Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We're looking to deploy Microsoft Forefront to a number of clients on our network. A number of laptops are outside our domain but do have internet access.

I've read that Forefront can fall back to Windows Update to download the latest definitions if it can't contact the server. How would the reporting work? Would the clients that aren't connected to the domain be able to report the updates to the server?

share|improve this question
up vote 0 down vote accepted

The reporting is handled through a Microsoft Operations Manager agent (or if you're on a newer ForeFront than we've got, a SCCM agent) rather than from ForeFront directly. That communication happens over specific port combinations and aren't relying on domain credentials. So long as that communications channel is still able to be used, reporting will still populate to the reporting server.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.