Symantec SEP企业信息终端信息安全方案

1、Symantec SEP企业信息终端信息安全方案Symantec Endpoint Protection系统安全2Power Eraser修复1 个客户端，5层防护3主动积极的防御技术防火墙 & IPS 网络阻止恶意代码传播控制网络流量Antivirus 文件Insight信誉SONAR行为阻断通过网络造成的攻击，社交攻击，针对漏洞的攻击Symantec Endpoint Protection 12.1Power Eraser修复1 个客户端，5层防护4有效防御已知威胁 防火墙 & IPS 网络扫描并阻止恶意代码感染Antivirus文件Insight信誉SONAR 行为阻断病毒、蠕虫、木马、

2、间谍软件、僵尸、root kitsSymantec Endpoint Protection 12.1Power Eraser修复1 个客户端，5层防护5环境感知的智能安全防火墙 & IPS 网络Antivirus文件利用智能网络判断文件和网站的安全性Insight信誉SONAR 行为更积极的防护、更好的性能，基于文件的年龄、流行度、关联性Symantec Endpoint Protection 12.1全球情报网络识别更多的威胁，更快的响应，阻断攻击影响Information ProtectionPreemptive Security AlertsThreat Triggered Action

3、sGlobal Scope and ScaleWorldwide Coverage24x7 Event LoggingRapid DetectionAttack Activity 240,000 传感器 200+ 国家和地区Malware Intelligence 1.33亿个终端端、服务器、网关覆盖全球Vulnerabilities 35,000+ 漏洞 11,000 vendors 80,000 技术Spam/Phishing 5M decoy accounts 8B+ email messages/day 1B+ web requests/dayAustin, TXMountain Vi

4、ew, CACulver City, CASan Francisco, CATaipei, TaiwanTokyo, JapanDublin, IrelandCalgary, AlbertaChengdu, ChinaChennai, IndiaPune, India6更快的智能扫描7信誉优化扫描跳过每一个信誉良好的文件更快的扫描时间传统的扫描要扫描每一个文件7Power Eraser修复1 个客户端，5层防护80-Day 防御精确、复杂的攻击防火墙 & IPS 网络Antivirus文件Insight信誉监控并阻断程序可能危害系统的行为SONAR 行为Symantec Endpoint Pr

5、otection 12.1基于虚拟沙箱，监控并隔离有可疑行为的文件细粒度的控制9Extended Protection with Flexibility and VisibilityTightly control applications through advanced whitelisting and blacklisting 系统锁定Monitor and control applications behavior应用程序控制Restrict and enable access to the hardware that can be used设备控制Ensures endpoints a

6、re protected and compliant 主机完整性Integrated add-ons报告和分析Multi-dimensional analysis, robust graphical reporting, and an easy-to-use dashboardSymantec Endpoint Protection 12.1系统锁定Symantec Endpoint Protection 12.110白名单/黑名单只有批准的程序才能执行支持文件指纹应用程序控制SSE+ Technical Sales Presentation Symantec Endpoint Protect

7、ion 12.1Features阻止、记录日志进程执行控制文件访问控制注册表访问控制DLL加载控制支持自定义内置模板支持特定设备上的应用程序控制WINDOWSsystem3211设备控制移动存储鼠标、键盘扫描仪、打印机自定义Block at the device manager level Class ID: Microsoft定义设备类型Device ID: 只允许使用批准的设备自定义设备的制造厂商、品牌、型号设备控制12SSE+ Protecton Technologies Primer Symantec Endpoint Protection 12.1Class ID: Standard

8、 device (family)13SSE+ Protecton Technologies Primer Symantec Endpoint Protection 12.1Device ID: Custom device14SSE+ Protecton Technologies Primer Symantec Endpoint Protection 12.1主机完整性：准入控制15SSE+ Protecton Technologies Primer Symantec Endpoint Protection 12.1WindowsMACMAC只支持防病毒、IPS、部分主机完整性控制MAC 支持的

9、功能16SSE+ Protecton Technologies Primer Symantec Endpoint Protection 12.1Up to 90% reduction in disk I/O虚拟环境优化17Full protection without sacrificing performanceVMVMVMSVAVMVMVMSVAVMVMVMSVA虚拟机标记虚拟镜像排除共享信誉缓存离线扫描Symantec Endpoint Protection 12.1资源平衡Altiris客户端完整性检查Symantec Endpoint Protection 12.118简单的管理，一

10、个控制台管理所有不同操作系统的客户端19配置策略和资产报告快速查看病毒定义更新状态查看最新的企业安全趋势和情报快速查看终端状态Customize with favorite reportsSymantec Endpoint Protection 12.1Market Leader in Endpoint Protection#1ProtectionDennis Technolgoy Labs #1PerformanceAVT#1IDC Market* ShareA Leader*Gartner MQ&Forrester Wave*Source: Gartner, Inc., Ma

11、gic Quadrant for Endpoint Protection Platforms, January 2014 Forrester Research, Inc., The Forrester Wave: Endpoint Security, Q1 2013IDC Market Share Analysis: Worldwide Endpoint Security 2014-2018 Forecast and 2013 Vendor Shares, August 201420Symantec Endpoint Protection 12.1Consistently Rated as a

12、 Leader in Gartner MQ21Rated as Leader for Past 13 Endpoint Protection Platform MQsSource: Gartner Magic QuadSymantec Endpoint Protection 12.1Rated as The Leader in Most Recent Forrester Wave22Symantec Endpoint Protection 12.1Results:Unrivaled Security23Remediation Score (higher is better)Superior P

13、erformanceSymantec scored the highest for product performance and system impact24July 2014Symantec Endpoint Protection 12.1全面防护恶意代码 5 layers in 1 client面向物理和虚拟化的单一解决方案广泛的平台支持 Win/Mac/Linux第三方评测机构认可 唯一获得 AAA Dennis Labs 的厂商市场领导者: IDC, Gartner, Forrester全球最大的安全情报网络Why Symantec?终端管理26IT 生命周期管理Client Ma

14、nagementSuite过渡和迁移远程帮助和故障排除监控和跟踪业务持续性补丁程序管理映像制作、部署和配置应用程序打包和质量保证软件管理和虚拟化10 报废 准备 生产 客户端查询和清单IT生命周期管理过渡和淘汰解决问题故障和性能监控业务持续性补丁程序管理资产识别合同管理部署和配置应用程序打包和质量保证软件管理审计和 遵从 报废 采购 准备 生产 6Product Summary - Symantec IT Management SuiteIT MANAGEMENT SUITE 7.6Client Management SuiteCLIENT MANAGEMENT SUITE 7.6资产管理部署

15、管理软件分发补丁管理远程管理29EPM Strategy and RoadmapIT Management Suite powered by Altiris technology30IT flexibility. User Freedom.动态洞察 简单的管理和报表最大化生产力快速部署新的设备、新的平台、新的程序无边界的管理安全管理远程用户Whats New in IT Management Suite 7.5?安全管理远程用户Introducing Cloud-Enabled Management安全地管理用户，不管他们有没有连接企业网络用户不需要连接VPN远程用户时刻保持软件和补丁的更新更

16、精确地体现哪些设备在使用以及设备的状态Whats New in IT Management Suite 7.5?31By 2015, over 37% of the global workforce will be mobile*Whats New in IT Management Suite 7.5?32InternalExternalDMZCeMAgentInternetGatewayInternal FirewallExternal FirewallGateway blocks un-trusted connectionsSecure connectionNo VPN requiredN

17、otification Server(SMP)InternetHow does CEM work?最大化生产力系统监控和报警33Monitoring and Alerting集中监控，支持服务器、工作站、网络设备用户直接选择自己关心的对象支持对应用的监控对于硬件的故障也能监控历史监控数据长期保存可做服务器能力分析的依据可以设定策略，针对紧急情况报警及时通知管理员IT budgets continue to be cut requiring IT to work more efficiently33预置监控策略模板5丰富的系统监控策略Unix/Linux IT生命周期管理35支持多种资产管理支持

18、定义资产状态硬件性能稳定性监控382支持Windows、Linux、Mac支持50+ non-Microsoft 应用Patching that Never Sleeps抵御0-day威胁 自动下载部署补丁：基于漏洞的严重性、厂商、补丁类型等自动化变更管理自动化的边锋策略：补丁检查、下载、请求、审批、测试、部署、审计、报告智能补丁管理Whats New in IT Management Suite 7.5?39AcrobatAirFlashIn-DesignReaderShockwaveChromeDesktopEarthPicasaTalkiTunesQuickTimeSafariSingl

19、e Sign-OnVirtual DesktopXenAppXenDesktopMoreBrowsers and moreAOLEMCMozillaOperaRealPlayerRealVNCRIMSkypeSourceForgeSun JavaWinZipYahoo企业级的操作系统部署Whats New in IT Management Suite 7.5?40节约部署成本支持备份支持裸机系统部署支持多种操作系统支持低带宽部署支持断点续传40Whats New in IT Management Suite 7.5?41远程管理远程协助：基于Pcanywhere实时管理：修改密码、重启系统、终

20、止进程、查看系统状态、语音聊天支持录像动态洞察Whats New in IT Management Suite 7.5?42快速视图：使得IT人员可以快速看到需要关注的系统软件分发任务、策略，硬件和操作系统状况Powerful filter creation43List builderRaw SQL validatorCustom criteria灵活搜索、定位、过滤Whats New in IT Management Suite 7.5?Intuitive target managementEdit conditionsView membershipView dependenciesCrea

21、te or import static listsReuse in all policies and tasks资产属主视图Whats New in IT Management Suite 7.5?44什么人使用什么产品、在哪使用、怎么使用 跟踪没有发现的设备建立人与资产的关系视图管理资产状态和成本投入45Whats New in IT Management Suite 7.5?报表Free yourself from the officeIntroducing New iOS Remote Access ConsoleConsistent experience from the iPad t

22、o the ConsoleFast access to device summariesQuickly verify status of policies and tasksRemediate issues, including remote controlDesigned for the technician on the go 7.5 Launch Webcast46Management on the go7.5 Launch Webcast47Remote remediationDevice policy informationSymantec Enterprise Security |

23、 STRONG FRANCHISES48#1 share; AAA ratingnine quarters in a rowEndpoint Security#1 share; 100% uptime with 0.0003% FPs 5 years in a rowEmail Security#1 DLP share;100% of Fortune 100Data Protection#1 share6B certificate lookups/dayTrustServices13B validations every day100% uptime last 5 yearsAuthentic

24、ation & AuthorizationManagedSecurity Services12 Yrs Gartner MQ leader30B logs analyzed/day Copyright 2015 Symantec CorporationSymantec Enterprise Security | UNIQUE VISIBILITY4957M attack sensors in 157 countries175M endpoints182M web attacks blocked last year3.7Trows of telemetry100 Billion more/month9threat response centers500+rapid security response team30% of worlds enterprise email traffic scanned/day1.8 Billion web requestsCopyright 2015 Symantec CorporationSymantec Enterprise Security | PRODUCT STRATEGY50Threat ProtectionENDPOINTSDATA CENTERGATEWAYSAdvanced Threat Prot