Data Sheet: Endpoint Security
Symantec™ Endpoint Protection
The next generation of antivirus technology from Symantec
Overview and provides operational efficiencies such as single software
Advanced threat protection updates and policy updates, unified and central reporting,
Symantec™ Endpoint Protection combines Symantec and a single licensing and maintenance program.
AntiVirus™ with advanced threat prevention to deliver an
Symantec Endpoint Protection is easy to implement and
unmatched defense against malware for laptops, desktops,
deploy. Symantec provides a range of consulting, technical
and servers. It provides protection against even the most
education, and support services that guide organizations
sophisticated attacks that evade traditional security
through the migration, deployment, and management of
measures, such as rootkits, zero-day attacks, and mutating
the solution and help them realize the full value of their
spyware.
investment. For organizations that want to outsource
Symantec Endpoint Protection delivers more than security monitoring and management, Symantec also offers
world-class, industry-leading antivirus and antispyware Managed Security Services to deliver real-time security
signature-based protection. It also provides advanced threat protection.
prevention that protects endpoints from targeted attacks
and attacks not seen before. It includes turnkey, proactive Single Agent
Results
and Single Console
technologies that automatically analyze application
behaviors and network communications to detect and Antivirus
block suspicious activities, as well as administrative Increased
Antispyware protection, control,
control features that allow you to deny specific device and manageability
Firewall
and application activities deemed as high risk for your
Intrusion Prevention Reduced cost,
organization. You can even block specific actions based on complexity, and
Device and risk exposure
the location of the user. Application Control
This multilayered approach significantly lowers risks and
gives you the confidence that your business assets are A unified approach to endpoint protection
protected. It is a comprehensive product that gives you the
capabilities you need now, along with the ability to enable
Key benefits
the pieces you need, as you need them. Whether the attack
Secure
is coming from a malicious insider or is externally motivated,
Comprehensive protection—Symantec Endpoint
endpoints will be protected.
Protection integrates best-of-breed technologies to stop
Symantec Endpoint Protection increases protection and security threats—even from the most devious new and
helps lower your total cost of ownership by reducing unknown attackers—before they penetrate the network. It
administrative overhead as well as the costs associated with detects and blocks malicious software in real time, including
managing multiple endpoint security products. It provides viruses, worms, Trojan horses, spyware, adware, and
a single agent that is administered by a single management rootkits.
console. This simplifies endpoint security administration
Page 1 of 5 Confidence in a connected world.
Data Sheet: Endpoint Security
Symantec™ Endpoint Protection
Proactive protection—TruScan™ Proactive Threat Scan is approach to endpoint security simplifies administration and
a unique Symantec technology used to score both good and provides operational efficiencies such as single software
bad behaviors of unknown applications, enhancing detection updates and policy updates, unified and central reporting,
and reducing false positives without the need to create rule- and a single licensing and maintenance program.
based configurations.
Seamless
Industry-best threat landscape intelligence—Symantec Easy to install, configure, and manage—Symantec
protection mechanisms leverage the industry-leading Global Endpoint Protection makes it easy to enable/disable and
Intelligence Network to deliver an unparalleled view of the configure desired technologies to fit into your environment.
entire Internet threat landscape. This intelligence results in
Symantec Network Access Control ready—Each endpoint
actionable protection and peace of mind against evolving
becomes “Symantec Network Access Control ready,”
attacks.
eliminating the need to deploy additional network access
Simple control endpoint agent software.
Single agent, single console—A full range of security
Leverages existing security technologies and IT
technologies are integrated into a single agent and a
investments—Symantec Endpoint Protection works with
centralized management console, with an intuitive user
other leading antivirus products, firewalls, IPS technologies,
interface and Web-based graphical reporting. You are able
and network access control infrastructures. It also works
to set and enforce security policies across the enterprise to
with leading software deployment tools, patch management
protect your critical assets. Symantec Endpoint Protection
tools, and security information management tools.
simplifies management, reduces system resource usage,
and requires no additional agents when adding Symantec Integration with Altiris endpoint management
Network Access Control support. Symantec Network Access solutions—Distributing software packages, migrating older
Control features are automatically enabled on the agent and Symantec AntiVirus™ or other antivirus deployments, and
management console with the purchase of a license. viewing new agent rollout status and activity is easier.
Easy to deploy—Because it requires only a single agent and
management console and it operates with an organization’s Key features
existing security and IT investments, Symantec Endpoint More than antivirus
Protection is easy to implement and deploy. For Antivirus and antispyware—Provides unmatched, best-
organizations that want to outsource security monitoring of-breed malware protection, including market-leading
and management, Symantec offers Managed Security antivirus protection, enhanced spyware protection, new
Services to deliver real-time security protection. rootkit protection, reduced memory footprint, and new
dynamic performance adjustments to keep users productive.
Lower cost of ownership—Symantec Endpoint Protection
delivers a lower total cost of ownership by reducing Network threat protection—A rules-based firewall engine
administrative overhead as well as the costs associated with and Generic Exploit Blocking (GEB) block malware before it
managing multiple endpoint security products. This unified can enter a system.
Page 2 of 5 Confidence in a connected world.
Data Sheet: Endpoint Security
Symantec™ Endpoint Protection
Proactive threat protection—Providing protection against System requirements
unseen threats (i.e., zero-day threats), it includes TruScan Client workstations and servers
Proactive Threat Scan, which does not rely on a signature.
• Processor: Intel® Pentium® processor or compatible
Single agent and single management console—Antivirus, architecture (32-bit and 64-bit)
antispyware, desktop firewall, IPS, device and application Note: Itanium® is not supported
control, and network access control (with the purchase of a • Windows® operating systems (32-bit and 64-bit versions):
Symantec Network Access Control license) are provided on a – Windows 2000 Professional, Server, Advanced Server,
single agent—all managed by a single console.
Datacenter Server, Small Business Server with Service
Symantec Endpoint Protection product family Pack 3 or later
Symantec Symantec Symantec
– Windows XP Home Edition, Professional Edition, Tablet
Endpoint Multi-tier Multi-tier PC Edition, Embedded Edition, Media Center Edition
Protection Protection Protection
Small Business with Service Pack 1 or later
Edition
Antivirus X X X
– Windows Server 2003 Standard Edition, Enterprise
Antispyware X X X Edition, Datacenter Edition, Web Edition, Small
Firewall X X X
Business Server, Compute Cluster Server, Storage
Device and application X X X
control Server
Intrusion prevention X X X
– Windows Vista® Home Basic, Home Premium, Business,
Symantec™ Mail Security X X
for Microsoft Exchange Enterprise, Ultimate
Symantec™ Mail Security X – Windows Server 2008 Standard Edition, Enterprise
for Domino
Premium AntiSpam X* X* Edition, Datacenter Edition, Web Edition
(for Groupware)
• Linux® operating systems (32-bit and 64-bit versions):
Brightmail Gateway X*
software subscription – Red Hat® Enterprise Linux 3.x, 4.x, 5.x
Symantec Mobile AntiVirus X*
– SUSE Linux Enterprise (server/desktop) 9.x, 10.x
for Windows Mobile
Symantec AntiVirus for X X X – Novell® Open Enterprise Server (OES/OES2)
Linux
– VMware ESX 2.5, 3.x
Symantec AntiVirus for Mac X* X
• Memory: 256 MB of RAM or more
Shaded area = Centrally managed by a single agent and single console
* New additions. • Hard Disk: 600 MB or more
Note:
• If a customer does not want to use Symantec Endpoint Protection when they
purchase a bundle, they may install Symantec AntiVirus. They just need to go
directly to Customer Care.
• In the new bundle, The Symantec Endpoint Protection version is 11.0.3
(MR3).
Page 3 of 5 Confidence in a connected world.
Data Sheet: Endpoint Security
Symantec™ Endpoint Protection
Management server Database
• Processor: Intel Pentium processor or compatible • Embedded database provided. Also supports:
architecture (32-bit and 64-bit) – Microsoft® SQL Server 2000 with Service Pack 3 or later
Note: Itanium is not supported – Microsoft SQL Server 2005
• Windows operating systems (32-bit and 64-bit versions): • Hard disk: 4 GB or more
– Windows 2000 Server, Advanced Server, Datacenter
Symantec AntiVirus for Linux client
Server, Small Business Server with Service Pack 3 or
• Linux distribution supported:
later
Component 32-bit 64-bit
– Windows XP Professional Edition with Service Pack 1 or Red Hat Enterprise Linux 3.x, 4.x, 5.x X X
later SUSE Linux Enterprise (Server/Desktop)
X X
9.x, 10.x
– Windows Server 2003 Standard Edition, Enterprise
Novell Open Enterprise Server (OES/OES2) X X
Edition, Datacenter Edition, Web Edition, Small VMware ESX 2.5.x, 3.x X
Business Server, Compute Cluster Server, Storage Not centrally managed by the Symantec Endpoint Protection Manager
Server
Additional administrator tools
• Memory: 1 GB of RAM or more
Live Update Administrator
• Hard disk: 2 GB or more
• Operating system supported: Microsoft Windows 2000,
Management console 2003, and XP
• Processor: Intel Pentium processor or compatible • Processor: Intel Pentium 4 1.8 GHz
• Memory: 512 MB of RAM
architecture (32-bit and 64-bit)
• Hard disk: 5 GB
Note: Itanium is not supported
• Windows operating systems (32-bit and 64-bit versions):
– Windows 2000 Professional, Server, Advanced Server,
Datacenter Server, Small Business Server with Service
Pack 3 or later
– Windows XP Professional Edition with Service Pack 1 or
later
– Windows Server 2003 Standard Edition, Enterprise
Edition, Datacenter Edition, Web Edition, Small
Business Server, Compute Cluster Server, Storage
Server
– Windows Vista Home Basic, Home Premium, Business,
Enterprise, Ultimate
• Memory: 512 MB of RAM or more
• Hard disk: 15 MB or more
Page 4 of 5 Confidence in a connected world.