Lumension AntiVirus

Overview:

In today’s dynamic threat environment, organizations are challenged with increasing volumes of malware - more than 21 million unique samples have been identified through mid-20091. Much of today’s malware is fueled by financially-motivated cyber criminals trying to gain access to valuable corporate, consumer and/or personal data.

With the enormous variety of malware in the wild today, organizations need an antivirus solution that provides fast and accurate identification of the vast amount of known malware. And with the sophistication of malware continuing to increase daily, organizations need an antivirus solution that employs multiple detection techniques to identify and block unknown malware (e.g. zero-day threats).

Ensure a Defense-in-Depth Approach

To prevent these threats from disrupting operations and potentially stealing data, organizations need strong and comprehensive endpoint protection using complementary solutions on different endpoints depending on their security requirements. By combining the signature-based blacklisting and behavioral malware detection approaches of Lumension AntiVirus with the proactive whitelisting approach of Lumension ® Application Control, a continuum of total endpoint protection for your network is achieved.

Lumension AntiVirus provides:

• Proven technology that incorporates a pioneering and industry-leading proactive anti-malware engine to provide complete protection against all malware such as viruses, Trojans, spyware and adware
• Breadth of technology via traditional signature matching capabilities as well as innovative DNA Matching, SandBox and Exploit Detection technologies
• Complementary solution to other Lumension endpoint protection offerings that when combined delivers proactive protection against targeted and blended attacks needed to safeguard Windows-based endpoints

Key Features

• Full Signature Matching
• Unique Behavioral Analysis
• Comprehensive Cleaning Functionality
• Full Support for Third Party Management Systems
• Scalable with Small Footprint
• Automated Detection of All New Endpoints
• Remote Endpoint Protection
• Automatic Signature Updates
• Easy-to-Use Web-Based Management Console

Key Benefits

• Complements application whitelisting technology for an effective defense-indepth approach »»Combines traditional signature-based protection with unique behavioral analysis
• Prevents known and unknown malicious threats (zero-day exploits) from gaining unauthorized access to systems and data
• Ensures comprehensive clean-up, including rootkit removal
• Fully automated operation, including new endpoint detection, signature updates, and easy-to-use web-based management console

How it Works

1. Assess Use signature-based scanning to identify known malware, including viruses, worms, Trojans, keyloggers, hijackers, rootkits and other malicious software. Use behavioral analysis tools (including DNA Matching, SandBox, and Exploit Detection) to assess suspicious code / applications.

2. Remediate Prevent known malware and suspicious code from executing, and remove it from all network assets.

3. Monitor Use customized triggers to generate alerts (delivered via e-mail, SNMP, SMS, Syslog and/or the operating system’s event log) based on network-wide events (such as a spreading infection). Use Risk Level Indicator on web-based management console to understand overall network “health” and current event/client status of all endpoints.

4. Report Use comprehensive, customizable reporting facility to cover entire network status and any incidents.

Key Features:

 

Full Signature Matching Capabilities	Recognizes, blocks and removes viruses, worms, Trojans and other types of malware such as keyloggers, hijackers and rootkits.
Unique Behavioral Analysis using multiple methods including DNA Matching, SandBox, and Exploit Detection	Protects against new and unknown malware (zero-day exploits) to assess suspicious code / applications, keeping your network, endpoints and organization resistant to the daily influx of newborn and/or polymorphic malware.
Comprehensive Cleaning Functionality	Ensures that any detected malware is removed or quarantined and not allowed to remain on network assets.
Full Support for Third-Party Management Systems	Supports email, SNMP, SMS, Syslog, Event log with logging, reporting and alerting capabilities to provide necessary visibility into event.
Scalable with Small Footprint	Optimizes system resources to let organizations of all sizes conduct operations without disruptions.
Automated Detection of All New Endpoints	Searches the network to detect and report new and unknown devices in the environment.
Remote Endpoint Protection	Ensures that all endpoints are protected regardless of connectivity to internal network.
Automatic Signature Updates	Allows for automated, attendant-free operation, reducing administrative overhead and improving TCO.
Easy-to-Use Web-Based Management Console	Includes powerful policy-based engine for easy endpoint deployment throughout your infrastructure, with a built-in policy tool.

Requirements :

Supported Platforms

• Windows® 2000 Professional
• Windows XP
• Windows Vista
• Windows 7
• Windows 2000 Server
• Windows Server 2003
• Windows Server 2008
• Windows Server 2008 R2

Hardware requirements

• Processor: Minimum 1GHz CPU
• Memory: Minimum 512 MB RAM (1GB recommended)
• Disk space: Minimum 300 MB for a network with approximately 100 clients, then 10 MB more for another 100 clients, and so on.

Internet Browsers

• Microsoft® Internet Explorer (IE) 8 and IE 7
• Mozilla® Firefox® 3.x and 2.x

Note: In general, Lumension AntiVirus makes extensive use of memory caching for its data handling. In larger networks, the management console will perform better with more available RAM.

Documentation:

Download the Lumension AntiVirus Datasheet (PDF).