Identifying Test Types For Forefront Systems

As we have discovered from reading the previous chapters, Forefront Security has multiple components. There are many different tools available on the Internet to assist in penetration testing. The ability for anyone to download security tools has made it more important that security suites like Forefront be tested and configured for optimum performance and functionality. Depending on the information gathered during the information gathering stages and what the scope of the penetration tests are, you will want to ensure you have access to the proper applications or have written the scripts needed to conduct the test.

Microsoft Forefront essentially breaks down to a security agent and central management server. Forefront uses Structured Query Language (SQL) as a backend to store agent data, which brings to light that any dependent systems used by Forefront may lead to vulnerabilities in the implementation. If vulnerabilities in dependent systems can be detected and exploited, you may be able to compromise the Forefront Suite.