Microsoft forefront client security Q & A

After install and configure Microsoft forefront client security, and start working with FCS for customers, many questions was raised by the customer and our team
In this guide I will list the most of this questions and the reply for this question.
Some of these answers were describe some behavior of the product and it is by design
Others are our solution to complete the security suite of forefront client security and to harden the system.
the document is here
http://tarek.ismail.googlepages.com/FCSQA.pdf
or contact me @ Tarek_877@hotmail.com to get a copy

Configure Microsoft forefront client security

After install Microsoft forefront client security, we need to configure the server and all related component to get the best result from FCS server.
The following items will be discussed through this guide:

• Configure windows client firewall
• Configure WSUS server
• Deploy client security
• Manually deploy forefront client security client
• Create client security policy
• Deploy client security policy
• Distributing definition and engine updates
• Controlling access to FCS MOM consoles

To Configure forefront client security server on one server you can follow the steps in the link below:

http://tarek.ismail.googlepages.com/2-ConfigureFCS.pdf

or contact me @ Tarek_877@hotmail.com to get a copy

Install and configure Microsoft Forefront Server Security Management Pack (FFSMP) for Microsoft Operations Manager (MOM) 2005

Download the MP from Management Pack Catalog
http://www.microsoft.com/technet/prodtechnol/mom/catalog/catalog.aspx?vs=2005

Download and install Windows Scripting Host version 5.6 for Windows Server 2003
http://www.microsoft.com/downloads/details.aspx?FamilyID=887fce82-e3f5-4289-a5e3-6cbb818623aa&displaylang=en
if the operator console installed on windows XP install Windows Scripting Host version 5.6 for Windows XP and Windows 2000
http://www.microsoft.com/downloads/details.aspx?familyid=C717D943-7E4B-4622-86EB-95A22B832CAA&displaylang=en

Windows Management Instrumentation (WMI) is required to run some script

Use MOM 2005 Administrator Console to import the management pack
Open Administrator Console
Navigate to the Management Packs
Use Import/Export Management Option to run import wizard.

Run attribute discovery to accelerate the discovery of the servers running forefront
Open the Administrator Console.
Navigate to Administration and expand it.
Navigate to Computers\Agent Managed Computers. These are the systems that have had agents installed.
Select all the computers in the right pane (the agent systems), and then right-click. A shortcut menu appears.
Select Run Attribute Discovery Now

Configure Notification Groups to receive forefront alerts
Open administrator console
Navigate to management packs and expand it.
Go to notifications then notifications groups
Select Microsoft Forefront Security Administration Group and right-click and all the required operator for forefront alters.

Install Forefront Server Security Administrator

modify the Forefront Server Security Administrator path
Open the Administrator Console.
Navigate to management packs and expand it.
in Tasks/Microsoft Forefront Security/client console / Forefront Server Security Administrator
Right-click and choose Properties, then choose details tab and add the path of task command line.

Configure the directory path to the Application Log Provider
Open the MOM 2005 Administrator Console.
Navigate to the Management Packs\Providers container.
Select the Application Log type called Forefront Security ProgramLog or Forefront SP ProgramLog, depending on which one requires a new path.
Right-click and then select Properties.
Click the Directories tab.
Configure the directories by update the current or add new path

Install Microsoft Operations manager on Microsoft SQL server versions

During the installation of MOM 2005 on MS SQL server, you may get some installation problem
i will address some of this problem in this post
download the document from the following link
http://tarek.ismail.googlepages.com/MOM2005-SQL2005.pdf