Symantec Endpoint Protection

Symantec Endpoint Protection Overview

Advanced Threat Protection:

Symantec™ Endpoint Protection combines Symantec AntiVirus™ with advanced threat prevention to deliver an unmatched defense against malware for laptops, desktops, and servers. It provides protection against even the most sophisticated attacks that evade traditional security measures, such as rootkits, zero-day attacks, and mutating spyware.

Symantec Endpoint Protection delivers more than world-class, industry-leading antivirus and antispyware signature-based protection. It also provides advanced threat prevention that protects endpoints from targeted attacks and attacks not seen before. It includes turnkey, proactive technologies that automatically analyze application behaviors and network communications to detect and block suspicious activities, as well as administrative control features that allow you to deny specific device and application activities deemed as high risk for your organization. You can even block specific actions based on the location of the user.

This multilayered approach significantly lowers risks and gives you the confidence that your business assets are protected. It is a comprehensive product that gives you the capabilities you need now, along with the ability to enable the pieces you need, as you need them. Whether the attack is coming from a malicious insider or is externally motivated, endpoints will be protected.

Symantec Endpoint Protection increases protection and helps lower your total cost of ownership by reducing administrative overhead as well as the costs associated with managing multiple endpoint security products. It provides a single agent that is administered by a single management console. This simplifies endpoint security administration and provides operational efficiencies such as single software updates and policy updates, unified and central reporting, and a single licensing and maintenance program.

Symantec Endpoint Protection is easy to implement and deploy. Symantec provides a range of consulting, technical education, and support services that guide organizations through the migration, deployment, and management of the solution and help them realize the full value of their investment. For organizations that want to outsource security monitoring and management, Symantec also offers Managed Security Services to deliver real-time security protection.

Key Benefits:

Secure:

• Comprehensive protection—Symantec Endpoint Protection integrates best-of-breed technologies to stop security threats—even from the most devious new and unknown attackers—before they penetrate the network. It detects and blocks malicious software in real time, including viruses, worms, Trojan horses, spyware, adware, and rootkits.
• Proactive protection—TruScan™ Proactive Threat Scan is a unique Symantec technology used to score both good and bad behaviors of unknown applications, enhancing detection and reducing false positives without the need to create rule-based configurations.
• Industry-best threat landscape intelligence—Symantec protection mechanisms leverage the industry-leading Global Intelligence Network to deliver an unparalleled view of the entire Internet threat landscape. This intelligence results in actionable protection and peace of mind against evolving attacks.

Simple:

• Single agent, single console—A full range of security technologies are integrated into a single agent and a centralized management console, with an intuitive user interface and Web-based graphical reporting. You are able to set and enforce security policies across the enterprise to protect your critical assets. Symantec Endpoint Protection simplifies management, reduces system resource usage, and requires no additional agents when adding Symantec Network Access Control support. Symantec Network Access Control features are automatically enabled on the agent and management console with the purchase of a license.
• Easy to deploy—Because it requires only a single agent and management console and it operates with an organization’s existing security and IT investments, Symantec Endpoint Protection is easy to implement and deploy. For organizations that want to outsource security monitoring and management, Symantec offers Managed Security Services to deliver real-time security protection.
• Lower cost of ownership—Symantec Endpoint Protection delivers a lower total cost of ownership by reducing administrative overhead as well as the costs associated with managing multiple endpoint security products. This unified approach to endpoint security simplifies administration and provides operational efficiencies such as single software updates and policy updates, unified and central reporting, and a single licensing and maintenance program.

Seamless:

• Easy to install, configure, and manage—Symantec Endpoint Protection makes it easy to enable/disable and configure desired technologies to fit into your environment.
• Symantec Network Access Control ready—Each endpoint becomes “Symantec Network Access Control ready,” eliminating the need to deploy additional network access control endpoint agent software.
• Leverages existing security technologies and IT investments—Symantec Endpoint Protection works with other leading antivirus products, firewalls, IPS technologies, and network access control infrastructures. It also works with leading software deployment tools, patch management tools, and security information management tools.
• Integration with Altiris endpoint management solutions—Distributing software packages, migrating older Symantec AntiVirus™ or other antivirus deployments, and viewing new agent rollout status and activity is easier.

Key Features:

More than antivirus:

• Antivirus and antispyware—Provides unmatched, best-of-breed malware protection, including market-leading antivirus protection, enhanced spyware protection, new rootkit protection, reduced memory footprint, and new dynamic performance adjustments to keep users productive.
• Network threat protection—A rules-based firewall engine and Generic Exploit Blocking (GEB) block malware before it can enter a system.
• Proactive threat protection—Providing protection against unseen threats (i.e., zero-day threats), it includes TruScan Proactive Threat Scan, which does not rely on a signature.
• Single agent and single management console—Antivirus, antispyware, desktop firewall, IPS, device and application control, and network access control (with the purchase of a Symantec Network Access Control license) are provided on a single agent—all managed by a single console.

Comparison:

Symantec Endpoint Protection product family
	Symantec Endpoint Protection	Symantec Endpoint Protection Small Business Edition	Symantec Multi-tier Protection
Antivirus
Antispyware
Desktop firewall
Intrusion prevention
Device and application control
Symantec Mail Security for Microsoft Exchange
Symantec Mail Security for Domino
Symantec Mail Security for SMTP

Shaded Area = Centrally managed by a single agent and single console

Documentation:

Download the Symantec Endpoint Protection Datasheet (PDF).