Firewall
Endpoint 11 incorporates a rules-based firewall, as well as an anti-malware technique that Symantec calls "generic exploit blocking". The firewall is based on technology developed by Sygate Technologies, who were purchased by Symantec. Generic exploit blocking is a technique that proactively blocks malware from exploiting unpatched vulnerabilities.
Proactive protection
Endpoint 11 uses Symantec's TruScan technologies to facilitate detection of unknown malware. It analyzes both "safe" and "negative" behaviors of unknown applications. It also integrates Symantec's Deepsight honeypot sensors to warn of emerging threats and provide threat advisories. Proactive Threat Protection feature is currently unsupported on server operating systems.
Intrusion prevention
Endpoint 11 is able to create and enforce rules on client computers. For example, it can prevent clients from writing files to a USB flash drive. Intrusion prevention also work as IDS. Policies are enforced by TruScan. The IPS functionality acts as a first line of defence against network based attacks.
Tidak ada komentar:
Posting Komentar