Microsoft 50357 Training

Implementing Forefront Threat Management Gateway (TMG) 2010 (GK Premier)

Implementing Forefront Threat Management Gateway 2010 M50357

Course Title: Implementing Forefront Threat Management

Gateway 2010

Course Code: M50357
Version: A
Level: 300
Duration: 2 Days

Course Overview

The Implementing Forefront Threat Management Gateway 2010 M50357 instructor-led training course has been designed to provide candidates with the skills and knowledge required to envision, design, and deploy web access, remote access and mail protection solutions using Microsoft Forefront Threat Management Gateway 2010 (TMG), enabling them to identify the requirements and make the appropriate design decisions that will come up during the deployment process, and providing hands-on experience with the products.

Target Audience

Candidates who should consider attending the M50357 Microsoft training course include Architects, Consultants, and Technical Sales Professionals involved in designing, deploying, or operating security solutions.

Course Objectives

On successfully completing the M50357 course candidates will be able to:

• Understand the new features and the value proposition for Forefront TMG
• Explain how Forefront TMG protects clients and servers from Web-based threats
• Describe how Forefront TMG enable outside systems to secure connect to internal services and applications
• Describe how Forefront TMG integrates with Forefront Protection 2010 for Exchange and Microsoft Exchange Server 2010 to protect an organisation from mail-based threats
• Design an enterprise solution using Forefront TMG considering availability, scalability, operations, and migration from an existing Microsoft Internet Security and Acceleration (ISA) solution

Course Prerequisites

Candidates attending the M50357 Microsoft training course should have a good understanding of Active Directory and Group Policies plus Windows TCP/IP networking.

Testing and Certification

There are currently no exams or Microsoft Certification directly associated to this course however this course may assist in preparing candidates for other exams that are closely associated with this technology.

Course Content

Module 1: Forefront Threat Management Gateway (TMG) 2010 Overview

In this module candidates will learn about the new features introduced in Forefront TMG 2010, the different deployment scenarios for the product, and introduces the basic concepts used in its configuration.

Lessons:

• Introduction to Forefront TMG
• Installation and Initial Setup
• Basic Configuration Concepts

Lab: Installing Forefront Threat Management Gateway 2010

• Install Forefront TMG on a Windows Server 2008 R2 server
• Perform an initial configuration of Forefront TMG using the Getting Started wizards

After completing this module, candidates will be able to:

• Describe a brief history of the Microsoft edge security products
• Explain the current threat landscape and how this drove changes in the edge security strategy
• List the new features in Forefront TMG and their value propositions
• Describe the key scenarios for Forefront TMG and how it differentiates from Microsoft IAG/UAG
• Describe the SKU differentiation and subscription model
• Explain the installation requirements and install process for Forefront TMG

Module 2: Secure Web Gateway

In this module candidates will learn about the new features introduced in Forefront TMG 2010, and how they can be used to enable users to securely and safely browse the Web.

Lessons:

• Secure Web Gateway Overview
• HTTPS Inspection
• URL Filtering
• Malware Protection
• Intrusion Prevention

Lab: Secure Web Gateway

• Create web access policies for Contoso users, including inspection of HTTPS sessions
• Modify web access policy to include protection from malware
• Investigate the Network Inspection System (NIS)

After completing this module, candidates will be able to:

• Describe the threats affecting enterprise users browsing the Web
• Identify the key Forefront TMG features that address those threats (application proxy, granular access control, malware inspection, URL filtering, HTTPS inspection, NIS), and describe each of these features in detail

Module 3: Remote Access Gateway

In this module candidates will learn how the new features introduced in Forefront TMG 2010 can be used to enable users to securely access corporate network resources from anywhere.

Lessons:

• Remote Access Gateway Overview
• Non-HTTP Server Publishing
• Web Publishing
• Virtual Private Networking (VPN) Connectivity

Lab: Remote Access Gateway

• Use Web Publishing to publish Exchange Web Services

After completing this module, candidates will be able to:

• Understand how Forefront TMG can publish Web and non-Web services to external users
• Explain the security features and benefits added by Forefront TMG in each of these publishing scenarios
• Discuss the new Forefront TMG features for virtual private networking, such as Secure Socket Tunnelling Protocol (SSTP) and Network Access Protection (NAP)

Module 4: Secure Mail Relay

In this module candidates will learn how Forefront TMG 2010 and Forefront Protection 2010 for Exchange Server can work together with Microsoft Exchange Server to provide premium protection from spam and malware.

Lessons:

• Secure Mail Relay Overview
• Solution Components
• Configuring SMTP Protection

Lab: Secure Mail Relay

• Install Active Directory LDS and Exchange Edge Server
• Install Forefront Protection 2010 for Exchange Server
• Install Forefront Threat Management Gateway
• Configure Exchange EdgeSync
• Define an E-mail Policy

After completing this module, candidates will be able to:

• Describe the mail threats facing organisation, and explain what the key Forefront TMG features are that address these threats
• Explain how Forefront TMG and Forefront Protection 2010 for Exchange Server are deployed together for premium antispam and antimalware protection
• Describe in detail how Forefront TMG performs spam filtering, malware filtering, and content filtering
• Describe the implementation process for this scenario and how the solution is configured

Module 5: Forefront TMG 2010 Design and Deployment Considerations

In this module candidates will learn about common deployment scenarios for Forefront TMG 2010, and what to consider when designing Forefront TMG 2010 solutions.

Lessons:

• Logical Design Considerations
• Scalability and Availability
• Client Configuration
• Migration Options

After completing this module, candidates will be able to:

• Review the network, scalability, availability and operational considerations and best practices when designing and deploying a solution based on Forefront TMG
• Identify the best practices when configuring clients to use Forefront TMG
• Describe migration procedures from ISA Server to Forefront TMG, and between the different versions of Forefront TMG

PLEASE NOTE: Every effort has been made to ensure the accuracy of all information contained herein. IT Help and Support Centre Ltd makes no warranty expressed or implied with respect to accuracy of this information, including price, product editorials or product specifications. IT Help and Support Centre Ltd or its suppliers shall not be liable for incidental, consequential or special damages arising from, or as a result of, any electronic transmission or the accuracy of the information contained herin, even if IT Help and Support Centre Ltd has been advised of the possibility of such damages. Product and manufacturer names are used only for the purpose of identification.