The Forefront server and
agent have been customized so that the agent will report only to the Forefront
server??™s version of MOM. It is possible to monitor the same events as Forefront
using a normal MOM agent; however the MOM administrator would have to
create a custom MOM management pack in order to do so. The reasoning for
having a separate server for malware events is separation of job roles.
MOM is concerned with much more than just malware, and typically in large
organizations there are resources dedicated to handling malware issues.
Normally administrators dealing with Forefront will not be concerned with
issues such as memory usage and performance problems. Having all that
information on top of the Forefront data can cause important malware alerts
to be lost in the stream of normal day-to-day alerts when working with MOM.
To access the MOM administrative console on the computer where Forefront is
installed, click Start | Program Files | Microsoft Operations Manager 2005,
184 Chapter 4 ??? Observing and Maintaining Microsoft Forefront Clients
then click Administrators Console. Once the console is open, expand the Management
packs Node, Expand Microsoft Forefront Client Security, and fi nally expand Rule Groups.
TIP
A Microsoft Management Pack is a package of Monitors and Alerts that is
focused on monitoring a specific service or environment. MOM provides
management packs for monitoring Active Directory and Exchange.
Pages:
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190