Forefront Endpoint Protection 2010 RC

M-am jucat in weekend cu noua versiunea a antivirusului “corporate” de la Microsoft – Forefront Endpoint Protection 2010 aflat in RC public acum.

Produsul are 3 mari diferente fata de Forefront Client Security:

1. Nu are consola lui proprie
2. Are ca cerinta obligatorie existenta unei infrastructuri de Configuration Manager 2007 SP2 R2 sau R3.
3. Nu mai foloseste MOMul, cel putin eu nu am vazut…

De ce are nevoie de ConfigMgr? Pentru ca au bagat consola antivirusului in el. Crearea si asignarea politicilor se face din consola ConfigMgr-ului.

 

Ca si Forefront Client Security, FEP-ul nu e rocket science de instalat. Cateva next-uri si introducerea unor detalii si atat. Nu am facut capturi de ecran ca sa le pot publica aici dar am documentat pasii in mare parte, vedeti mai jos. Cum am avut nevoie sa testez antivirusul intr-o infrastructura bazata pe Windows Server 2003, pasii de mai jos pot fi putin diferiti pe servere cu Windows Server 2008.\

 

Server1: DC (Windows Server 2003 R2 SP2 x86)

Server2: SQL (Windows Server 2003 R2 SP2 x64)

Server3: ConfigMgr (Windows Server 2003 R2 SP2 x86)

_______________________________________________

1. DC

• Install AD, DNS, DHCP

2. SQL

• Install IIS, sqlncli_x64.msi (http://www.microsoft.com/downloads/en/details.aspx?FamilyID=d09c1d60-a13c-4479-9b91-9e8b9d835cdc) then SQL Server 2005 SP3 x64 with all components (default instance) using SQL service account (SQLSvc)
• Add ConfigMgr service account (ConfigMgrSvc) to local SQL groups and ConfigMgr computer account (CONFIGMGR$) to local Administrators group
• Use sqlprov.exe (c:\Program Files (x86)\Microsoft SQL Server\90\Shared\) to provision SQL and Configmgr service accounts

3. DC

• Extend AD Schema
• Add permissions to ConfigMgr computer account on System container in AD

4. ConfigMgr

• Install IIS, BITS, WebDAV, Report Viewer Redistributable 2008 SP1, WSUS 3.0 SP2, WDS, using ConfigMgr service account.
• Create group policy settings for Windows Updates (use FQDN for server name)
• Install hotfix http://support.microsoft.com/kb/942841
• Install hotfix http://support.microsoft.com/kb/940848
• Install ConfigMgr 2007 SP2 (default roles) using ConfigMgr service account
• Install hotfix http://support.microsoft.com/kb/977384 and create the hotfix package
• Install hotfix http://support.microsoft.com/kb/2271736
• Install ConfigMgr 2007 R3
• Install sqlncli.msi or sqlncli_x64.msi and SQLServer2005_XMO.msi or SQLServer2005_XMO_x64.msi
• Install FEP 2010
• Create desktop and server policy
• Assign policy to collection

Apropo, daca nu puteti sa treceti de pasul cu restartul de la prerechizite, dati un ochi aici.

One Response to “Forefront Endpoint Protection 2010 RC”