Microsoft falls further behind on security, identity integration

Client protection software being aligned with Configuration Manager

A week after admitting some phases of its security and identity integration strategy are going slower than planned, Microsoft has hit another snag, this time with its anti-malware software.

The company said Thursday that it’s delaying the release of Forefront Endpoint Protection 2010 (formerly Forefront Client Security) until the second half of 2010. The release of the anti-malware software for Windows desktops and servers had been expected to come in the first half of 2010.

11 security companies to watch

Microsoft said it’s shifting gears and building Forefront Endpoint Protection (FEP) on System Center Configuration Manager, an enterprise tool for evaluating, deploying and updating servers and desktops. Configuration Manager and Operations Manager are the foundations of the System Center portfolio of management products.

The news came via the Forefront Team blog, but the blog entry does not explain how Microsoft plans to “build the product on Configuration Manager.” There are no details on whether that would entail rewriting or redesigning the product or folding it into Configuration Manager.

“It's difficult to discern how much change is necessary to push it into System Center, but having seen the prior product, I'd say it would take a bit of work,” says Tom Henderson, managing director of ExtremeLabs and a member of the Network World Lab Alliance

The Forefront Client Security code was not developed in-house rather it was acquired when Microsoft bought Sybari Systems in 2005. The code evolved from Sybari’s Antigen software lineup.

“The Forefront stuff is likely to be another element of System Center, like SC-VMM [Virtual Machine Manager] or SC-Forefront, is my guess,” Henderson says. “Potentially, System Center becomes the wrapper for the entire Forefront product set, including the miscellaneous application protection components.”

The blog says the move to delay FEP came from customer feedback and market trends, and adds, “We are confident this is the right decision for our customers.”

“They're trying to fortify System Center,” Henderson says. “I think their greatest competition in this space comes from how Symantec's Altiris products have evolved in this space.”

The blog hints that the coming changes may eventually be tricky for end-users.

“We are developing the necessary tools and guidance to facilitate the future upgrade from Forefront Client Security to Forefront Endpoint Protection and will help customers with the migration process,” the Forefront team says in the blog.

In addition, the blog hints a new product might take the place of FEP. “We will provide information about endpoint security management in Forefront Protection Manager at a later time.” Forefront Protection Manager (formerly called Stirling) is a centralized management console for all the Forefront security products. It is slated to ship in early 2010.

The blog goes on to say: “We remain committed to providing integrated management for the Forefront Protection Suite.”

Microsoft has been working on integrating its security and identity products into a layer of defense defined by access and control for its corporate infrastructure software. Microsoft plans to pull together Active Directory, Forefront software and third-party products and tie it all together with the Forefront Protection Manager console.

It’s an ambitious plan the company has been struggling to get on track.

Last week, Bob Muglia, president of Microsoft's server and tools business, said: “It is fair to say that getting this done in non-trivial. It has taken us perhaps a little longer in some areas then we would like, but we are pretty excited about the progress that we are seeing."

But the FEP delay is clearly another setback.

Microsoft plans to continue to sell the predecessor to FEP, called Forefront Client Security, which supports both Windows Server 2008 R2 and the forthcoming Windows 7.

Microsoft says other products in the Forefront suite remain on schedule. Before the end of the year, Microsoft plans to ship Forefront Protection 2010 for Exchange Server, Forefront Online Protection for Exchange, Forefront Threat Management Gateway 2010 and Forefront Unified Access Gateway 2010. In the first half of 2010, Microsoft will ship Forefront Protection 2010 for SharePoint and Forefront Identity Manager 2010.

Follow John on Twitter

Tags securityMicrosoftidentity integration

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

John Fontana

Network World

Comments

Comments are now closed.

Most Popular Reviews

Follow Us

Best Deals on GoodGearGuide

Shopping.com

Latest News Articles

Resources

GGG Evaluation Team

Kathy Cassidy

STYLISTIC Q702

First impression on unpacking the Q702 test unit was the solid feel and clean, minimalist styling.

Anthony Grifoni

STYLISTIC Q572

For work use, Microsoft Word and Excel programs pre-installed on the device are adequate for preparing short documents.

Steph Mundell

LIFEBOOK UH574

The Fujitsu LifeBook UH574 allowed for great mobility without being obnoxiously heavy or clunky. Its twelve hours of battery life did not disappoint.

Andrew Mitsi

STYLISTIC Q702

The screen was particularly good. It is bright and visible from most angles, however heat is an issue, particularly around the Windows button on the front, and on the back where the battery housing is located.

Simon Harriott

STYLISTIC Q702

My first impression after unboxing the Q702 is that it is a nice looking unit. Styling is somewhat minimalist but very effective. The tablet part, once detached, has a nice weight, and no buttons or switches are located in awkward or intrusive positions.

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?