Blog Post: April 2011 - Technical Rollup Mail - Security

News

Windows Internet Explorer 9 Released to Web Internet Explorer 9 includes several new features that can help protect computers from viruses as well a new feature called Tracking Protection that lets you limit the way that websites track activity as you browse the web. Download Internet Explorer 9 today then get guidance to help you pilot and deploy this enterprise-ready browser in your organization with the Springboard Series for Internet Explorer 9.

Operation b107 - Rustock Botnet Takedown Using the knowledge gained during its takedown of the botnet Waledac just over a year ago, the Microsoft Digital Crimes Unit (DCU) has successfully taken down a larger, more notorious and complex botnet known as Rustock, which had an estimated infection count above one million computers and was capable of sending billions of spam messages per day. Learn more on The Official Microsoft Blog.

Earthquake in Japan: How to Help While Avoiding Donation Fraud When we hear about a disaster like the earthquake in Japan, many of us try to think of ways we can help. Read this Security Tips & Talk blog post for valuable tips you can pass on to your end users to help them avoid online donation scams. Microsoft Security Bulletin Summary for March, 2011 http://www.microsoft.com/technet/security/bulletin/ms11-mar.mspx Security Bulletin Overview for March 2011 Microsoft Security Response Center (MSRC) Blog Post http://go.microsoft.com/?linkid=9683067 Windows Media Video (WMV) http://go.microsoft.com/?linkid=9683068 Windows Media Audio (WMA) http://go.microsoft.com/?linkid=9683069 iPod Video (MP4) http://go.microsoft.com/?linkid=9683070 MP3 Audio http://go.microsoft.com/?linkid=9683071 High Quality WMV (2.5 Mbps) http://go.microsoft.com/?linkid=9683072 Zune Video (WMV) http://go.microsoft.com/?linkid=9683073 Microsoft Product Lifecycle Information Find information about your particular products on the Microsoft Product Lifecycle Web site http://go.microsoft.com/?linkid=9669804 See a List of Supported Service Packs http://go.microsoft.com/?linkid=9669805 Microsoft provides free software updates for security and nonsecurity issues for all supported service packs. Follow the Microsoft Security Response team on Twitter http://go.microsoft.com/?linkid=9739346 @MSFTSecResponse  for the latest information on the threat landscape. Forefront TMG and ISA Server Forefront Security TechCenter http://technet.microsoft.com/en-gb/forefront/default.aspx Please note that if you have feedback on documentation or wish to request new documents - email isadocs@microsoft.com Forefront Threat Management Gateway 2010 homepage http://technet.microsoft.com/en-gb/forefront/ee807302.aspx Forefront TMG (ISA Server) Product Team Blog The ISA Server Product Team Blog (http://blogs.technet.com/isablog/) is updated on a regular basis. Latest entries include: New WIKI Article by Yuri Diogenes??Forefront TMG 2010 Survival Guide? http://blogs.technet.com/b/isablog/archive/2011/02/27/new-wiki-article-by-yuri-diogenes-forefront-tmg-2010-survival-guide.aspx TMG 2010 SP1 and UAG 2010 SP1 are supported on Windows 2008 R2 SP1 http://blogs.technet.com/b/isablog/archive/2011/03/07/tmg-2010-sp1-and-uag-2010-sp1-are-supported-on-windows-2008-r2-sp1.aspx TechNet Webcast: Talk TechNet with Keith Combs and Matt Hester ? Episode 11: Yuri Diogenes on Forefront Threat Management Gateway (Level 200) http://blogs.technet.com/b/isablog/archive/2011/03/15/technet-webcast-talk-technet-with-keith-combs-and-matt-hester-episode-11-yuri-diogenes-on-forefront-threat-management-gateway-level-200.aspx TMG Enhanced NAT ? considerations when using the Default IP Address http://blogs.technet.com/b/isablog/archive/2011/03/17/tmg-enhanced-nat-considerations-when-using-the-default-ip-address.aspx User Activity report for multiple users not working error 0xc0040432 http://blogs.technet.com/b/isablog/archive/2011/03/26/user-activity-report-for-multiple-users-not-working-error-0xc0040432.aspx Forefront Unified Access Gateway & Intelligent Application Gateway 2007 Forefront Unified Access Gateway 2010 Technical Resources http://technet.microsoft.com/en-gb/forefront/edgesecurity/ee907407.aspx For comments, feedback, and requests, contact the Forefront UAG User Assistance team at uagdocs@microsoft.com. Forefront Unified Access Gateway Product Team Blog The UAG Product Team Blog (http://blogs.technet.com/edgeaccessblog) is updated on a regular basis. Latest entries include: No place like HOD http://blogs.technet.com/b/edgeaccessblog/archive/2011/03/15/no-place-like-hod.aspx Forefront Edge on the Wiki The home of community-generated content about Microsoft technologies ? that anyone can edit! Read the latest wiki articles about TMG and UAG. TMG - http://social.technet.microsoft.com/wiki/contents/articles/tags/tmg/default.aspx UAG - http://social.technet.microsoft.com/wiki/contents/articles/tags/UAG/default.aspx Documents Security Tip of the Month: Improving Security Using Attack Surface Analyzer Learn how to use Attack Surface Analyzer, a free tool from Microsoft, to better understand the aggregate attack surface change that may result from the introduction of line-of-business (LOB) applications to the Windows platform. Microsoft Security Compliance Manager The Microsoft Security Compliance Manager (SCM) will help you plan, deploy, operate, and manage your security baselines for the most widely used Microsoft technologies. Learn more about this free tool?which includes security baselines for Windows Server 2008 R2, Microsoft Office 2010, Windows 7, and Internet Explorer8?then check out tips for getting started and answers to frequently asked questions. Infrastructure Planning and Design Guide for Malware Response Looking to limit the risk of malware infection? This new guide can help your organization determine the best and most cost-effective response strategy for malware outbreaks. Learn how your quick decisions can return systems to operation while limiting your exposure then download the guide. Malicious Software Removal Tool Need to check your computers for malware infection? Download the Microsoft Windows Malicious Software Removal Tool. Updated monthly and available in x86 and x64 versions, the tool checks Windows Vista, Windows 7, Windows XP, Windows 2000, and Windows Server 2003 computers for, and helps remove, infections by specific, prevalent malicious software-including Blaster, Sasser, and Mydoom. When the detection and removal process is complete, the tool displays a report describing the outcome including which, if any, malicious software was detected and removed. Getting Started with the SDL Threat Modeling Tool Find tips to help you get started with the Microsoft Security Development Lifecycle (SDL) threat modeling approach and learn how to use the tool to develop great threat models as a backbone of your security process. Available as a free download, the SDL Threat Modeling Tool helps engineers analyze the security of their systems to find and address design issues early in the software lifecycle. Microsoft Baseline Security Analyzer: Frequently Asked Questions Get answers to frequently asked questions about Microsoft Baseline Security Analyzer (MBSA) 2.2 including system requirements, configuration, scanning, and reporting. MBSA 2.2 provides a streamlined method for IT pros to identify missing security updates and common security misconfigurations. Detecting Security Bulletins with the Extended Security Update Inventory Tool The Extended Security Update Inventory Tool is designed to help IT pros identify Microsoft Systems Management Server (SMS) client computers that may need security updates that are not detectable using the existing SMS Security Update Inventory Tool built on MBSA. Virtual Machine Servicing Tool 3.0 Learn how to reduce IT costs by using Virtual Machine Servicing Tool (VMST) 3.0 to more easily update your offline virtual machines, templates, and virtual hard disks with the latest operating system and application patches?without introducing vulnerabilities into your IT infrastructure. Downloads Keeping Enterprise Data Safe with Office 2010 Keeping Enterprise Data Safe with Office 2010 - Office 2010 Security Whitepaper http://www.microsoft.com/downloads/en/details.aspx?FamilyID=4a9e2382-f375-43bf-b5d6-dcf9df5c3e37 Business Intelligence Competency Center (BICC) Core System Documentation: Encoding and Unicode Considerations Describes what you need to know when dealing with Encoding and Unicode in applications built on top of Microsoft solutions. http://www.microsoft.com/downloads/en/details.aspx?FamilyID=4b8c3058-0821-492a-ad3d-5e8ad9a5e9d1 Microsoft Forefront Online Protection for Exchange Service Level Agreement (SLA) This document has been moved. Please update your links and bookmarks with the new location, listed below. http://www.microsoft.com/downloads/en/details.aspx?FamilyID=f5714ed7-f14d-499e-b7d9-3365c9008113 NTFS Chkdsk Best Practices and Performance This document provides best practices for using NTFS Chkdsk. http://www.microsoft.com/downloads/en/details.aspx?FamilyID=35a658cb-5dc7-4c46-b54c-8f3089ac097a QFE Rollup Package 2 for System Center Data Protection Manager 2010 This download fixes issues in Microsoft System Center Data Protection Manager (DPM) 2010 Please read KB article 2465832 for complete information. http://www.microsoft.com/downloads/en/details.aspx?FamilyID=d3fabb18-1adb-4c87-a95d-d3c3826d5bfb Microsoft Exchange Hosted Archive Service Level Agreement (SLA) This document has been moved. Please update your links and bookmarks with the new location, listed below. http://www.microsoft.com/downloads/en/details.aspx?FamilyID=01c1168f-8f59-4746-9b42-f1166bb7142d AD CS Step-By-Step Guide This document describes the steps needed to set up a basic public key infrastructure. http://www.microsoft.com/downloads/en/details.aspx?FamilyID=44315bff-b744-4637-a66b-e69b4955ee45 Update for Windows Mail Junk E-mail Filter [March 2011] (KB905866) Install this update for Windows Mail to revise the definition files that are used to detect e-mail messages that should be considered junk e-mail or that may contain phishing content. http://www.microsoft.com/downloads/en/details.aspx?FamilyID=aa029fde-f341-44fc-8b85-0c6f3d3c2d69 Microsoft� Windows� Malicious Software Removal Tool (KB890830) This tool checks your computer for infection by specific, prevalent malicious software (including Blaster, Sasser, and Mydoom) and helps to remove the infection if it is found. Microsoft will release an updated version of this tool on the second Tuesday of each month. http://www.microsoft.com/downloads/en/details.aspx?FamilyID=ad724ae0-e72d-4f54-9ab3-75b8eb148356 Microsoft� Windows� Malicious Software Removal Tool (KB890830) x64 This tool checks your computer for infection by specific, prevalent malicious software (including Blaster, Sasser, and Mydoom) and helps to remove the infection if it is found. Microsoft will release an updated version of this tool on the second Tuesday of each month. http://www.microsoft.com/downloads/en/details.aspx?FamilyID=585d2bde-367f-495e-94e7-6349f4effc74 March 2011 Security Release ISO Image This DVD5 ISO image file contains the security updates for Windows released on Windows Update on March 11th, 2011. http://www.microsoft.com/downloads/en/details.aspx?FamilyID=ab55654c-c685-4316-93fc-e3a80cccac71 Suite B PKI in Windows Server 2008 This document provides guidance for the planning and implementation of a Microsoft Windows Server 2008 and Windows Server 2008 R2 public key infrastructure (PKI) using Suite B compliant cryptographic algorithms http://www.microsoft.com/downloads/en/details.aspx?FamilyID=6f319ffa-739e-4fe8-bac3-92547baef7a9 Cross-forest Certificate Enrollment with Windows Server 2008 R2.doc This paper explains how cross-forest certificate enrollment works. It also provides deployment guidance for cross-forest certificate enrollment in new and existing Active Directory Certificate Services (AD CS) deployments. http://www.microsoft.com/downloads/en/details.aspx?FamilyID=d408be72-7c74-4b19-a2de-fa11858c30b2 Configuring and Troubleshooting Certification Authority Clustering in Windows Server 2008 and Windows Server 2008 R2 This guide describes how to install, configure, and troubleshoot failover clustering with Active Directory Certificate Services in Windows Server 2008 and Windows Server 2008 R2. http://www.microsoft.com/downloads/en/details.aspx?FamilyID=15c75333-be26-4955-a32c-03077daf1631 Certificate Enrollment Web Services in Windows Server 2008 R2 This paper explains how certificate enrollment Web services work in Windows Server 2008 R2. It also provides deployment guidance for certificate enrollment Web services in new and existing Active Directory Certificate Services (AD CS) deployments. http://www.microsoft.com/downloads/en/details.aspx?FamilyID=28b910f8-6374-48dd-a897-11fff62ab795 Active Directory Certificate Services (AD CS) This download center location contains information related to administering Active Directory Certificate Services (AD CS) http://www.microsoft.com/downloads/en/details.aspx?FamilyID=d9cbaab9-552b-45f0-a8ac-b3cb4009f068 Microsoft SCEP Implementation Whitepaper. This whitepaper provides an overview of Microsoft implementation for SCEP in the Windows Server 2008 R2 http://www.microsoft.com/downloads/en/details.aspx?FamilyID=e11780de-819f-40d7-8b8e-10845bc8d446 Active Directory Certificate Services Upgrade and Migration Guidance This document discusses the planning and implementation of a Windows Server 2008 Active Directory Certificate Services (AD CS) upgrade and migration from an existing Windows public key infrastructure (PKI), including scenarios and step-by-step instruction. http://www.microsoft.com/downloads/en/details.aspx?FamilyID=c70bd7cd-9f03-484b-8c4b-279bc29a3413 Webapps_Webcast_series_Jan_2011_videos Webapps_Webcast_series_Jan_2011_videos http://www.microsoft.com/downloads/en/details.aspx?FamilyID=a33b795b-f529-4a20-9335-ae2281e756cf Microsoft IT CISO Perspective on Cloud Security In this session, you will hear directly from Microsoft?s CISO as he shares his perspective on cloud security. http://www.microsoft.com/downloads/en/details.aspx?FamilyID=d48897ce-e0f5-4bde-a480-c1d6378578b8 Microsoft Forefront Endpoint Protection 2012 Privacy Statement Microsoft Forefront Endpoint Protection 2012 Privacy Statement http://www.microsoft.com/downloads/en/details.aspx?FamilyID=e72065f9-c08d-4c50-b785-b98416b530e3 SharePoint Server 2010 site and content security worksheet Use this worksheet to record inherited and unique permissions, and record which groups need what level of access. http://www.microsoft.com/downloads/en/details.aspx?FamilyID=478a6cdf-8b3c-4b2e-993f-be07715466a6 SharePoint Foundation 2010 site and content security worksheet Use this worksheet to record inherited and unique permissions, and record which groups need what level of access. http://www.microsoft.com/downloads/en/details.aspx?FamilyID=3ce0858d-0d59-4f70-8a55-1e493ea7c742 Events/WebCasts Security Webcast Calendar http://go.microsoft.com/fwlink/?LinkId=37910 Find security webcasts listed in an easy-to-use calendar format. Upcoming Security Webcasts http://www.microsoft.com/events/security/upcoming.mspx Register for the following Webcasts on the link above MSDN Webcast: Security Talk: Using the Attack Surface Analyzer (Level 200) Thursday, April 07, 2011 1:00 P.M.-2:00 P.M. Pacific Time TechNet Webcast: Information About Microsoft April Security Bulletins (Level 200) Wednesday, April 13, 2011 11:00 A.M.-12:00 P.M. Pacific Time On-Demand Security Webcasts http://www.microsoft.com/events/security/ondemand.mspx Visit TechNet Spotlight: www.microsoft.com/technetspotlight Video on Demand, Video Downloads, PowerPoint Presentations, Audio and more A.O.B. This content is for informational purposes only. Microsoft makes no warranties express or implied, as to the information in this document. If you are a customer of Microsoft, please refer to the terms and conditions which cover the provision of support and consulting services to you/your organization.  If you are not corresponding in the course of, or in connection with a Microsoft contract or program with its own terms and conditions, please note that no liability is accepted by Microsoft for the contents of this document.  TRM contributors this month were Paul Devlin and Jonny Sharp

CISCO SYSTEMS COGNIZANT TECH SOLUTIONS COMCAST COMMSCOPE COMMUNICATIONS HOLDINGS