Prev | Current Page 321 | Next

Jesse Varsalone and Jan Kanclirz Jr.

"Microsoft Forefront Security Administration Guide"

For example, the systems administrator
could defi ne a policy that if a remote user does not have the latest version
of the corporate anti-virus solution, the user(s) will not be allowed to upload any
attachment to their mailboxes.
IAG Server simply eliminates the risk of network attacks and operating system
vulnerabilities as it only provides a means to access specifi c applications (or some of
the features only) to approved users from approved machines.
Another notable feature includes the capability to have individual client tools that
can be downloaded to the endpoint, enabling additional features of the portal. (Again,
many of these features require a Windows-based endpoint and browser.)
Some of these features include:
?–  End Point Detection The ability to examine the endpoint??™s anti-virus
checking capabilities. End point detection can work in combination with
policy-based access; that is, a user can be allowed or disallowed to perform
certain functions depending on their endpoint posture.
?–  SSL Wrapper The ability to transport certain network protocols (terminal
services, RPC, terminal emulation) over an SSL connection via port-forwarding
or socket-forwarding models.
?–  Network Connector The ability to enable full networking connectivity
from the client via a bidirectional VPN tunnel. The network connector provides
remote users with a local IP address as if they were directly connected to the
corporate network.


Pages:
309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333