Southern Illinois University

Microsoft Forefront
This page provides information to LAN Admins and staff on Forefront, a Microsoft line of security software. This page includes general information, as well as information regarding the download process for those who are interested.

Please contact the LAN Services team via email at This email address is being protected from spambots. You need JavaScript enabled to view it.  if you have any questions or concerns.


General Information

Microsoft Forefront products protect computer networks, network servers, and individual devices. Windows Client machines are covered under the campus agreement at no additional cost. Forefront can work as a standalone but works best with desktop deployment software SCCM (System Center Configuration Manager). Options to receive alerts and easily change settings are only available in SCCM. IT can also help a department easily use SCCM to deploy Forefront to machines without having to touch a machine, including the uninstall of the McAfee AV. SCCM also can deploy 3^rd party updates to machines. IT highly recommends using Forefront with SCCM. Feel free to email  This email address is being protected from spambots. You need JavaScript enabled to view it. on how to be part of the central SCCM for campus. Future versions of Forefront may require SCCM.

Department Admins should not make the install files available to normal users since Microsoft Security Essentials is to be installed on machines not owned by SIU instead of Forefront. If staff or students ask about having Forefront installed on their personal machines Microsoft Security Essentials should be suggested instead. http://windows.microsoft.com/en-US/windows/products/security-essentials

At least for the initial phase of use neither the SalukiTech or Security will be providing support. You can email  This email address is being protected from spambots. You need JavaScript enabled to view it.  for support.

Under the new Enterprise Campus Agreement Forefront 2010 can be installed on systems running Windows 2003, Windows 2008, and Windows 2008 R2 as a standalone install. Servers can be managed from SCCM with the purchase of a System Center 2012 standard CAL.

System Center Endpoint Protection 2012 will be available for download Sping Semester 2013. 

Department Admins may be asked by IT at different times to give your best estimate on how many machines you take care of have McAfee and how many have Forefront.

For more detailed information on Microsoft Forefront, please visit Microsoft's TechNet site [discusses how Forefront automatically uninstalls McAfee Enterprise].  http://technet.microsoft.com/en-us/library/ff823842.aspx

Download Information

**Note: Once you are at the download site webpage, you will be prompted to login to access the FTP site. For User Name, enter the domain name, AD\ followed by your dawg tag (i.e.: AD\SIU85XXXXXXX). Enter your usual password associated with your dawg tag.



Go back to the Services and Resources page.