Microsoft Forefront Client Security provides unified malware protection for business desktops, laptops, and server operating systems that is easy to manage and control. Built on the same highly successful Microsoft protection technology already used by millions of people worldwide, Forefront Client Security helps guard against emerging threats such as spyware and rootkits, as well as traditional threats such as viruses, worms, and Trojan horses. By delivering simplified administration through central management and providing critical visibility into threats and vulnerabilities, Forefront Client Security helps you protect your business with confidence and efficiency. Forefront Client Security integrates with your existing infrastructure software, such as Microsoft Active Directory, and complements other Microsoft security technologies for enhanced protection and greater control.
There are two parts to the Forefront Client Security solution. The first is the Security Agent—installed on business desktops, laptops, and server operating systems—that provides real-time protection from and scheduled scanning for threats such as spyware, viruses, and rootkits. The second is the central management server, which enables administrators to easily manage and update preconfigured or customized malware protection agents and generate reports and alerts about the security status of their environment.
Microsoft Forefront Client Security is designed to protect Microsoft Windows 2000, Windows XP, Windows Server 2003, and Windows Vista systems. Forefront Client Security provides real-time virus and spyware protection for 32- and 64-bit operating system environments.
Forefront Client Security provides simplified administration and critical visibility and control to administrators through two server-based components—the management server and the reporting and alerting servers.
The management server runs a central console. From there, the administrator can select preconfigured settings or change client settings, to tailor the solution to their environment. Settings include scan schedule, real-time protection enabled and disabled, default actions to specific threats, and alerting and reporting level. To simplify distribution of settings to client computers, Microsoft Forefront Client Security is optimized for the use of Active Directory Group Policy. Customers can also choose to use any existing software distribution system.

Malware definition updates are distributed from Microsoft Update. Microsoft Forefront Client Security simplifies the distribution of definition updates to client computers through optimization with Microsoft Windows Server Update Services (WSUS). WSUS enables administrators to auto-approve the latest signatures, or test and approve every update. Customers can also use any existing software distribution system in their environment. Remote users can be configured to failover to Microsoft Update to receive signature updates.
In deploying security agents to machines for the first time, customers can either use an existing software distribution system or download security agents directly from Microsoft Update and distributing them to individual machines using Windows Server Update Services (WSUS).
Events that occur on client machines are reported to the reporting and alerting server. This server generates alerts for high-value events, such as 'malware outbreak' or 'failed to remove a threat.' This server also generates reports that are accessible through the console.
The Forefront Client Security event logging and alerting system is built on the Microsoft Operation Manager (MOM) 2005 award-winning technology. Required MOM components are embedded into Forefront Client Security to simplify deployment and use.
Forefront Client Security uses database and reporting systems from Microsoft SQL Server, which is included in the purchase of Forefront Client Security. (Customers also have the option of purchasing Forefront Client Security without SQL Server if they have an existing installation.)
What Are the Key Benefits of Forefront Client Security?
Unified Protection: Forefront Client Security delivers unified protection from current and emerging malware, so you can feel confident that your business systems are better protected against a broad range of threats. Through a single agent, Forefront Client Security provides real-time detection and removal of spyware, rootkits, and other emerging threats, as well as traditional attacks such as viruses and worms.
Simplified Administration: Forefront Client Security provides simplified administration through central management, so you can efficiently protect your business. With one console for simplified client security administration, Forefront Client Security saves time and reduces complexity. Using familiar interfaces similar to those found in other Microsoft tools, the console supports both local and remote access to all administrative functions, including configuration, signature updates, reporting, and alerting.
Critical Visibility and Control: Forefront Client Security produces insightful prioritized security reports, so you have visibility and control over malware threats and security vulnerabilities. A single dashboard snapshot of your current security status helps you understand where action is required.