Security
Management Solutions for the Security Administrator
Security administrators have found that traditional solutions cannot adequately protect the network as evidenced by the fact that 75 percent of enterprises will be infected with financially motivated, targeted malware that evaded traditional perimeter and host defenses¹. Endpoints are the likeliest entry point for malware, which can be introduced from browsing the Internet, installing vulnerable software, and from removable devices.
Just as crippling to an organization as a network disruption or outage caused by malware, is the threat of data leakage:
- Seventy-five percent of Fortune 1000 companies fell victim to accidental and/or malicious data leakage ²
- Virus attacks, unauthorized access to networks, lost/stolen laptops and mobile hardware, theft of proprietary info or intellectual property accounted for more than 74 percent of financial losses ²
- Nearly $5 million is spent on average per year per organization to recover lost or stolen corporate data ³
Most data leaks and targeted attacks – inadvertent or intentional - occur at the endpoint and many of these are generated internally. Endpoints that are not up-to-date with patch levels, and unmanaged removable media and applications are easy targets for data to escape into the wrong hands.
Lumension Security Management Solutions Protect Enterprise Endpoints
Lumension security management software protects against internal and external threats targeting organizations by providing the necessary controls to manage the data flowing to and from network endpoints, and by rapidly patching and remediating vulnerabilities and enforcing application and device control policies so that IT assets and sensitive data are not exposed.
By employing a policy-based framework that mitigates non-compliant behavior or vulnerabilities before problems occur, Lumension Security is uniquely capable of ensuring that desired security levels are consistently and continuously enforced throughout the enterprise. By using a proactive approach, Lumension Security solutions provide the best first and last line of defense to effectively manage endpoint risk.
Through comprehensive scanning of all network devices and endpoints, Lumension security management solutions provide organizations with actionable information of their IT environments by discovering and inventorying all IT assets, providing accurate assessments of software vulnerabilities and configuration issues and prioritizing identified threats for orderly remediation.
Best First Line of Defense
Enforcing application and device control policies, Lumension Security solutions protect against targeted threats by enabling only authorized applications to run and only authorized devices to be accessible on a network, server, terminal services server, thin client, laptop or desktop. Furthermore, the confidentiality and integrity of sensitive data is ensured by enabling only authorized users to copy data to removable media and also enforcing encryption, with complete auditing of that action.
Best Last Line of Defense
Delivering rapid and automated patch and remediation of software vulnerabilities and configuration issues, Lumension Security solutions ensure that endpoints remain in compliance with the organization’s security policies. By establishing and enforcing mandatory baselines, organizations can shut the door on vulnerabilities before they can be exploited.
The final result is a network free of malware and a significant reduction in data leakage at the endpoint.
Lumension Security Management Solutions for Security Administrators:
- Identifies all software vulnerabilities and configuration issues
- Automates the patch and remediation of vulnerabilities before they can be exploited by threats
- Enforces policies that do not allow known and unknown threats to execute, such as malware, viruses, spyware and zero-day threats
- Controls and monitors the flow of inbound and outbound data
- Identifies organizational security holes in the protection of sensitive information through comprehensive auditing capabilities
- Safeguards the confidentiality, integrity and availability of sensitive data
- Protects against network security breaches where confidential data could be exposed to fraud or where network availability is disrupted
1. Gartner Research, “Gartner’s Top Predictions for IT Organizations and Users, 2007 and Beyond,” Daryl C. Plummer, December 1, 2006
2. 2006 CSI/FBI Computer Crime and Security Survey
3. Ponemon Institute's 2006 Cost of Data Breach Study