via email, clean the virus and initiate a full client virus and anti-malware scan using FCS
Audit to verify your IIS 6/7 and SQL 2005 servers have appropriate security settings enabled
If a client is doing a port scan or quickly sending a large number of emails, quarantine their computer using NAP, block their outbound internet access through TMG, scan their email for viruses with FSE, and do a full virus scan with FCS

In updates past Beta 1, you can eventually expect even more capabilities and integration with other Forefront products.

…”

More info and source here.

Bye,

Eduardo Petizme
MVP Forefront Security
Site: http://petizme.com
Blogs: http://blog.petizme.com ( USA | BRA )