|
Security administrators have found that traditional
solutions cannot adequately protect the network as evidenced
by the fact that 75 percent of enterprises will be infected
with financially motivated, targeted malware that evaded
traditional perimeter and host defenses¹. Endpoints are the
likeliest entry point for malware, which can be introduced
from browsing the Internet, installing vulnerable software,
and from removable devices.
Just as crippling to an organization as a network
disruption or outage caused by malware, is the threat of
data leakage:
- Seventy-five percent of Fortune 1000
companies fell victim to accidental
and/or malicious data leakage ²
- Virus attacks, unauthorized access
to networks, lost/stolen laptops and
mobile hardware, theft of proprietary
info or intellectual property accounted
for more than 74 percent of financial
losses ²
- Nearly $5 million is spent on
average per year per organization to
recover lost or stolen corporate data ³
Most data leaks and targeted attacks – inadvertent or
intentional - occur at the endpoint and many of these are
generated internally. Endpoints that are not up-to-date with
patch levels, and unmanaged removable media and applications
are easy targets for data to escape into the wrong hands.
Lumension Security Management Solutions Protect Enterprise Endpoints
Lumension security management software protects against
internal and external threats targeting organizations by
providing the necessary controls to manage the data flowing
to and from network endpoints, and by rapidly patching and
remediating vulnerabilities and enforcing application and
device control policies so that IT assets and sensitive data
are not exposed.
By employing a policy-based framework that mitigates
non-compliant behavior or vulnerabilities before problems
occur, Lumension Security is uniquely capable of ensuring
that desired security levels are consistently and
continuously enforced throughout the enterprise. By using a
proactive approach, Lumension Security solutions provide the
best first and last line of defense to effectively manage
endpoint risk.
Through comprehensive scanning of all network devices and
endpoints, Lumension security management solutions provide
organizations with actionable information of their IT
environments by discovering and inventorying all IT assets,
providing accurate assessments of software vulnerabilities
and configuration issues and prioritizing identified threats
for orderly remediation.
Best First Line of Defense
Enforcing application and device control policies,
Lumension Security solutions protect against targeted
threats by enabling only authorized applications to run and
only authorized devices to be accessible on a network,
server, terminal services server, thin client, laptop or
desktop. Furthermore, the confidentiality and integrity of
sensitive data is ensured by enabling only authorized users
to copy data to removable media and also enforcing
encryption, with complete auditing of that action.
Best Last Line of Defense
Delivering rapid and automated patch and remediation of
software vulnerabilities and configuration issues, Lumension
Security solutions ensure that endpoints remain in
compliance with the organization’s security policies. By
establishing and enforcing mandatory baselines,
organizations can shut the door on vulnerabilities before
they can be exploited.
The final result is a network free of malware and a
significant reduction in data leakage at the endpoint.
Lumension Security Management Solutions for Security Administrators:
- Identifies all software vulnerabilities and configuration issues
- Automates the patch and remediation of vulnerabilities before they can be exploited by threats
- Enforces policies that do not allow known and unknown threats to execute, such as malware, viruses, spyware and zero-day threats
- Controls and monitors the flow of inbound and outbound data
- Identifies organizational security holes in the protection of sensitive information through comprehensive auditing capabilities
- Safeguards the confidentiality, integrity and availability of sensitive data
- Protects against network security breaches where confidential data could be exposed to fraud or where network availability is disrupted
1. Gartner Research, “Gartner’s Top Predictions for IT Organizations and Users, 2007 and Beyond,” Daryl C. Plummer, December 1, 2006
2. 2006 CSI/FBI Computer Crime and Security Survey
3. Ponemon Institute's 2006 Cost of Data Breach Study
|
Security
Management Solutions for the Security Administrator