From Authentication and Authorization to ports, firewall rules, and server to server communication, this session goes into depth on a number of topic with further resources on SharePoint Security by Joel Oleson

1. Office SharePoint Server 2007: Security Authentication and Authorization Joel Oleson Sr. Technical Product Manager SharePoint Team

4. SharePoint 2007 Feature Areas Collaboration Business Intelligence Portal Business Forms Search Content Management Platform Services Workspaces, Mgmt, Security, Storage, Topology, Site Model

15. Example Multi-Farm Topology

19. Forefront Security for SharePoint Protection Scenarios Internet Malware Inappropriate Content Extranet Indexing Server Web Front End SQL Back End Malware Inappropriate Content Management Firewall External SharePoint Users Internal SharePoint Users Management

20. Forefront Edge Products: Key Scenarios Remote Access VPN, OWA & SharePoint Publishing Firewall and Forward Proxy Secure Remote Access Internet Access Control & Protection Forefront Edge Security and Access products provide enhanced network edge protection and application-centric, policy-based access to corporate IT infrastructures Branch Offices Protection Features, Caching, HTTP Compression SSL VPN Based Remote Access    

21. Intelligent Application Gateway 2007 IAG provides an easy and secure remote access solution for employees, partners and customers by combining SSL-VPN with application optimization technologies, a Web application firewall, and endpoint security controls. IAG includes a robust and comprehensive end point health security detection mechanism and cache cleanup tailored to the specific application and environments used for access. This allows administrators to publish granular and restricted access to unmanaged machines and extend more comprehensive and rich access from corporate assets . With wizard driven configuration, easy to use policies and a highly intuitive user experience, IAG ensures a fast and easy deployment allowing employees, partners and vendors simple and secure access. Ongoing management and control is simplified via updates to application and endpoint policies. Easy Management and Customization Application Intelligence At the heart of IAG’s is a highly granular and intelligent application firewall that improves security, functionality and performance of most applications. Default policies are in place to address common applications such as SharePoint, Exchange, Terminal Services and policies can easily be created to enhance proprietary line of business applications. Endpoint & Access Security

26. © 2006 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.