Get Enterprise-Grade Security with Microsoft Forefront Solutions

Microsoft Forefront protection and access products help ensure end-to-end security and access to information throughout an organization. With Forefront products, IT professionals get a unified view of network security. Designed to work with an infrastructure based on Microsoft technologiesincluding Active Directory, Group Policies, and Windows Update ServicesForefront solutions enable seamless management of security service deployment, distribution, configuration, and enforcement.

industry-leading security firms integrated into a single solution, helps protect a Microsoft Exchange Server messaging environment from malicious software (malware). Comprehensive defense includes both hosted and on-premises filtering and content filtering to prevent out-of-policy content from entering or leaving a network. Forefront Protection 2010 for Exchange Server is licensed through Microsoft Volume Licensing in the Microsoft Online Services Program on a per-user or per-device monthly subscription model for internal sites, and a per-server monthly subscription model for Internet-facing sites. External Connector helps protect Exchange Servers from being accessed by external users, and subscriptions are licensed per server, with one server license required for each External Connector.

Achieve Business-Ready Security

Microsoft is working to achieve the goal of business-ready security based on three fundamental tenets: Comprehensive protection. Forefront products are based on open standards protocols and are designed to interoperate with an organization's identity infrastructure, and support heterogeneity for both onpremises and hosted environments. Integrated security. Forefront products feature indepth defense across endpoints, servers, and networks, and provide highly secure, identity-based access to a mobile workforce that can connect from virtually anywhere. Simplified management. Forefront products can be used to centrally manage an organization's environment while creating visibility into the infrastructure, improving security and compliance through identity tracking and enforcement, and enabling auditing.

Microsoft Forefront Online Protection 2010 for Exchange

Microsoft Forefront Online Protection 2010 for Exchange helps protect an organizations messaging environmentwhether its on-premises, in the cloud, or hosted elsewherewhile reducing IT cost and complexity. IT professionals can use this fully managed service to enforce corporate email policies and help prevent malware from reaching corporate networks. Forefront Online Protection 2010 for Exchange is licensed through Microsoft Volume Licensing in the Microsoft Online Services Program on a per-user or per-device monthly subscription model. The product is available as a standalone service and is also included with different Microsoft product suites (including Microsoft Business Productivity Online Suite, Microsoft Exchange Online, Microsoft Enterprise Client Access License (CAL), Microsoft Exchange Enterprise Client Access License (CAL) with services, and Microsoft Forefront Protection Suite)Microsoft Forefront Online Protection 2010 for SharePoint Microsoft Forefront Protection 2010 for SharePoint works with multiple scan engines from industry-leading vendors to help protect Microsoft SharePoint Server 2007, Microsoft SharePoint 2010, and Windows SharePoint Services 3.0 collaboration environments. It features content controls and helps block malware and out-ofpolicy content from entering SharePoint 2010 libraries.

With Forefront solutions, security information is stored in a single Microsoft SQL Server database management software repository, from which events can be identified and interpreted. Forefront product licenses include all malware scan engines, signatures, and product upgrades during the license period.

Microsoft Forefront Protection 2010 for Exchange Server

Microsoft Forefront Protection 2010 for Exchange Server, which includes multiple scan engines from

Forefront Protection 2010 for SharePoint is licensed through Microsoft Volume Licensing in the Microsoft Online Services Program on a per-user or per-device monthly subscription model for internal sites, and a perserver monthly subscription model for Internet-facing sites. The product is available as a standalone service and as part of the Enterprise CAL Suite or the Forefront Protection Suite.

Management Gateway server. This license does not require any device or user CALs. Forefront Threat Management Gateway Web Protection Service provides continuous updates for malware filtering and access to cloud-based URL filtering to protect against the latest web threats. Forefront Threat Management Gateway Web Protection Service is a subscription product licensed on a per-user or per-device basis. It is offered as a standalone product or as part of the Enterprise CAL Suite or the Forefront Protection Suite.

Microsoft Forefront Security for Office Communications Server

Microsoft Forefront Security for Office Communications Server helps implement fast and effective protection against instant messaging-based malware and out-of-policy content for Microsoft Office Communications Server 2007 environments. Forefront Security for Office Communications Server is licensed through Microsoft Volume Licensing in the Microsoft Online Services Program on a per-user or perdevice monthly subscription model. This product is available as a standalone service or as part of the Enterprise CAL Suite or the Forefront Protection Suite.

Microsoft Forefront Unified Access Gateway 2010

Microsoft Forefront Unified Access Gateway 2010 provides comprehensive and highly secure remote access to corporate resources for employees, partners, and vendors on both managed and unmanaged PCs and mobile devices. Forefront Unified Access Gateway 2010 is licensed through Microsoft Volume Licensing and features the following license requirements: A server license, available either through an original equipment manufacturer (OEM) appliance or as software, gives the license holder the right to install and use the server software. A Client Access License (CAL) in required for each named or authenticated device or user that accesses a system running Unified Access Gateway. A Device CAL grants the right for one device (accessed by any user) to access the Unified Access Gateway server software. A User CAL permits one user (using any device) to access the server software. An optional external connector license is available to enable external parties to access the network. Customers have the choice to license an external connector for each Unified Access Gateway Server that those external users will access, or to license a Unified Access Gateway CAL for each external user.

Microsoft Forefront Threat Management Gateway 2010

Microsoft Forefront Threat Management Gateway 2010 is a comprehensive and highly secure web gateway that helps protect employees from web-based threats. The Forefront Threat Management Gateway solution includes three separately licensed elements: Forefront Threat Management Gateway 2010 Standard Edition provides URL filtering, anti-malware inspection, intrusion prevention, application- and network-layer firewall, and HTTP/HTTPS inspection in a single solution. Forefront Threat Management Gateway 2010 Enterprise Edition enables increased scalability, provides access to a central management console, and supports virtual environments. Forefront Threat Management Gateway 2010 is licensed under the processor licensing model, with a license required for each physical or virtual processor accessed by an operating system environment (OSE) running a Threat

Each named and/or authenticated user who accesses resources through the gateway appliance requires a

Unified Access Gateway 2010 User CAL. Each client device that accesses resources through the gateway appliance

requires a Unified Access Gateway 2010 Device CAL.

Microsoft Forefront Product Licensing Options and Pricing

Forefront Suite Product
Forefront Protection 2010 for Exchange Server

Licensing Editions
Forefront Protection 2010 for Exchange Server Forefront Protection 2010 for Exchange Server External Connector

Estimated Price*
US$15 per user per year Varies Starts at US$20 per user per year

Licensing Programs
Enterprise Agreement, Enterprise Agreement Subscription, Select, Academic and Government Services, Open Value, Open Value Subscription, Service Provider License Agreement (SPLA), High Volume Services, Campus and School Agreement Enterprise Agreement, Enterprise Agreement Subscription, Select, Academic and Government Services, Open Value, Open Value Subscription, Service Provider License Agreement (SPLA), Campus and School Agreement Enterprise Agreement, Enterprise Agreement Subscription, Select, Academic and Government Services, Open Value, Open Value Subscription, Service Provider License Agreement (SPLA), High Volume Services, Campus and School Agreement Enterprise Agreement, Enterprise Agreement Subscription, Select, Academic and Government Services, Open Value, Open Value Subscription, Service Provider License Agreement (SPLA), High Volume Services, Campus and School Agreement Enterprise Agreement, Enterprise Agreement Subscription, Select, Academic and Government Services, Open, Open Value, Open Value Subscription, Service Provider License Agreement (SPLA), Campus and School Agreement, ISV Royalty, OEM * Standard Edition is also available in Full Packaged Product (FPP) for retail sale through distributors. ** Web Protection Service is available through all listed programs except ISV Royalty, OEM, Open, and FPP. Enterprise Agreement, Enterprise Agreement Subscription, Select, Select Plus, Open, Open Value, Open Value Subscription, Service Provider License Agreement (SPLA), Campus and School Agreement, U.S. Government

Forefront Online Protection 2010 for Exchange

Forefront Protection 2010 for SharePoint

US$7.20 per user per year

Forefront Security for Office Communications Server

US$6.92 per user per year

Forefront Threat Management Gateway 2010

Forefront Threat Management Gateway 2010 Standard Edition* Forefront Threat Management Gateway 2010 Enterprise Edition Forefront Threat Management Gateway Web Protection Service**

US$1,499 per processor US$5,999 per processor US$12 per user or per device, annually US$1 per user per month Varies US$15 per user

Forefront Unified Access Gateway 2010

Server license External connector license User CAL Device CAL

* Prices may vary with volume and type of program. All prices reflect pricing for purchases in the United States and Canada. Estimated subscription prices are for an organization with at least five users.

Planning for Forefront Solutions

Customers who plan to deploy Forefront solutionseither through upgrades or with new licensesshould keep in mind the following information: The best way to protect the investment, access new versions, and get Deployment Planning Services and technical assistance is to renew an SA agreement. Flexible payments are available. To learn more, go to www.microsoft.com/financing. Contact your Microsoft Solution Partner directly or call 1-800-936-3500 in the United States and Canada.

This document is provided as-is. Information and views expressed in this document, including URL and other Internet Web site references, may change without notice. This document does not provide you with any legal rights to any intellectual property in any Microsoft product.