The document discusses Microsoft's Secure Messaging solution which provides an integrated approach to securing organizations' messaging infrastructure and enabling secure access to email. The solution uses Forefront Protection 2010 for Exchange Server to scan for malware on-premises and in the cloud. It also uses Active Directory Rights Management Services to protect sensitive emails and documents. The solution aims to simplify security management and help organizations meet compliance requirements through centralized visibility and control of messaging security.

1. Business-Ready Security—Secure Messaging Solution
Is Your Messaging Infrastructure Secure?
E-mail and instant messaging represent two of the most common threats facing organizations today, which can range from incoming complex malware
to information loss and misuse. Increasingly, hackers are using multiple techniques to bypass older messaging security solutions. The latest trend is for
spammers to embed URL links in spam to lure users to malicious Web sites (phishing). Blended threats that use spam, phishing, spyware, viruses, and
malicious Web sites are on the rise, making it difficult for companies to provide adequate security. In such an environment, spam, inappropriate content,
and information leaks can reduce productivity, increase business costs and risks, and make it difficult to meet compliance mandates.
Messaging infrastructure demands advanced protection while still enabling secure access to e-mail from virtually anywhere and on almost any device.
Secure Messaging Solution
Malware and spam cleaning
Internal mail protected
Microsoft® Forefront™ has brought together key capabilities needed to provide an with Forefront Protection
in the cloud with Forefront
Online Protection
integrated solution to secure the messaging environment. The Secure Messaging 2010 for Exchange Server
for Exchange
solution enables more secure business communications from virtually any location
or device, while preventing unauthorized use of confidential information. Through
deep integration across the messaging platform, IT administrators can enable more
secure communication both within the enterprise and with outside organizations
by using standards-based and interoperable identity sharing. With simplified
security management that provides critical enterprise-wide visibility, businesses can
implement centralized control of messaging security.
The Secure Messaging solution is part of Microsoft Business-Ready Security, which
focuses on the principle that security is a means to a business end. Microsoft offers
security solutions that help companies manage risks and empower people with access
to the information they need to get their jobs done.
Always-on access Information protection
built into platform built into the platform
Protect Everywhere, Access Anywhere
The Secure Messaging solution gives users more secure access to e-mail that is free
of spam and malware from virtually any location and device. With identity-centric and
policy-based protection across multiple layers, IT can prevent unauthorized use of sensitive
information either in motion or at rest. “Forefront Security for Exchange
Deliver best-in-class security with multiple scan engines from industry-leading Server can support up to five
vendors with Microsoft Forefront Protection 2010 for Exchange Server. scanning engines at the same
Provide on-premises and cloud-based anti-spam protection through aggregated time. Thus, it offers a more secure
reputation services and SmartScreen filtering with Microsoft Forefront Protection environment, compared with
2010 for Exchange Server and Forefront Online Protection for Exchange. products that support using only a
Automatically protect sensitive e-mail and documents with Active Directory® single engine.”
Rights Management Services that goes wherever the data goes.
Help enforce policy-based restricted use of e-mail attachments with document Akihiro Shiotani
scrubbing to remove cached content and prevent data leaks with Forefront Section Chief of the Infrastructure Group
Unified Access Gateway.
Astellas Pharma Information Systems Department
Enable secure, seamless, nearly continual access to messaging from Windows® 7
clients with DirectAccess in Microsoft Windows Server® 2008 R2.

2. Integrate and Extend Security Across the Enterprise
“Today, people send lots of protected
The Secure Messaging solution extends secure e-mail to partners by using standards- e-mail. This [Active Directory Rights
based, interoperable identity sharing and deep integration with Exchange Server,
Management Services] enables people
Active Directory Rights Management Services, and Microsoft Office.
to download rights-protected e-mail
Optimize malware detection by balancing security and performance needs
when connected to the corporate
through the Intelligent Engine Selection Policy controls of Forefront Protection
2010 for Exchange Server. network and read it at a later time,
even if they’re working offline.”
Increase mail throughput by analyzing multiple messages or documents
simultaneously with unique, in-memory, multi-threaded malware scanning in
Forefront Protection 2010 for Exchange Server. Robbie Roberts
IT Manager
Help Federate Active Directory Rights Management Services with outside
organizations to extend secure communication and collaboration to business Windrush
partners using Active Directory Federation Services.
Simplify the Security Experience, Manage Compliance
The Secure Messaging solution helps reduce IT overhead with easy-to-use tools that
provide enterprise-wide visibility into messaging and the client security state and
resources. The console in Forefront Server Security Management helps to:
Single console for managing on-premise and cloud-based messaging security
providing central configuration and operation, automated download and
distribution of signature and scan engine updates, and comprehensive reporting.
Reduce IT training time with a single console with easy-to-use wizards and
templates to configure e-mail security, respond to threats, and create alerts.
The Secure Messaging solution is composed of an integrated line of protection and access and management
products, all built around users’ identities and integrated with the platform.
Cloud-based, layered technologies to Comprehensive, secure remote access
actively help protect businesses’ inbound and to corporate resources for employees,
outbound e-mail from spam, viruses, phishing partners, and vendors on both managed
scams, and e-mail policy violations, including and unmanaged PCs and mobile devices
a 100 percent SLA for viruses and spam
Central console for simplifying the Fast and effective detection of viruses,
management of messaging and worms, and spyware by integrating multiple
collaboration application security scanning engines from industry-leading
partners, with 99.7 percent spam detection
through premium anti-spam services
Persistent, identity-based encryption Fast and effective protection against
and usage policies to safeguard digital inappropriate content and IM-based
Active Directory® Rights Management Services
information from unauthorized use—both malware through multiple scanning engines
online and offline, inside and outside of the from industry-leading security partners
corporate firewall
Learn more about the Secure Messaging solution and download it at:
http://www.microsoft.com/forefront
© 2009 Microsoft Corporation. All rights reserved. Microsoft, the Microsoft logo, Forefront, Windows, Windows Server, all Forefront products, and Active Directory Rights Management
Services are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries. All other trademarks are property of their respective
owners. This document is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED, OR STATUTORY, AS TO THE INFORMATION IN THIS DOCUMENT.