Introduction to Security and Compliance

Exploiting security vulnerabilities

• Common e-mail hacking methodologies
• Exploring SMTP fundamentals
• Defending against SMTP attacks
• Utilising tarpitting to thwart directory harvest attacks
• Logging activities to identify hackers
• Analysing The Trustworthy Computing Initiative from Microsoft and its relationship to Exchange

Meeting your e-mail compliance needs

• Investigating regulatory requirements
• Selecting the best compliance methods

Hardening your Internal Server Configuration

Reducing vulnerabilities from within your organisation

• Strengthening Exchange with service packs and security updates
• Delegating with the principles of least privilege
• Auditing administrative actions with event logging for accountability
• Creating security templates with the Security Configuration Wizard
• Ensuring consistent security settings across the Exchange organisation

Protecting e-mail in transit

• Defining Transport Layer Security (TLS) architecture and best practices
• Securing your infrastructure in a mixed environment with legacy Exchange servers
• Analysing network traffic for suspicious activity with Intrusion Detection Systems (IDS)
• Utilising transport rules to organise messages

Safeguarding Servers from External Threats

Minimising SMTP transport risk

• Deploying message and connection filtering to reject unwanted e-mail
• Utilising Microsoft Forefront as an anti-virus solution
• Implementing non-Microsoft message hygiene solutions

Creating a protective perimeter network

• Leveraging firewalls to publish client access servers securely
• Shielding Exchange from direct Internet access with Microsoft ISA Server

Maximising E-Mail Security

Demystifying digital encryption

• Fundamentals of Public Key Infrastructure (PKI)
• Communicating securely outside your organisation with trusted Certification Authorities (CA)

Integrating certificates with Outlook

• Implementing certificates for secure messaging in Outlook
• Encrypting and signing e-mail with Outlook
• Verifying sender identity and message authenticity with digital signatures
• Ensuring message confidentiality with digital encryption

Controlling e-mail content

• Setting up a Rights Management Server (RMS)
• Configuring Rights Management policies to limit the actions of users
• Capitalising on Rights Management features in Outlook
• Performing a cross mailbox search

Simplifying E-Mail Compliance

Exchange built-in compliance components

• Configuring e-mail journaling
• Journaling all messages to meet industry regulations
• Fine-tuning managed folders to meet message retention requirements
• Controlling e-mail life cycle with managed folders
• Exploiting transport rules to categorise and redirect messages
• Leveraging the improved search capabilities of Outlook and Exchange

Incorporating external solutions

• Integrating SharePoint with Exchange for long-term storage and classification of messaging data
• Interoperating with third-party products to simplify compliance administration