Understanding Network Inspection System 307
Implementing Network Inspection System 309
Implementing Intrusion Detection 323
One of the primary reasons network administrators deploy a firewall or proxy is to reduce the threat of malware by filtering traffic crossing their network borders. Although ISA Server was quite good at evaluating traffic based on application-awareness, it was very limited in its ability to detect malware. In this chapter, you will become familiar with the malware detection functionality provided by Microsoft Forefront Threat Management Gateway (TMG).
Network Inspection System (NIS) is a new traffic analysis mechanism included in TMG. NIS ...