Lumension Endpoint Protection™
Proactive Endpoint Protection to Ensure a Trusted Application Environment
Endpoint Protection Business Drivers and Challenges
In today’s economy balancing ease of doing business with endpoint security is a challenge. With the emergence of consumer technology in the workplace, social networking, Web 2.0 technologies and increasingly sophisticated cyber criminals, securing your endpoints is an uphill battle.
Endpoints are no longer bound to an office desk in a controlled environment. Employees install unauthorized and illegal applications on laptops and PCs which can cause increased support calls, performance issues and downtime.
Even authorized users connecting to endpoints with removable media may unknowingly infect the enterprise network with malware. Analysts estimate that 75% of enterprises were infected with financially motivated, targeted malware that evaded traditional perimeter and host defenses¹. Solid endpoint protection requires a proactive approach flexible enough to balance user productivity with enterprise security needs.
1- Gartner Research, “Gartner’s Top Predictions for IT Organizations and Users, 2007 and Beyond,”, Daryl C. Plummer, December 1, 2006
Overview
The Lumension Endpoint Protection solution stops endpoints from becoming a doorway for security threats to enter and sensitive data to escape. Lumension Application Control™, which is the primary component of Lumension Endpoint Protection solution, allows only authorized applications to run, so your endpoints are fully protected from malware and unknown threats.With Lumension Endpoint Protection, operational desktop management is improved by eliminating unnecessary support calls and performance issues that come with managing unauthorized and illegal software. And, you’ll easily demonstrate compliance by enforcing software license compliance, providing a detailed audit trail of all application and device execution attempts, while safeguarding confidential information from being leaked.
Solid endpoint protection requires a proactive approach that is flexible enough to balance user productivity with enterprise security needs. With Lumension Endpoint Protection solution, you can:
- 1. Discover: Identify all executable files and devices, collect profiles and organize into pre-defined file groups.
- 2. Implement: assign permissions for applications to run based on executable, user, or user group attributes. Use an application whitelist approach to ensure that only authorized and legal applications can run on a computer. When a user wants to run an application, the OS request at the kernel level is intercepted by the Lumension driver. If the user has rights, then access will be granted. If the application is not known or the user does not have rights, then access will be denied.
- 3. Monitor: monitor the effectiveness of endpoint security policies in real time and identify potential threats by logging all application execution attempts and recording all policy changes and administrator activities.
- 4. Report: demonstrate policy compliance and ensure software license compliance by drilling down on suspicious behavior for security or legal follow-up.
