Lumension AntiVirus

Overview:

In today’s dynamic threat environment, organizations are challenged with increasing volumes of malware - more than 21 million unique samples have been identified through mid-20091. Much of today’s malware is fueled by financially-motivated cyber criminals trying to gain access to valuable corporate, consumer and/or personal data.

With the enormous variety of malware in the wild today, organizations need an antivirus solution that provides fast and accurate identification of the vast amount of known malware. And with the sophistication of malware continuing to increase daily, organizations need an antivirus solution that employs multiple detection techniques to identify and block unknown malware (e.g. zero-day threats).

Ensure a Defense-in-Depth Approach

To prevent these threats from disrupting operations and potentially stealing data, organizations need strong and comprehensive endpoint protection using complementary solutions on different endpoints depending on their security requirements. By combining the signature-based blacklisting and behavioral malware detection approaches of Lumension AntiVirus with the proactive whitelisting approach of Lumension ® Application Control, a continuum of total endpoint protection for your network is achieved.

Lumension AntiVirus provides:

• Proven technology that incorporates a pioneering and industry-leading proactive anti-malware engine to provide complete protection against all malware such as viruses, Trojans, spyware and adware
• Breadth of technology via traditional signature matching capabilities as well as innovative DNA Matching, SandBox and Exploit Detection technologies
• Complementary solution to other Lumension endpoint protection offerings that when combined delivers proactive protection against targeted and blended attacks needed to safeguard Windows-based endpoints

Key Features

• Full Signature Matching
• Unique Behavioral Analysis
• Comprehensive Cleaning Functionality
• Full Support for Third Party Management Systems
• Scalable with Small Footprint
• Automated Detection of All New Endpoints
• Remote Endpoint Protection
• Automatic Signature Updates
• Easy-to-Use Web-Based Management Console

Key Benefits

• Complements application whitelisting technology for an effective defense-indepth approach »»Combines traditional signature-based protection with unique behavioral analysis
• Prevents known and unknown malicious threats (zero-day exploits) from gaining unauthorized access to systems and data
• Ensures comprehensive clean-up, including rootkit removal
• Fully automated operation, including new endpoint detection, signature updates, and easy-to-use web-based management console

How it Works

1. Assess Use signature-based scanning to identify known malware, including viruses, worms, Trojans, keyloggers, hijackers, rootkits and other malicious software. Use behavioral analysis tools (including DNA Matching, SandBox, and Exploit Detection) to assess suspicious code / applications.

2. Remediate Prevent known malware and suspicious code from executing, and remove it from all network assets.

3. Monitor Use customized triggers to generate alerts (delivered via e-mail, SNMP, SMS, Syslog and/or the operating system’s event log) based on network-wide events (such as a spreading infection). Use Risk Level Indicator on web-based management console to understand overall network “health” and current event/client status of all endpoints.

4. Report Use comprehensive, customizable reporting facility to cover entire network status and any incidents.

Key Features:

Requirements :

Supported Platforms

• Windows® 2000 Professional
• Windows XP
• Windows Vista
• Windows 7
• Windows 2000 Server
• Windows Server 2003
• Windows Server 2008
• Windows Server 2008 R2

Hardware requirements

• Processor: Minimum 1GHz CPU
• Memory: Minimum 512 MB RAM (1GB recommended)
• Disk space: Minimum 300 MB for a network with approximately 100 clients, then 10 MB more for another 100 clients, and so on.

Internet Browsers

• Microsoft® Internet Explorer (IE) 8 and IE 7
• Mozilla® Firefox® 3.x and 2.x

Note: In general, Lumension AntiVirus makes extensive use of memory caching for its data handling. In larger networks, the management console will perform better with more available RAM.

Documentation:

Download the Lumension AntiVirus Datasheet (PDF).