Symantec Endpoint Security
Endpoint Security
More secure. Less complex. Less costs... More control.
Today’s complex threat landscape constantly shifts and changes to accomplish its ultimate goal—to reap fi nancial gain against unsuspecting enterprises.
Professional hackers employ a variety of sophisticated and stealthy measures that target endpoint devices as vehicles to gain unauthorized access to vital data. On their own, traditional defensive methods such as antivirus and antispyware cannot provide complete security for these endpoint devices, which include laptops, desktops, servers, and mobile devices. Symantec redefi nes endpoint security to address today’s changing threat landscape—
coupling proactive best-of-breed endpoint protection and endpoint compliance solutions to deliver more comprehensive security with greater control, at a lower cost, and with less complexity than competing solutions.
Constantly changing threat landscape
The IT threat landscape has changed dramatically over the past few years. Glory-seeking attacks against the masses have been replaced by stealthy, targeted, and fi nancially motivated attacks that exploit vulnerabilities in enterprise endpoints such as laptops, desktops, mobile devices, and servers. To escape detection and discover new points of entry, professional attackers constantly develop new ways to gain unauthorized, undetected, and ongoing access to enterprise systems and information. A primary means for gaining this access is by exploiting both known and unknown vulnerabilities that exist on endpoints.
These targeted and highly sophisticated threats render traditional security solutions ineffective, leaving organizations vulnerable to data theft and manipulation, disruption of business critical services, and damage to corporate brand and reputation. Added to these worries is the increasing threat of “data loss” and insider attacks, not to mention the myriad of security concerns raised by the need to allow guests, contractors, temporary workers, partners, and auditors to access the network.
To address the complete spectrum of today’s complex and changing threat landscape, enterprises have recognized the need to enhance their endpoint security efforts. This has often led to the deployment of multiple endpoint security solutions from multiple vendors, each of which has to be managed from different management consoles. The lack of standardization and integration between these different solutions creates a costly, complex, and disjointed endpoint security environment that is increasingly diffi cult to control and expensive to manage. Furthermore, the inability of these solutions to work together to provide comprehensive endpoint security often results in the creation of signifi cant threat gaps in an enterprise’s security framework.
Through its holistic and comprehensive approach, Endpoint Security solutions from Symantec redefi nes endpoint security to address the needs of the changing threat landscape, while enabling organizations to create a security environment that is easy and cost-effective to manage.
Redefi ning endpoint security
To enable enterprises to combat the full spectrum of endpoint threats that they face in securing their data and networks, Symantec has redefi ned endpoint security—offering best-of-breed endpoint compliance technologies that supplement its best-of-breed endpoint protection technologies.
Symantec delivers endpoint protection that goes far beyond basic antivirus and antispyware methods as it offers proactive protection mechanisms to protect against unknown and emerging threats. Symantec also offers protection specifi cally for server and mobile devices. However, endpoint protection on its own is not enough to secure an enterprise’s endpoints and networks.
To ensure that threats cannot take advantage of vulnerabilities in the way that a device is confi gured, enterprises need to ensure that all endpoints—including onsite employee, remote employee, and guest endpoints—attempting to connect to the network are confi gured according to corporate security policies. Endpoint compliance from Symantec provides an end-to-end network access control solution that ensures all endpoints are in total compliance with established corporate security policies before they can access the production network and its resources, or only a minimal set of resources such as a connection to the Internet. These solutions securely control access to corporate networks based on policy, seamlessly integrate with the enterprise’s existing network infrastructures, and are simple to deploy and manage.
By offering comprehensive endpoint compliance and endpoint protection technologies, Symantec delivers true endpoint security. As one of the fi rst security solutions companies to provide this combination of industry-leading endpoint security offerings, Symantec enables organizations to eliminate the vulnerabilities and threat gaps that exist in their endpoint security strategies.
ENDPOINT PROTECTION
ENDPOINT COMPLIANCE
+
Figure 1
Endpoint security is the combination of endpoint protection with endpoint compliance
4
ENDPOINT SECURITY
Standardizing with market-leading endpoint security solutions
Deploying multiple discrete solutions from multiple vendors to address the wide array of diverse threats that affect endpoint security creates an environment of complexity that is diffi cult and expensive to maintain and manage. Increased complexity can also create threat gaps that are diffi cult to detect and often go unnoticed until it’s too late.
Symantec simplifi es enterprise security management by delivering a set of market- leading complementary solutions to deliver comprehensive endpoint security. In fact, Symantec has even combined many of its market-leading endpoint protection and endpoint compliance technologies into one easy-to-deploy agent that can be easily managed from a single, centralized management console.
Whether it’s for desktop, laptops, mobile devices, or servers, Symantec provides a complete array of solutions that enable organizations to protect a wide array of endpoints against today’s and tomorrow’s threats. Furthermore, allowing enterprises to standardize with a single vendor for all of their endpoint security needs not only reduces complexity, but also reduces costs in licensing, training, support, and overall IT administration.
Holistic approach to endpoint security
With professional hackers targeting multiple entry points with a wide array of different types of threats to gain unauthorized access and control of vital data, enterprises need to take a holistic approach to securing their endpoints. It’s no longer suffi cient to deploy reactive antivirus and antispyware measures. Enterprises need to employ proactive endpoint security measures that have the ability to prevent zero-day attacks and unknown threats. They need to combine both reactive and proactive endpoint protection with comprehensive endpoint compliance measures. And they need to take a structured approach to security that not only protects their network from threats on all levels, but also provides a high degree of interoperability, integration, and ease of management.
The breadth and depth of its endpoint security portfolio enables Symantec to take a holistic approach to endpoint security. Key to this holistic approach is the ability to create, deploy, manage, and report on a comprehensive array of endpoint security activities that encompass both endpoint protection and endpoint compliance. By delivering a complete set of complementary security solutions that work together—including antivirus, antispyware, network threat protection, proactive threat protection, and network access control—Symantec delivers holistic endpoint security to address the full spectrum of endpoint threats in a way that simplifi es endpoint security management efforts and reduces total cost of ownership.
Symantec simplifi es enterprise security management by delivering a set of market-leading complementary solutions to deliver comprehensive endpoint security.
5
To provide protection against the multiple entry points that professional hackers target, Symantec provides solutions specifi cally for desktops and laptops, servers, and mobile devices.
Endpoint protection
Symantec delivers unrivaled endpoint protection for today’s changing threat landscape.
A critical aspect of its endpoint protection offerings is the strength not only in its traditional antivirus and antispyware technologies, but also in its array of integrated network threat protection and proactive threat protection technologies. Additionally, to provide protection against the multiple entry points that professional hackers target, Symantec provides solutions specifi c to desktops and laptops, servers, and mobile devices through its three main endpoint protection offerings.
Symantec™ Endpoint Protection
Symantec Endpoint Protection combines Symantec AntiVirus™ with advanced threat prevention to deliver unmatched defense against malware for laptops, desktops, and servers. This unmatched level of endpoint protection protects enterprises against known and unknown targeted threats, including viruses, worms, Trojans, mutating spyware, adware, rootkits, and zero-day attacks.
This multilayered approach signifi cantly lowers risks and gives organizations the confi dence that their business assets are protected. It’s a comprehensive product that delivers all the capabilities that organizations need to secure their endpoints, but with the ability to enable the pieces of the solution that they need as they need them. Furthermore, all of these essential technologies are provided in one agent that is administered via a single management console.
Symantec™ Mobile Security
To protect against the emerging threats targeting mobile endpoint devices, Symantec™
Mobile Security provides comprehensive protection for mobile devices running Windows Mobile® and Symbian OS™ operating systems. Its on-device, automatic, real-time scanning helps protect against threats downloaded from the Web, sent via email or a Wi-Fi connection, or received via Bluetooth® or infrared ports. Symantec™ Mobile Security Corporate Edition for Symbian OS™ provides even higher levels of protection with its proactive protection and integrated antivirus and fi rewall capabilities.
Symantec™ Critical System Protection
Symantec Critical System Protection provides proactive host intrusion prevention to guard against threats that specifi cally target enterprise servers. Its proactive endpoint defenses employ exploit prevention, endpoint controls, and security monitoring and auditing to ensure server integrity and compliance across heterogeneous platforms.
Its centralized console enables administrators to confi gure, deploy, and monitor security policies on a mix of server platforms throughout the enterprise. The console also makes it easy for administrators to quickly respond to alerts, as well as run reports on system activity.
7
Improved security
Eliminates threat gaps and addresses the vast spectrum of known and unknown attacks that comprise the ever-changing threat landscape for desktops, laptops, servers, and mobile devices.
Decreased complexity
Delivers a complementary set of endpoint security solutions that improve security, simplify deployment, and facilitate overall management.
Decreased costs
Eliminates the need to purchase overlapping technology licenses, and reduces training, support, and management expenses as a result of vendor standardization.
Benefi ts of Symantec Endpoint Security
Increased control
Gives IT administrators complete control over which endpoints can and cannot access an enterprise network, and improves their overall ability to manage their deployed endpoint security technologies.
Consistent enforcement
Ensures that endpoint security policies are consistently enforced across the entire enterprise.
Through its coupling of endpoint protection and endpoint compliance solutions, Symantec enables enterprises to realize:
Symantec endpoint security solutions deliver unmatched, comprehensive endpoint security that enables enterprises to address the full spectrum of endpoint threats against their desktops, laptops, servers, and mobile devices.
Endpoint compliance
The managed state of an enterprise’s individual endpoints plays a critical role in the overall security and availability of its IT infrastructure and related business operations.
The new wave of sophisticated crimeware not only targets specifi c companies, but it also targets desktops and laptops as backdoor entryways into those enterprises’ business operations and valuable resources. Further escalating the threat is the fact that enterprises must also deal with growing user populations that, in addition to regular onsite employees, include remote employees, short-term employees, guests, contractors, and
other temporary workers. Symantec™ Network Access Control and Symantec™ On-Demand Protection combine to enable organizations to address these growing threats.
Symantec™ Network Access Control
Symantec Network Access Control enables organizations to ensure the proper confi guration and security state of user endpoints—including those of onsite employees, remote employees, guests, contractors, and temporary workers—before they are allowed to access resources on the corporate network. It discovers and evaluates endpoint compliance status, provisions the appropriate network access, and provides remediation capabilities to ensure endpoint security policies and standards are met. Symantec Network Access Control easily integrates with any network infrastructure, making its implementation more comprehensive, faster to deploy, easier to manage, and more cost-effective than competing solutions.
To provide enterprises with the most comprehensive and fl exible levels of protection available, Symantec Network Access Control offers three different evaluation technologies for assessing the state of endpoints attempting to access the network: persistent agents, dissolvable agents, and a remote vulnerability scanner. Symantec Network Access Control also gives enterprises the fl exibility they need to easily integrate multiple enforcement methods into their existing environment without increasing operational complexity, management, and maintenance overhead. Enforcement options include LAN, DHCP, and Gateway enforcement methods along with a host-based self-enforcement solution that provides the easiest and fastest enforcement deployment option, since it does not require the deployment of a network-based enforcement solution. Symantec also offers a Symantec Network Access Control Starter Edition option to help companies easily and quickly begin a network access control implementation.
Symantec™ On-Demand Protection
Symantec On-Demand Protection prevents the loss of enterprise data—such as company fi nancials, customer information, and intellectual property—caused by unmanaged devices such as home computers, kiosks, and guest laptops gaining unprotected network access through Web-enabled applications (e.g., Webmail), SSL VPNs, and wireless LANs. Symantec eliminates the exposures caused by unmanaged devices by delivering an On-Demand agent that adapts its policies to the environment. The Symantec On-Demand Protection agent integrates endpoint security technologies that ensure compliance with security policies, prevent unauthorized data transfer, and protect confi dential information.
9
Symantec™Global Intelligence Network
Endpoint security from Symantec is backed by the Symantec Global Intelligence Network, an integrated service that provides customers with the critical intelligence needed to reduce security risks, improve regulatory compliance, and strengthen their overall security posture. Symantec Global Intelligence Services provide insight into the latest global, industry, and local threats and attacks so an organization can respond proactively to emerging threats.
Symantec Global Services
To provide customers assistance and guidance on how to best deploy, manage, and maximize the benefi ts and features provided by Symantec endpoint security solutions, Symantec Global Services provides a wide range of consulting, technical education, and support services. Symantec Enterprise Support Services has three levels of protection designed to meet the needs of the small business or the large enterprise. Symantec Education has a portfolio of training courses designed to get users and administrators up to speed quickly. Symantec Consulting Services starts with antivirus deployment and migration assistance and can provide Residency Services, where Symantec Consultants work side by side with customers’ IT staff, or Operational Services, where the entire endpoint security function can be outsourced to Symantec—the security experts.
Unmatched, simplifi ed, and comprehensive endpoint security
Symantec endpoint security solutions empowers enterprises to take the holistic approach needed to combat the sophisticated, stealthy, and targeted attacks that plague today’s changing threat landscape. It redefi nes endpoint security by offering endpoint protection and endpoint compliance technologies to deliver comprehensive security for their endpoints. It reduces the complexities and costs associated with endpoint security by enabling organizations to standardize with market-leading solutions that work together to improve security, reduce total cost of ownership, and ease management efforts. Symantec endpoint security solutions delivers unmatched, comprehensive endpoint security that enables enterprises to address the full spectrum of endpoint threats against their desktops, laptops, servers, and mobile devices.
10
Symantec is a global leader in infrastructure software, as well as endpoint security, enabling businesses and consumers to have confi dence in a connected world. It has the industry’s deepest portfolio of security solutions to help organizations protect endpoint systems and corporate information from a broad spectrum of internal and external security risks. Symantec helps customers protect their infrastructure, information, and interactions by delivering software and services that address risks to security, availability, compliance, and performance.
About Symantec
Symantec is a global leader in infrastructure software, enabling businesses and consumers to have confi dence in a connected world.
The company helps customers protect their infrastructure, information, and interactions by delivering software and services that address risks to security, availability, compliance, and performance. Headquartered in Cupertino, California, Symantec has operations in 40 countries.
More information is available at www.symantec.com.
For specifi c country offi ces and contact numbers please visit our Web site. For information in the U.S., call toll-free 1 800 745 6054.
Symantec Corporation World Headquarters
20330 Stevens Creek Boulevard Cupertino, CA 95014 USA 1 408 517 8000
1 800 721 3934 www.symantec.com
Copyright © 2007 Symantec Corporation. All rights reserved. Symantec and the Symantec logo are trademarks or registered trademarks of Symantec Corporation or its affi liates in the U.S. and other countries. Other names may be trademarks of their respective owners.
07/07 12098908
