Developers: | Symantec |
Last Release Date: | November, 2013 |
Technology: | Cybersecurity - Antiviruses, Firewall |
Content |
The solution for protection of endpoints of Symantec Endpoint Protection includes tools for protection against viruses and programs spies, the firewall, an intrusion prevention system, functionality of control of devices and applications and also additional function of access control to network. Such complex approach provides unsurpassed protection of notebooks, workstations and servers against the malware. In one agent and the Symantec Endpoint Protection single console necessary security technologies organically integrate that increases the level of protection of a system and reduces total cost of ownership.
For ensuring protection of endpoints in the conditions of constantly becoming complicated IT infrastructure of the organizations, virtualization of working environments and use by employees of proprietary applications and technologies on working computers, Symantec continuously increases technology efficiency and performance of the solutions for protection of endpoints. During a series of tests, decisions for protection of corporate computer systems passed by PassMark Software company for assessment, Symantec Endpoint Protection bypassed all competitive solutions.
2019: Symantec Endpoint Protection 14 causes failure in work of Chrome 78
On October 25, 2019 it became known that anti-virus software Symantec Endpoint Protection (SEP) 14 causes failure in work browser Google Chrome 78, released, on October 22, 2019. In more detail here.
2014
Adding of Insight, SONAR, Network Threat Protection and Device and Application Control technologies
For effective protection of endpoints of the organization should adopt the strategy of "deep defense". So, the solution Symantec Endpoint Protection includes Insight technologies (protection on the basis of reputation) and SONAR (protection on the basis of behavior) and also technologies of protection against network threats (Network Threat Protection) and technology of device management and applications (Device and Application Control) together with traditional methods of antivirus protection. It creates several reliable layers of protection allowing to catch threats which traditional solutions miss at once.
Symantec Insight analyzes each file in terms of its novelty, a source, extent of distribution and assigns it certain score, giving to the companies the chance to easily block files proceeding from a threshold of risk level and reputation of the file. SONAR is a key component of technology of protection of Symantec on the basis of behavior. A system analyzes behavior of the application and defines what in fact does this application (but not on what it is similar) and also provides the effective, not preventing work protection methods against zero day attacks new, unknown earlier. Symantec Network Threat Protection analyzes the traffic which is logging in and blocks threats before they manage to infect it.
For 2013 more than 51% of all threats neutralized by products of Symantec company were neutralized by means of these three pro-active, not signature technologies.
Servers are a special type of systems with the specific requirements. The product Symantec Critical System Protection is directed to a covering of these requirements, combining hostovy detection systems (HIDS) and prevention (HIPS) of invasions and also applying the principle of providing the minimum rights that allows the organizations to protect actively diverse server environments and information which is stored there. Both Symantec Endpoint Protection, and Symantec Critical System Protection are ideal for protection of physical and virtual environments.
The leader in "a magic quadrant" of Gartner
January 28, 2014 – The Symantec Corporation announced that Gartner Inc company. in the Magic quadrant once again gave it the place of the leader in the field of Endpoint Protection Platforms (EPP) – a position which Symantec holds for already 12 years. The report of Magic Quadrant 2014 was published on January 8; the first place in this rating and also positive estimates of Symantec as supplier is an indicator that the company proposes reliable solutions which well prove in the field of recognition of threats, protection and performance.
2013: Symantec Endpoint Protection 12.1.4
For improvement of security of client computers the Symantec company built in advanced technology of protection against network threats for the Mac platform upgraded version of the solution Symantec Endpoint Protection 12.1.4.
Description
Many users of Mac computers mistakenly believe - their computers are not subject to the attacks and therefore they show consideration for questions of protection insufficiently. But such relation turns users of Mac into "tidbit" for malefactors.
According to information for November, 2013 the Symantec Network Threat Protection technology provides interception of the entering network traffic before he manages to make impact, reveals exploits and automatically blocks them. The intrusion prevention system is IPS, the level of protocols and level of applications – it is capable to detect and block not only known, but also still the unknown threats including using vulnerabilities of zero day.
2012: Symantec Endpoint Protection 12.1
On May 28, 2012 the Symantec corporation announced obtaining the FSTEC certificate on the solution for protection of the workstations and other devices connected to an information network, Symantec Endpoint Protection 12.1 on the 4th level of control of not declared opportunities (NDV) and the specifications (S) that allows to use the solution for information system protection of personal data (ISPDN) to 1 class inclusive.
Symantec Endpoint Protection 12.1 is the newest version of the solution of a corporate class for a comprehensive protection of endpoints (desktop computers, notebooks, servers, terminals, etc.). Unlike other systems of a similar class, the technology of Symantec works with the most powerful database which contains information on reputation more than 3 billion files accumulated for several years of system operation on computers of users of the products Norton. Thanks to this reputation Insight technology detects new and unknown threats which cannot be revealed by other methods, and at the same time considerably saves computing resources of a system, increasing performance on average by 70%. Besides, in version 12.1 considerable optimization for effective system operation in virtual environments was also added.
2011
Symantec Endpoint Protection 12
Control of behavior and reputation of local applications, web applications and the opened websites of general purpose provides excellent protection of each terminal terminal in the organization. Also in the new version of a packet of Endpoint Protection the increased performance and also support of virtual environments and "cloud" protection for blocking of threats still is offered to customers significantly before they approach borders of corporate network.
The corporate Insight technology for "cloud" control of reputation became one of fundamental blocks of the updated packet of Symantec Endpoint Protection 12 for the first time – this technology helps to protect client PCs, revealing and blocking a malicious code on the basis of the huge database including samples more than 2.5 billion unique executable files.
Except Insight technology in a packet of Endpoint Protection 12 one more corporate technology under the name Sonar 3 is applied - it is the hybrid mechanism of blocking of programs for behavior and reputation. The Sonar 3 technology allows to block not studied threats – instead of the traditional analysis of files on a signature the analysis of behavior of each separate fragment of the code is used.
Important crucial element of protection which is provided by a packet of Symantec Endpoint Protection 12 is the high performance and transfer of a part of functions to "cloud" – it provides up to 70% of cost reduction of internal computing resources of the customer for security. According to representatives of Symantec, traditionally antiviruses consume many resources as execute complete check "completely". Insight and Sonar technologies in a packet of Endpoint Protection 12 allow to reduce scanning range to execute check quicker and less often. For example, check can be executed only during those periods when the PC is in standby mode.
The packet of Endpoint Protection 12 is optimized for use in the virtualized environments. In particular, virtual machines on one physical server are never scanned at the same time not to reduce overall performance.
Especially for less big customers the Symantec company for the first time released edition Small Business Edition of a packet of Endpoint Protection 12. The structure of this editorial office includes the convenient master of installation, a ready set of security policies and also the automated mechanism of sending notifications and reports generation – these tools will be especially useful to the organizations with limited IT resources.
Passing of Symantec Endpoint Protection 11 of certification to FSTEC of Russia
In May, 2011 the software tool of data protection Symantec Endpoint Protection 11 successfully underwent certification in FSTEC of Russia. The carried-out certification confirmed that the software of Symantec Endpoint Protection (version 11.0.5) is the software tool of data protection from unauthorized access and conform to requirements of the regulating document "Protection against unauthorized access to information. Part 1. Information security software. Classification by the level of absence control of not declared opportunities" (State Technical Commission of Russia, 1999) – on the 4th level of control and the specification.
Certification tests were carried out by NGO Echelon Ltd company which is accredited as testing laboratory Russian Defense Ministry, FSB of Russia and FSTEC of Russia and also one of the few companies accredited by FSTEC of Russia as certification body. The carried-out certification of products of Symantec added a portfolio of the successful projects of NGO Echelon Ltd company in the field which found reflection in more than 300 certificates on information security tools and the software.
In the sector of leaders in "a magic quadrant" of Gartner
On February 9, 2011 Symantec announced that the Gartner company placed it in the sector of Leaders in the report "2010: A magic quadrant according to platforms for protection of endpoints".