Round-up: Network endpoint security suites

Microsoft Forefront Client Security

Target market: medium to enterprise organisations
Phone:13 20 58
Web: www.microsoft.com/forefront/en/us/default.aspx

Microsoft Forefront Client Security is specifically designed for securing endpoints in diverse business environments ranging from medium to large enterprise. There are multiple incarnations of Forefront available on the market; alternative versions feature Microsoft Exchange, Microsoft SharePoint and gateway protection capabilities.

The solution has a fair number of prerequisites to be met before the installation process can even begin. Forefront requires at least Microsoft SQL Server 2005 Standard Edition. It should also be noted that Microsoft SQL Server Express Edition will not work, as it does not contain the integration services module. Microsoft recommends that the solution is optimally deployed using a four-server network topology. However, it is possible to reduce the amount of servers required, although overall server performance may be impacted. Enex Test Lab installed the solution using a single server topology based on Microsoft documentation, mainly to ensure a level playing field with the other products under test. Once Forefront is installed, management operations are performed using an instance of the Microsoft Management Console.

Forefront Client Security is perhaps best deployed using the Windows Server Update Service (WSUS) in a large organisation with a high number of endpoints. However, it is also possible to opt for manual endpoint installations.

(Credit: Enex Test Lab)

(Credit: Enex Test Lab)

Verdict

Microsoft achieved an overall malware protection score of 88 per cent, with no false positives recorded. Trojan, spyware, rootkit and exploit samples were missed in this instance. This product was the most complicated to install of all products under test with a dazzling array of prerequisites.

Overall rating
The good	A useful set of management tools that share the familiar Windows administration environment Easy and flexible endpoint deployment over the network
The bad	Complicated and time consuming to install Lower-end malware protection capabilities in this specific instance
The bottom line	Particularly suited to larger enterprises that have access to the necessary engineering skills and computer resources.
Interoperability	Windows workstations: 2000, XP, Vista, 7 Windows servers: 2000-2008 Other: central administration server
ROI	An appropriate solution for integrating with Microsoft products and platforms.
ROI score