Introduction
Microsoft Forefront Server Security for SharePoint Services is a tool that will help network administrators prevent vulnerabilities that can occur within SharePoint workspaces. SharePoint workspaces are areas on the network where users can create, edit, and save fi les and folders. If these storage locations on the network are used in a malicious manner, an enterprise can be vulnerable.
SharePoint Services, replacing the less robust and discontinued SharePoint Team Services, is a relatively recent addition to Microsoft’s line of products. SharePoint Services has become increasingly popular among companies where employees need to collaborate on documents and spreadsheets. The explosion in popularity of Share Point Services means that additional security mechanisms need to be in place in order to prevent the network from becoming vulnerable.
The Microsoft Forefront Server Security allows network administrators to centrally manage the security of the SharePoint servers. Administrators using Forefront Server Security can conduct filtering, scanning, and job scheduling of SharePoint repositories from a central management console. Reports can give the network engineer using Forefront Server Security Administrator an indication of how end users are utilizing the SharePoint workspaces. If end users are improperly utilizing SharePoint Services, additional filters can be added. Using Forefront Server Security can help network administrators deal with vulnerabilities related to SharePoint Services.
Implementing Microsoft Forefront Server for SharePoint
Microsoft’s SharePoint server provides a collaboration environment that allows people to share documents and contacts, and it provides a single place for project management. While antivirus software on the server can scan fi les for viruses, Forefront Security for SharePoint allows for a higher level of integration, including real-time scanning and the ability to use up to five scanning engines at once for maximum protection. Implementation of Forefront Security for SharePoint can be broken into two components: installation and configuration. The installation of Forefront must be planned ahead of time to ensure all of the requirements are met. If they are not, both hardware and software upgrades may be required. A thorough implementation plan will allow you to determine if upgrades are needed. Once installed, you must configure Forefront properly in order to provide the security and protection planned for during the design phase. The ability to customize Forefront to fit different corporate models is a key strength that allows every installation to be optimized to fi t goals decided during the design phase.
Install and Configure Forefront Security for SharePoint
Microsoft has made the installation of Forefront Security for SharePoint quick and straightforward, allowing you to begin configuration as quickly as possible. Once you have the installation media, it is only a matter of minutes to install Forefront. While the installation itself is straight forward, don’t be fooled into thinking you don’t need to plan. The decision to do a local installation or remote installation will require the installer to have account information readily available with the proper access to the target server.
ForeFront Security for SharePoint Requirements
Before we start the installation, let’s take a look at the minimum server requirements to install Forefront Security for SharePoint. It is also important to make sure that the software requirements for Forefront security have been met. If they have not, you will be notified upon installation with a dialog box and the installation will stop.
■ Processor: Dual-processor computer rated at 2.5 GHz or higher
■ Operating System: Microsoft Windows Server (Standard, Enterprise, Datacenter, or Web Edition) with Service Pack 1
■ Hard Disk: 550MB of available disk space
■ SharePoint Requirement: Microsoft Office SharePoint Server 2007 or Microsoft Windows SharePoint Services, version 3
■ Microsoft Windows Workflow Foundation Runtime Components
■ Microsoft .NET Framework
■ Internet Information Services 6 in worker process isolation mode
■ NTFS fi le system
■ MAPI client such as Microsoft Outlook
Installation
Forefront Security for SharePoint has the option to install on the local server or on a remote server. To initiate either installation, you will need to log on to the server with an account that has administrative rights. For an installation on a remote server, the local account you use to log in needs to have administrative rights on the remote server. This is usually accomplished by using a domain account that is the administrators group of both computers. Because the installation registers services on the target server, it requires administrative access.
A great new feature of Forefront for SharePoint is the ability to use Hot Upgrade technology. This allows installations of Windows SharePoint Services without interrupting existing SharePoint service because a restart of the Windows SharePoint Services is not needed.
Forefront installs two main components that service the requests from the Forefront administrator and control all of the back-end functionality. The FSCController is installed as a service and coordinates all scanning activities within Forefront Security for SharePoint Server. The FSSPController is also an installed service, which communicates between Forefront and the SharePoint SQL server database.
1. To begin installation, insert the Forefront Security for SharePoint CD
or download the installation fi le from the Microsoft Download Center.
2. At the initial Welcome screen, select Next.
3. At the License Agreement screen, read the agreement and if you accept the terms, click Yes to continue.
4. At the Customer Information screen, enter the User Name and Company Name for the installation and click Next. Both are needed for the Next button to be active.
5. At the Installation Location screen, you will select the type of installation you wish to perform, Local or Remote, and then click Next.
6. This step is only for Remote Installations. If you are completing a local install, go to step 7. At the Remote Server Information screen, enter the target Server Name that you want to install Forefront Security for SharePoint on and the Share Directory. The default Share Directory is C$.
7. At the Installation Type screen, you can select Client—Admin Console Only or Full Installation. To install the Forefront Security for SharePoint application on the server, you will need to select Full Installation. The Client—Admin Console Only installation type only installs the administrator console to manage the server remotely.
8. At the Engines screen, you will see eight antivirus scan engines that Forefront Security can use to protect the server. Microsoft Antimalware Engine is selected by default and cannot be changed, allowing for you to select between the remaining seven scan engines. A maximum of five engines can be used, so you will be able to select four of the seven available to you. Just remember that each antivirus engine you select will require more memory to be dedicated to Forefront. If you have a server without the minimum amount of memory, you may want to select fewer antivirus engines. The installation automatically selects
four engines randomly which you can keep or change. Once you have determined which antivirus engines you will enable, click Next. You can find out more about the scan engines by going to the following the Web sites:
1. AhnLab Antivirus Scan Engine http://global.ahnlab.com
2. CA Vet http://www.ca.com
3. Authentium Command Antivirus http://www.authentium.com/command
4. Kapersky Antivirus Technology http://www.kaspersky.com
5. Norman Virus Control http://www.norman.com
6. Sophos Virus Detection http://www.sophos.com
7. VirusBuster Antivirus http://www.virusbuster.hu
9. At the Engine Updates Required screen, click Next. Forefront Security for SharePoint Server will automatically search and update the virus definitions hourly starting five minutes after the service is started. This is necessary to ensure the antivirus engines are up to date, protecting the server from the latest threats.
10. At the Choose Destination Location screen, select the destination folder for the installation. The default installation folder is C:Program FilesMicrosoft Forefront SecuritySharePoint, which should be suitable for most installations. If you decide to change the installation folder path, remember that Forefront
Security for SharePoint does not support an install path length over 170 characters. Once you have entered the new location for the installation or accepted the default, click Next.
11. At the Select Program Folder screen, click Next.
12. At the SharePoint Database Account Information screen, you will need to enter the account used for SharePoint database access. This account needs to be a member of the SharePoint server’s local administrators group as well as the database server’s local administrators group if the database was installed on a separate server. The format for entering the username is DomainUserAccount or MachinenameUserAccount.
13. At the Start Copying Files screen, you should review your settings to ensure that everything is correct prior to the installation. If you want to change a setting, use the Back button to go back to that screen and enter the new information. If you are ready to continue with the installation, click Next.
14. Forefront Security for SharePoint is now going to install on your SharePoint server. This process can take a few minutes, during which time you will see a
few command screens pop up as part of the installation.
15. Once installed, you will have the option to view the README fi le and click Finish. The installation is complete and you can now move on to configuring Forefront.
Filed under: TUTORIALS
