Book Image

Microsoft System Center 2012 Endpoint Protection Cookbook

By : Andrew J Plue
Book Image

Microsoft System Center 2012 Endpoint Protection Cookbook

By: Andrew J Plue

Overview of this book

Microsoft System Center 2012 Endpoint Protection (previously known as Forefront Endpoint Protection 2012) protects client and server operating systems against threats with leading malware detection technologies. Built on Configuration Manager, it provides a unified infrastructure for client security and compliance management and "Microsoft System Center 2012 Endpoint Protection Cookbook" will help you get to grips with vital tasks for implementing this security tool. With the release of System Center 2012 Endpoint Protection, Microsoft is continuing its commitment to offering a cutting edge, enterprise- ready Anti-Virus solution. With its practical and easy to follow recipes, "Microsoft System Center 2012 Endpoint Protection Cookbook" fully prepares you for a simple, headache-free migration. This hands-on, practical cookbook will have you equipped with the knowledge to install and manage System Center 2012 Endpoint Protection like a pro in no time by following step by step recipes. You'll gain insight into a wide range of management tasks, such as building your SCEP infrastructure, deploying SCEP clients and building the perfect AV policies for your workstation and servers. You'll also benefit from a complete SCEP walk-through in a bonus appendix chapter. With "Microsoft System Center 2012 Endpoint Protection Cookbook" in hand, you will have the confidence to tackle essential tasks like deployment, policy and much more for SCEP.

Related Content you might be interested in

Current Title:

Small book image
Microsoft System Center 2012 Endpoint Protection Cookbook
Andrew J Plue
Oct, 2012 | 208 pages
No titles found
Table of Contents (17 chapters)
Microsoft System Center 2012 Endpoint Protection Cookbook
Microsoft System Center 2012 Endpoint Protection Cookbook
Credits
Credits
About the Author
About the Author
About the Reviewers
About the Reviewers
www.PacktPub.com
www.PacktPub.com
Preface
Preface
Free Chapter
1
Getting Started with Client-Side Endpoint Protection Tasks
Getting Started with Client-Side Endpoint Protection Tasks
Introduction
Locating and interrupting client-side SCEP logs
Performing manual definition updates and checking definition version
Manually editing local SCEP policy using the user interface
Utilizing MpCmdRun.exe
2
Planning and Rolling Installation
Planning and Rolling Installation
Introduction
Creating role-based SCEP administrators
Creating auto deployment rules for SCEP definitions
Enabling the Endpoint Protection role
3
SCEP Configuration
SCEP Configuration
Introduction
Modifying SCEP default client settings
Creating, modifying, and deploying a SCEP policy
Setting up SCEP alerts
Configuring reports
4
Client Deployment Preparation and Deployment
Client Deployment Preparation and Deployment
Introduction
Preparing your environment for SCEP
Creating an effective deployment plan
Deploying SCEP clients with SCCM 2012
Verifying that SCEP policies are being applied correctly
Performing a manual FEP client installation
5
Common Tasks
Common Tasks
Introduction
Checking that your SCCM server has up-to-date SCEP definitions
Performing SCEP operational tasks using the SCCM console
Using SCEP reports to verify task completion
Utilizing the SCEP dashboard
Using MpCmdRun remotely
6
Management Tasks
Management Tasks
Introduction
Verifying that SCEP clients are installed on all systems
Changing control with SCEP policies
Using SCEP policy templates
Merging client policies
Responding to SCEP alerts
7
Reporting
Reporting
Introduction
Using the system-based SCEP reports
Utilizing the user-based SCEP reports
Providing access to reports
Building custom reports
8
Troubleshooting
Troubleshooting
Introduction
Resolving client-side definition update issues
Fixing SCCM client health issues
Resolving false positives
Dealing with infections that SCEP cannot resolve
9
Building an SCCM 2012 Lab
Building an SCCM 2012 Lab
Introduction
Installing SCCM 2012 and SCEP in a standalone environment
Appendix
Appendix
Integrating SCEP with SCOM 2012
Client deployment checklists
List of SCEP logfiles
Using Windows Intune Endpoint Protection
Index
Index

Introduction

With each version of its corporate antivirus solution, Microsoft has tried to tighten integration with their other core infrastructure products. Whereas, the previous release of Forefront Endpoint Protection needed to be installed on top of an SCCM 2007 infrastructure, SCEP is built into SCCM 2012 right out of the box. Once you've migrated from SCCM 2007 to SCCM 2012, utilizing SCEP in your environment requires little more than agreeing to an End-user licence agreement (EULA) and making sure you've got the licenses to cover your client base.

What requires for a little foresight and planning is making sure that the right staff members have access to SCEP's management tools within SCCM and that your organization's SCCM distribution points have up-to-date SCEP definitions preloaded. Providing your distribution points with definitions ahead of a SCEP deployment will help prevent a situation, where all of your newly deployed SCEP clients attempt to reach out over the Internet to Microsoft...

Previous Section
End of Section 2
Next Section