Book Image

Microsoft System Center 2012 Endpoint Protection Cookbook

By : Andrew J Plue
Book Image

Microsoft System Center 2012 Endpoint Protection Cookbook

By: Andrew J Plue

Overview of this book

Microsoft System Center 2012 Endpoint Protection (previously known as Forefront Endpoint Protection 2012) protects client and server operating systems against threats with leading malware detection technologies. Built on Configuration Manager, it provides a unified infrastructure for client security and compliance management and "Microsoft System Center 2012 Endpoint Protection Cookbook" will help you get to grips with vital tasks for implementing this security tool. With the release of System Center 2012 Endpoint Protection, Microsoft is continuing its commitment to offering a cutting edge, enterprise- ready Anti-Virus solution. With its practical and easy to follow recipes, "Microsoft System Center 2012 Endpoint Protection Cookbook" fully prepares you for a simple, headache-free migration. This hands-on, practical cookbook will have you equipped with the knowledge to install and manage System Center 2012 Endpoint Protection like a pro in no time by following step by step recipes. You'll gain insight into a wide range of management tasks, such as building your SCEP infrastructure, deploying SCEP clients and building the perfect AV policies for your workstation and servers. You'll also benefit from a complete SCEP walk-through in a bonus appendix chapter. With "Microsoft System Center 2012 Endpoint Protection Cookbook" in hand, you will have the confidence to tackle essential tasks like deployment, policy and much more for SCEP.
Table of Contents (17 chapters)
Microsoft System Center 2012 Endpoint Protection Cookbook
Credits
About the Author
About the Reviewers
www.PacktPub.com
Preface
Index

Dealing with infections that SCEP cannot resolve


There is no such thing as an anti-malware product that is 100% percent effective against all malware. So, it's very likely that during its life span in your environment, SCEP will fail you at least once. This recipe will guide you through the process of dealing with such a failure and helping to ensure that the infection does not spread to other machines.

In this recipe, you'll be working with a scenario, where SCEP has detected a piece of malware and reports that it has successfully removed it, but unfortunately after a short time, the malware comes back and is re-detected by SCEP. No one has been logged into the PC during this outbreak, which removes the possibility that a user is re-downloading an attachment or re-installing a rouge program, after each infection.

Typically what this kind of behavior would indicate is that there is actually more malware on the PC than what SCEP can detect. The malware that is going undetected is likely a...