Book Image

Microsoft System Center 2012 Endpoint Protection Cookbook

By : Andrew J Plue
Book Image

Microsoft System Center 2012 Endpoint Protection Cookbook

By: Andrew J Plue

Overview of this book

Microsoft System Center 2012 Endpoint Protection (previously known as Forefront Endpoint Protection 2012) protects client and server operating systems against threats with leading malware detection technologies. Built on Configuration Manager, it provides a unified infrastructure for client security and compliance management and "Microsoft System Center 2012 Endpoint Protection Cookbook" will help you get to grips with vital tasks for implementing this security tool. With the release of System Center 2012 Endpoint Protection, Microsoft is continuing its commitment to offering a cutting edge, enterprise- ready Anti-Virus solution. With its practical and easy to follow recipes, "Microsoft System Center 2012 Endpoint Protection Cookbook" fully prepares you for a simple, headache-free migration. This hands-on, practical cookbook will have you equipped with the knowledge to install and manage System Center 2012 Endpoint Protection like a pro in no time by following step by step recipes. You'll gain insight into a wide range of management tasks, such as building your SCEP infrastructure, deploying SCEP clients and building the perfect AV policies for your workstation and servers. You'll also benefit from a complete SCEP walk-through in a bonus appendix chapter. With "Microsoft System Center 2012 Endpoint Protection Cookbook" in hand, you will have the confidence to tackle essential tasks like deployment, policy and much more for SCEP.

Related Content you might be interested in

Current Title:

Small book image
Microsoft System Center 2012 Endpoint Protection Cookbook
Andrew J Plue
Oct, 2012 | 208 pages
No titles found
Table of Contents (17 chapters)
Microsoft System Center 2012 Endpoint Protection Cookbook
Microsoft System Center 2012 Endpoint Protection Cookbook
Credits
Credits
About the Author
About the Author
About the Reviewers
About the Reviewers
www.PacktPub.com
www.PacktPub.com
Preface
Preface
Free Chapter
1
Getting Started with Client-Side Endpoint Protection Tasks
Getting Started with Client-Side Endpoint Protection Tasks
Introduction
Locating and interrupting client-side SCEP logs
Performing manual definition updates and checking definition version
Manually editing local SCEP policy using the user interface
Utilizing MpCmdRun.exe
2
Planning and Rolling Installation
Planning and Rolling Installation
Introduction
Creating role-based SCEP administrators
Creating auto deployment rules for SCEP definitions
Enabling the Endpoint Protection role
3
SCEP Configuration
SCEP Configuration
Introduction
Modifying SCEP default client settings
Creating, modifying, and deploying a SCEP policy
Setting up SCEP alerts
Configuring reports
4
Client Deployment Preparation and Deployment
Client Deployment Preparation and Deployment
Introduction
Preparing your environment for SCEP
Creating an effective deployment plan
Deploying SCEP clients with SCCM 2012
Verifying that SCEP policies are being applied correctly
Performing a manual FEP client installation
5
Common Tasks
Common Tasks
Introduction
Checking that your SCCM server has up-to-date SCEP definitions
Performing SCEP operational tasks using the SCCM console
Using SCEP reports to verify task completion
Utilizing the SCEP dashboard
Using MpCmdRun remotely
6
Management Tasks
Management Tasks
Introduction
Verifying that SCEP clients are installed on all systems
Changing control with SCEP policies
Using SCEP policy templates
Merging client policies
Responding to SCEP alerts
7
Reporting
Reporting
Introduction
Using the system-based SCEP reports
Utilizing the user-based SCEP reports
Providing access to reports
Building custom reports
8
Troubleshooting
Troubleshooting
Introduction
Resolving client-side definition update issues
Fixing SCCM client health issues
Resolving false positives
Dealing with infections that SCEP cannot resolve
9
Building an SCCM 2012 Lab
Building an SCCM 2012 Lab
Introduction
Installing SCCM 2012 and SCEP in a standalone environment
Appendix
Appendix
Integrating SCEP with SCOM 2012
Client deployment checklists
List of SCEP logfiles
Using Windows Intune Endpoint Protection
Index
Index

Setting up SCEP alerts

Although every anti-virus administrator dreads the sound of a dozen alerts hitting their smartphone in the middle of the night, alerts are a necessary evil. The trick is to configure an alerts policy that correctly notifies you with actionable information, but does not inundate your administrators with a glut of unnecessary e-mails.

This recipe will walk you through the process of creating a set of SCEP alerts that will only notify you when an administrator's attention is necessary.

Getting ready

To complete this recipe, you will need to have access to a user account that has Full Administrator rights to the SCCM 2012 console. Alerts in SCEP are based on the membership of collections, so if you wish to create an alerts policy for a specific set of computers, it is advisable that you create this collection ahead of time.

Alerts are delivered via e-mail and they require an available Exchange SMTP resource; you will need to know the FQDN for the SMTP server in your environment...

Previous Section
End of Section 5
Next Section