Symantec EndPoint

Symantec Endpoint Protection 11 Symantec Network Access Control 11
Symantec Global Intelligence Network

4 Symantec SOCs
74 Symantec Monitored Countries
40,000+ Registered Sensors in 180+ Countries
8 Symantec Security Response Centers
>6,200 Managed Security Devices
200,000 Millions Millions Hundreds malware of of security threat of submissions MSS reports alerts customers per per month month month 30% of Worlds email Traffic 120 Million Systems Worldwide +per
Advanced Honeypot Network
Dublin, Ireland Tokyo, Japan Calgary, Canada San Francisco, CA Redwood City, CA Santa Monica, CA Twyford, England Munich, Germany Alexandria, VA Taipei, Taiwan
Pune, India
Sydney, Australia
Symantec Endpoint Protection and Symantec Network Access Control
June 2007
Threat Landscape Is Evolving

Percentage of Top 50 Malicious Code
June 2007
Threat Landscape is Evolving

Number of Zero Day threats
June 2007
Causes of Sensitive Data Loss

Cause of Data Losses by Number of Events
Internet Threats, Attacks and Hacks
Violations of Policies
User Errors
0%
10%
20%
30%
40%
50%
ITPolicyCompliance.com Taking Action to Protect Sensitive Data, Feb. 2007

Symantec Endpoint Protection and Symantec Network Access Control June 2007 5
Meet Hal, the IT Administrator
June 2007
Addressing IT Risks & Enabling IT Performance
Interactions
Manage
IT Risk
Information Infrastructure
Maximize
IT Performance
June 2007
Symantec Enterprise Solutions:

A Powerful Combination of Product & Services
SECURITY
IT COMPLIANCE
INFORMATION MANAGEMENT
Manage
IT Risk
Maximize
IT Performance
STORAGE
IT OPERATIONS
BUSINESS CONTINUITY
June 2007
Symantec Endpoint Protection in a Nutshell

Network Access Control Device and Application Control Includes a NAC agent to ensure each endpoint is NACready (Sygate) Adds endpoint compliance to endpoint protection Device control to prevent data leakage at the endpoint (Sygate) Restricts access to registry, files, folders, and processes
Intrusion Prevention
Behavior-based Intrusion prevention (Whole Security)

Network traffic inspection adds vulnerability-based protection Industrys best managed desktop firewall Adaptive policies lead the pack for location awareness Sygate and Symantec Client Security Best anti-spyware, leading the pack in rootkit detection and removal Includes VxMS scanning technology (Veritas) The Worlds leading anti-virus solution More consecutive Virus Bulletin certifications (31) than any vendor
Firewall Antispyware AntiVirus
June 2007
Ingredients for Endpoint Protection

AntiVirus
Worlds leading AV solution Most (32) consecutive VB100 Awards
AntiVirus
June 2007
10

AntiVirus
AV Comparative Feb 2007
Symantec on 100% detection for polymorphic viruses in particular
AntiVirus
June 2007
11

Antispyware
Best rootkit detection and removal Raw Disk Scan for superior Rootkit protection
Antispyware
AntiVirus
Source: Thompson Cyber Security Labs, August 2006
June 2007
12

Firewall
Industry leading endpoint firewall technology
Gartner MQ Leader 4 consecutive years Rules based FW can dynamically adjust port settings to block threats from spreading
Firewall
Antispyware
AntiVirus
June 2007
13

Most Comprehensive IPS capabilities in the industry Generic Exploit Blocking (GEB) one signature to proactively protect against all variants
Proactive Threat Scan
Firewall
Detects 1,000 threats/month not detected by top 4 leading antivirus engines

Very low false positive rate (0.004%)
Only 40 FP for every 1M computers
Antispyware
Antivirus
No set up or configuration required
June 2007
14
Intrusion Prevention System (IPS)

Combined technologies offer best defense
Intrusion Prevention (IPS)
(N)IPS Network IPS

Generic Exploit Blocking
Vulnerability-based (Sigs for vulnerability) Signaturebased (Can create custom sigs, SNORT-like)
(H)IPS Host IPS

Proactive Threat Scan
Behavior-based (Whole Security)
Deep packet inspection
Application Control
Rules-based (System lockdown by controlling an applications ability to read, write, execute and network connections)
=Services Opportunity

Device Control
Prevents data leakage
Device Control
Restrict Access to devices (USB keys, Backup drives) W32.SillyFDC (May 2007)
Firewall
Antispyware
AntiVirus
=Services Opportunity
Ingredient for Endpoint Compliance

Network Access Control

Network access control ready
Device Control
Agent is included, no extra agent deployment Simply license SNAC Server
Firewall
Antispyware
AntiVirus
June 2007
17
Symantec Network Access Control

Ensures endpoints are protected and compliant prior to accessing network resources
1. Reduce IT costs & greater network availability

2. Increased control over unmanaged and managed endpoints 3. Maximize investment of security technologies
June 2007
18
Introducing: Single Agent, Single Console

Results:
Device Control Increased Protection, Control & Manageability
Firewall Reduced Cost, Complexity & Risk Exposure Antispyware
Symantec Endpoint Protection 11.0
Symantec Network Access Control 11.0
AntiVirus
June 2007
19
How do we Lower Cost, Complexity and Risk?

Cost
Lowered system resource demands, smaller footprint Single product, license, support program Operational efficiency Product
Symantec AntiVirus Corporate Edition Symantec Client Security Symantec AntiVirus + Symantec Sygate Enterprise Protection McAfee Total Protection SMB Trend Micro OfficeScan Client Server
Baseline Memory Usage 62 MB 129 MB 72 MB 71 MB 50 MB
Complexity
Fewer consoles and agents allows standardization of technologies
Improved UI suits any size organization
Risk
Includes behavior-based IPS to protect against unknown attacks
Symantec Endpoint Protection 11.0
21???? MB!
Device control helps protect against data loss and intellectual property theft
Average of 84% reduction in memory usage requirements
June 2007
20
Symantec AntiVirus Extended Licensing

Symantec Endpoint Protection Symantec Endpoint Protection Small Business Edition Symantec Multi-tier Protection
Antivirus Antispyware Desktop Firewall Intrusion Prevention Device Control Mail Security
X X X X X
X X X X X X
MS Exchange
X X X X X X
MS Exchange/Domino/SMTP Gateway
Antivirus for Mac and Linux

Symantec Endpoint Protection and Symantec Network Access Control June 2007
21
SNAC Packaging
Enforcement Type Agent Type
Endpoint
(Uses SEP Desktop Firewall)
Gateway
(Appliance)
DHCP
(Appliance/Plug-in)
LAN-802.1x
(Appliance)
Client (Persistent)
On-Demand (Dissolvable)
Agentless (Scanner)
Symantec Network Access Control v11.0
PPP P P P P PP P
June 2007 22
Symantec Network Access Control Starter Edition V 11.0
Symantec Endpoint Back to Table Protection and Symantec Network Access Control
For More Information

www.symantec.com/endpointsecurity
June 2007
23
Thank You!
2007 Symantec Corporation. All rights reserved. THIS DOCUMENT IS PROVIDED FOR INFORMATIONAL PURPOSES ONLY AND IS NOT INTENDED AS ADVERTISING. ALL WARRANTIES RELATING TO THE INFORMATION IN THIS DOCUMENT, EITHER EXPRESS OR IMPLIED, ARE DISCLAIMED TO THE MAXIMUM EXTENT ALLOWED BY LAW. THE INFORMATION IN THIS DOCUMENT IS SUBJECT TO CHANGE WITHOUT NOTICE.
June 2007
24

Symantec EndPoint

Uploaded by

Copyright:

Available Formats

Symantec EndPoint

Uploaded by

Document Information

Original Description:

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Symantec EndPoint

Uploaded by

Copyright:

Available Formats

Symantec Endpoint Protection 11 Symantec Network Access Control 11

Symantec Global Intelligence Network

74 Symantec Monitored Countries

40,000+ Registered Sensors in 180+ Countries

8 Symantec Security Response Centers

>6,200 Managed Security Devices

Advanced Honeypot Network

Symantec Endpoint Protection and Symantec Network Access Control

Threat Landscape Is Evolving

Symantec Endpoint Protection and Symantec Network Access Control

Threat Landscape is Evolving

Symantec Endpoint Protection and Symantec Network Access Control

Causes of Sensitive Data Loss

Internet Threats, Attacks and Hacks

ITPolicyCompliance.com Taking Action to Protect Sensitive Data, Feb. 2007

Meet Hal, the IT Administrator

Symantec Endpoint Protection and Symantec Network Access Control

Addressing IT Risks & Enabling IT Performance

Symantec Endpoint Protection and Symantec Network Access Control

Symantec Enterprise Solutions:

Symantec Endpoint Protection and Symantec Network Access Control

Symantec Endpoint Protection in a Nutshell

Behavior-based Intrusion prevention (Whole Security)

Firewall Antispyware AntiVirus

Symantec Endpoint Protection and Symantec Network Access Control

Ingredients for Endpoint Protection

Symantec Endpoint Protection and Symantec Network Access Control

Ingredients for Endpoint Protection

Symantec Endpoint Protection and Symantec Network Access Control

Ingredients for Endpoint Protection

Symantec Endpoint Protection and Symantec Network Access Control

Ingredients for Endpoint Protection

Symantec Endpoint Protection and Symantec Network Access Control

Ingredients for Endpoint Protection

Proactive Threat Scan

Detects 1,000 threats/month not detected by top 4 leading antivirus engines

No set up or configuration required

Symantec Endpoint Protection and Symantec Network Access Control

Intrusion Prevention System (IPS)

Intrusion Prevention (IPS)

(N)IPS Network IPS

(H)IPS Host IPS

Deep packet inspection

Ingredients for Endpoint Protection

Ingredient for Endpoint Compliance

Network Access Control

Agent is included, no extra agent deployment Simply license SNAC Server

Symantec Endpoint Protection and Symantec Network Access Control

Symantec Network Access Control

1. Reduce IT costs & greater network availability

Symantec Endpoint Protection and Symantec Network Access Control

Introducing: Single Agent, Single Console

Firewall Reduced Cost, Complexity & Risk Exposure Antispyware

Symantec Endpoint Protection 11.0

Symantec Network Access Control 11.0

Symantec Endpoint Protection and Symantec Network Access Control

How do we Lower Cost, Complexity and Risk?

Baseline Memory Usage 62 MB 129 MB 72 MB 71 MB 50 MB

Improved UI suits any size organization