KaspersKy Business products 2013
Kaspersky
Business
Products 2013
See. Control. Protect.
ABOUT
KASPERSKY LAB
Kaspersky Lab is the world’s largest independent security software
company. We provide the best possible IT security for your organisation
through a combination of powerful anti-malware protection, flexible
control tools, encryption technology and systems management tools.
Kaspersky security extends from the endpoint to your servers and
gateways, and our unique integrated design approach means you
can secure and control all your physical, virtual and mobile devices
from a single central management console, whatever the size of
your infrastructure. Kaspersky technology is also used worldwide
inside the products and services of industry-leading IT manufacturers
and publishers.
Learn more at: www.kaspersky.com.
For the latest on antivirus, anti-spyware, anti-spam and other IT security issues and trends, visit: www.securelist.com.
3
THE INDUSTRY’S ONLY
TRULY Integrated
SECURITY PLATFORM
THE RIGHT
SOLUTION FOR YOU
One Console
Kaspersky Security for Business delivers the right solution for your organisation — hether
you are looking to protect and control your endpoints (from workstations to smartphones
and virtual machines) to secure your servers and gateways, or to manage your entire
security environment remotely.
One Platform
Kaspersky boasts a comprehensive list of technologies, from encryption and mobile
device management to patch management and licence inventories. All work seamlessly
together, supported by the cloud-based Kaspersky Security Network, to give our
customers the world-class protection they need to combat ever more sophisticated and
diverse cyber threats.
Kaspersky products are designed so that, from one ‘single pane of glass’, the
administrator can view and manage the entire security scene — virtual machines,
physical and mobile devices alike.
At Kaspersky Lab, we have developed our own console, security modules and tools inhouse rather than acquiring them from other companies. The same programmers working
from the same codebase have developed technologies that talk together and work
together. The result is stability, integrated policies, useful reporting and intuitive tools.
In short, we’ve delivered the industry’s first Security Platform, built from the ground up,
making it easy for IT administrators to see, control and protect their world.
One Cost
All Kaspersky products and tools are from one vendor, delivered in one installation — so
you don’t have to go through a new budgeting and justification process every time to bring
your security risks in line with your business objectives.
• Collaboration
Servers
• Mail Servers
• Internet
Gateways
Centrally Managed by Kaspersky Security Center
Administration Console
Anti-malware
Protection
• Signature-based
Scanner
• Proactive
Scanner
• Workstation
• Laptop
• File Server
• Storage
Endpoint
Controls
• Application
Control
• Web Control
• Dynamic
Whitelisting
Encryption
• 256 bit AES
• Full Disk
• File
• Removable/
internal devices
• Workstation
• Laptop
4
• Image Deployment
• Software
Licence Management
• Advanced
Vulnerability Scanning
• Intelligent
Patch
Management
• Device Control
Denotes inclusion of cloud-assisted technologies
via the Kaspersky Security Network
Systems
Management
Mobile Device
Management
and Security
• Remote Deployment
• Security Profiles
• Containers
• Anti-theft
• Application Security
• Encryption
• Anti-malware
• Virtualization
• Smartphones
• Tablets
5
KASPERSKY
ENDPOINT SECURITY
FOR BUSINESS
KASPERSKY
SECURITY FOR
BUSINESS
Our technologies, and how
they work together for you
Core
Select
Advanced
Total
Managed
by Security
Center
Available
in a Targeted
Solution
Anti-Malware
•
•
•
•
•
Firewall
•
•
•
•
•
Application Control
•
•
•
•
Device Control
•
•
•
•
Web Control
•
•
•
•
File Servers
•
•
•
•
•
Mobile Endpoint Agent
•
•
•
•
•
Mobile Device Management
•
•
•
•
•
Encryption Technology
•
•
•
OS Image Management
•
•
•
•
Licence Management
•
•
•
•
Vulnerability Management
•
•
•
•
Patch Management
•
•
•
•
Network Admission Control
•
•
•
•
Anti-Malware
& Firewall
Endpoint
Controls
Mobile
Security
Encryption
Systems
Management
Mail, Web
Collaboration,
Core TIER
Starting from a foundation of Kaspersky’s award-winning and powerful non-server anti-malware
technology and a protective firewall, we add Kaspersky Security Center — our intuitive administration
console. For customers who require anti-malware only, this is the solution.
Collaboration
•
•
Mail Servers
•
•
Internet Gateways
•
•
Virtualization
•
•
Storage
•
•
6
Centralised
Management
Select TIER
Building on the CORE level, we’ve added File Server Security, Application Whitelisting and Control,
Device Control and Web Control to the protection roster. Also included is a Mobile Protection Solution
which consists of an endpoint security agent and Mobile Device Management (or MDM). If your needs
include protecting a mobile workforce and enforcing IT policy, SELECT might be the right tier for you.
Advanced TIER
At the ADVANCED tier, Kaspersky adds data protection in the form of file or full-disk encryption. Another
new offering, Kaspersky Systems Management, combines security with IT efficiency. This broad set of
features includes essential tools allowing the administrator to:
•Create images and deploy systems using the Image Management module.
•Prioritise the treatment of hardware and software vulnerabilities with a powerful combination of
Advanced Vulnerability Scanning and Intelligent Patch Management.
•Track license usage and compliance with Software Licence Management.
•Set data and infrastructure access policies for users and guests with Network Admission Control.
•Deploy and install updates and new software to users remotely from the central console.
Kaspersky Total Security for Business
Our flagship offering, Kaspersky Total Security for Business, combines all three previous tiers and further
enhances your security posture with additional Web, Mail and Collaboration Server protection. This is the
perfect solution for organisation with broad security requirements who demand the best protection for
each network.
7
KASPERSKY
ENDPOINT SECURITY
FOR BUSINESS
KEY FEATURES:
Powerful Endpoint Anti-Malware
Kaspersky’s scanning engines operate at multiple
levels in the operating system, rooting out malware.
Cloud Enabled Protection
With the cloud-based Kaspersky Security
Network, users are protected in real time against
new threats.
Core
Centralised Management
Administrators can centrally remove existing
antivirus software, configure and deploy
Kaspersky, and perform reporting — all from the
same console.
Endpoint Anti-Malware Features:
Frequent Updates and Signature-Based
Protection
Industry-proven traditional signature-based method
for detecting malware threats.
Centralised
Management
Anti-Malware
& Firewall
Endpoint
Controls
Mobile
Security
Encryption
Systems
Management
Mail, Web
Collaboration
Award-winning anti-malware with ceontralised deployment, management
and reporting.
A layered security model begins with best of breed anti-malware. Because Kaspersky has long
been known as the leader in detection and removal of malicious software, there is no better
foundation. The Kaspersky Endpoint Security for Business ‘Core’ tier is centrally managed by the
Kaspersky Security Center and is assisted by the cloud-based Kaspersky Security Network.
Behavioral Analysis Performed by
System Watcher
The Kaspersky Security Network (KSN) provides a
response to suspected threats, much faster than
traditional methods of protection. KSN’s response
time can be as little as 0.02 seconds!
Host-based Intrusion Prevention System (HIPS) with Personal Firewall
Predefined rules for hundreds of the most
commonly used applications reduce time spent on
configuring the firewall.
Broad Platform Support
Kaspersky offers endpoint security for Windows ®,
Macintosh® and Linux®, easing the workload of the
administrator supporting diverse networks.
Kaspersky Security Center features:
One Central Console
For remote management of all your Kaspersky
protected endpoints.
Web Interface
Remotely monitors protection status and reports on
key events from an accessible interface.
Intuitive User Interface
Clear, actionable information in an uncluttered
dashboard allows administrators to view real-time
protection status, set policies, manage systems
and obtain reports.
Scalable Support
Whatever your infrastructure size, Kaspersky
Security Center offers deployment and management
tools, flexible policy options and robust reporting to
meet your growing needs.
Centrally Managed by Kaspersky Security Center
Administration Console
Signature-based
anti-malware
engine
Proactive
anti-malware
engine
Cloud-Assisted
via Kaspersky
Security Network
Firewall
• Workstation
• Laptop
Kaspersky Endpoint Security for Business Core Tier — Powerful Anti-Malware featuring Cloud-Assisted Protection.
8
9
KASPERSKY
ENDPOINT SECURITY
FOR BUSINESS
KEY FEATURES:
Powerful Endpoint Anti-Malware
Kaspersky’s ‘best of breed’ scanning engine
operates at multiple levels in the operating system,
rooting out malware. The cloud-based Kaspersky
Security Network (KSN) protects users in real time
against new threats.
Flexible, Granular Control Tools
A cloud-based, catagorised database of safe
and unsafe applications and websites helps
the administrator to set and enforce policies
for applications and web surfing, while granular
controls ensure that only specific devices can plug
in to machines on the network.
Select
Centralised
Management
Anti-Malware
& Firewall
Endpoint
Controls
Mobile
Security
Encryption
Systems
Management
Mail, Web
Collaboration
Efficient Mobile Deployment and
Security for Smartphones and Tablets
Agent-based mobile security is available for
Android™, BlackBerry®, Symbian and Windows®
Mobile devices. Mobile device policies and
software can be securely deployed over the air to
these and to iOS devices through Kaspersky MDM.
Introducing in this tier:
Endpoint Controls:
Tools to enable a mobile workforce, ensure IT security policy conformity and
block malware.
Kaspersky’s ‘Select’ tier includes mobile device deployment and protection via Mobile Device
Management (MDM) and mobile anti-malware. Endpoint control tools (web, device and
application) help your organisation enforce IT policy, keeping the essential elements of your IT
environment secure.
Application control
Enables IT administrators to set policies that
allow, block or regulate applications (or application
categories).
Web Control
Means that endpoint-based surfing controls follow
the user — whether on the corporate network
or roaming.
Device Control
Allows users to set, schedule and enforce data
policies with removable storage and other peripheral
device controls — connected to USB or any other
bus type.
Dynamic Whitelisting
Real-time file reputations delivered by the
Kaspersky Security Network ensure your approved
applications are malware free and help maximise
user productivity.
Kaspersky Security for Mobile:
Centrally Managed by Kaspersky Security Center
Administration Console
Anti-malware
Protection
Mobile Device
Management
• Remote Deployment
• Security Profiles
• Containers
• Anti-theft
• Application Security
• Encryption
• Proactive engine
• Signature-based
engine
Control
Tools
• Application Control
• Web Control
• Smartphones
• Tablets
• Workstation
• Laptop
• File Server
Innovative Anti-Malware Technologies
Combined signature-based, proactive and cloudassisted detection results in real-time protection.
A safe browser and anti-spam increase the security.
Application Control for Mobile Devices
Monitors applications installed on a mobile device
according to the pre-defined group policies.
Includes a “Mandatory Application” group.
Deployment with Over The Air (OTA)
Provisioning
The ability to pre-configure and deploy applications
centrally using SMS, email and PC.
Support for Employee Owned Devices
Corporate data and applications are isolated in
encrypted containers which are transparent to the
user. This data can be wiped separately.
Remote Anti-Theft Tools
SIM-Watch, rRemote Lock, Wipe and Find all
prevent unauthorised access to corporate data if
a mobile device is lost or stolen.
• Device Control
Denotes inclusion of cloud-assisted technologies via the Kaspersky Security Network
Kaspersky Endpoint Security for Business — Select Tier. Featuring Control tools and Mobile Security.
10
11
KASPERSKY
ENDPOINT SECURITY
FOR BUSINESS
KEY FEATURES:
Advanced
Centralised
Management
Endpoint
Controls
Anti-Malware
& Firewall
Mobile
Security
Encryption
Systems
Management
Mail, Web
Collaboration
Powerful Encryption Technology
Full disk and folder level AES 256-bit encryption
protects lost or stolen data, and allows secure data
sharing via removable devices, email, network or
web, all with transparency to the user.
Mobile Deployment and Security for
Smartphones and Tablets
Agent-based mobile endpoint security, and remote
device and software policy management through
Kaspersky MDM.
Systems Configuration and Patch
MANAGEMENT
Operating systems image creation and
deployment, vulnerability scanning, automated
patch management, Network Admission Control,
inventories and licence management combine
to provide a fully integrated toolkit administered
through a single, user-friendly central console.
Powerful Endpoint Anti-Malware and
Flexible Controls
Kaspersky’s cloud-assisted ‘best of breed, antimalware and granular applications, web and device
control tools.
Introducing in this tier:
ENCRYPTION AND DATA PROTECTION:
Security tools combined with IT optimisation features abound in this valuable
array of solutions from Kaspersky Lab.
Kaspersky’s Advanced tier delivers the protection and management solution your organisation
needs to enforce IT policy, keep users free from malware, prevent data loss, and enhance
IT efficiency.
Comprehensive Encryption
Choose from full-disk or file level , backed by
Advanced Encryption Standard (AES) with 256 bit
encryption, to secure critical business information in
the event of device theft or loss.
Secure Data Sharing
Create encrypted and self-extracting packages to
ensure data is protected when sharing via removable
devices, email, network or web.
Support for Removable Devices
Increases your security through policies that enforce
the encryption of data on removable devices.
Transparency for End-users
Kaspersky’s encryption solution is seamless and
invisible to users, and has no adverse impact on
productivity. No impact on application settings or
updates, either.
SYSTEMS CONFIGURATION AND PATCH MANAGEMENT:
Patch Management
Advanced in-depth scanning for vulnerabilities
combined with the automated distribution of patches.
Centrally Managed by Kaspersky Security Center
Administration Console
Anti-malware
Protection
• Signature-based
scanner
• Proactive
Scanner
• Workstation
• Laptop
• File Server
Endpoint
Controls
• Application
Control
• Web Control
• Dynamic
Whitelisting
Encryption
• AES-256
• Full Disk
• File level
• Removable/
Internal Devices
Systems
Management
• Image Deployment
• Software
Licence Management
• Advanced
Vulnerability Scanning
• Intelligent
Patch
Management
• Device Control
Mobile Device
Management
and Security
• Remote Deployment
• Security Profiles
• Containers
• Anti-theft
• Application Security
• Encryption
• Anti-malware
Operating System and Application Image Deployment
Easy creation, storage and deployment of system
images from a central location. Perfect for a migration
to Microsoft® Windows® 8.
Remote Deployment of Software
Central deployment of software to client machines,
even to branch offices.
Network Admission Control (NAC)
With Network Admission Control (NAC), you can
create a network ‘guest’ policy. Guest devices
(including mobile devices) are automatically
recognised and sent to a corporate portal where the
correct identification password enables them to use
the resources you’ve approved.
Hardware, Software and Licence Control
Hardware and software inventory reports help
keep control over software licence obligations. So
you can save on costs by centrally provisioning
software rights.
• Workstation
• Laptop
Denotes inclusion of cloud-assisted technologies
via the Kaspersky Security Network
• Smartphones
• Tablets
Kaspersky Endpoint Security for Business — Advanced Tier. Featuring Encryption Technology and Security
Systems Management.
12
13
KASPERSKY
TOTAL SECURITY
FOR BUSINESS
KEY FEATURES:
All the features of the previous three tiers,
plus:
Mail Server Protection
Anti-malware and anti-spam protection of mail
traffic for all popular mail systems
Security for Internet Gateways
Ensure secure internet access across the
organisation by automatically removing malicious
and potentially hostile programs in HTTP(S)/FTP/
SMTP and POP3 traffic.
Collaboration Security
Kaspersky defends your SharePoint® servers
against malware, while content and file filtering
capabilities help prevent the storage of
inappropriate content.
Introducing in this tier:
Centralised
Management
Endpoint
Controls
Anti-Malware
& Firewall
Mobile
Security
Encryption
Mail, Web
Collaboration
Systems
Management
MAIL SERVERS:
End-to-end protection against malware, encryption, comprehensive IT
efficiency and policy enforcement tools.
Kaspersky Total Security for Business delivers the most complete platform of protection and
management offered in the industry today. Total Security for Business secures every layer of
your network and includes powerful configuration tools to ensure your users are productive
and free from the threat of malware, regardless of device or location.
• Collaboration
Servers
• Mail Servers
• Signature-based
Scanner
• Proactive
Scanner
• Workstation
• Laptop
• File Server
Endpoint
Controls
• Application
Control
• Web Control
• Dynamic
Whitelisting
KSN INTEGRATION FOR ANTI-SPAM
Increases spam detection rate thanks to integration
with Kaspersky Lab’s cloud-based threat
identification engine (KSN).
Reduced Traffic Load
Cloud-enabled, intelligent spam filtering significantly
reduces traffic load.
System Resource Optimisation
A new antivirus engine, load balancing of server
resources and scan exclusions all reduce the load on
your system.
INTERNET GATEWAYs:
High Performance
A powerful antivirus engine plus optimised, intelligent
scanning technology and load balancing increase
performance and reduce the resources needed for
virus scanning.
• Internet
Gateways
Multi-Platform Support
Kaspersky Security for Internet Gateway supports
most popular gateways based on the Windows and
Linux platforms.
COLLABORATION
Centrally Managed by Kaspersky Security Center
Administration Console
Anti-malware
Protection
MAIL TRAFFIC PROTECTION
Protecting mail on the latest versions of major mail
and collaboration platforms: Microsoft Exchange,
IBM Lotus Domino and Linux-based mail servers.
Encryption
• 256 bit AES
• Full Disk
• File
• Removable/
internal devices
Systems
Management
• Image Deployment
• Software
Licence compliance
• Advanced
Vulnerability Scanning
• Intelligent
Patch
Management
• Device Control
Mobile Device
Management
and Security
• Remote Deployment
• Security Profiles
• Containers
• Anti-theft
• Application Security
• Compliance
• Encryption
Anti-malware barrier for
SharePoint farms
Uses innovative detection technology designed to
identify and block malware from attempted uploads
or downloads in real time.
Content Filtering
Helps prevent inappropriate external uploads ,
enforcing internal communication policies and
blocking storage of inappropriate files by file type
or text content.
• Anti-malware
• Workstation
• Laptop
Denotes inclusion of cloud-assisted technologies
via the Kaspersky Security Network
14
• Smartphones
• Tablets
15
KASPERSKY
SECURITY FOR MOBILE
Encryption
Data in motion is protected via transparent full-disk
and file level data encryption which can also be
Private ‘App’ Portal
applied to a container.
Complete mobile security combining Mobile Device Management (MDM)
and Endpoint Security for Mobile Devices.
Anti-Theft
Administrators
can
remotely perform a full or
App
App
selective device wipe, pinpoint the location of
a missing device using GPS “Find” and receive
notification if a SIM card is removed or swapped.
security risk control:
Kaspersky MDM makes the secure configuration of mobile devices painless and
straightforward, while Kaspersky Endpoint Security for Mobile Devices provides the protection
you need against today’s threats — even on employee owned devices.
Detailed Features of Kaspersky Security FOR MOBILE:
App
App
Mobile Anti-Malware
Kaspersky Lab’s anti-malware engine features
multiple layers of detection including cloud-assisted
protection, and combines with a safe browser and
powerful anti-spam to ensure the device is not
compromised by malicious software.
Kaspersky
Security
Center
Corporate and personal Data Integrity:
App
App
Containers
In support of an employee-owned device scenario,
corporate
applications can be placed
Appdata and
App
in isolated “containers”. This provides maximum
security for corporate data, and optimal integrity for
personal content.
Remote Data Safety Tools
In the event a device is misplaced, Remote Lock
can be engaged. Corporate data within a container
on the device can be secured, encrypted, remotely
managed and wiped independently of personal data
on the device.
IT Efficiency features:
Private Application Portal
Administrators publish a corporate portal that
contains links to approved applications. Users can
be limited to only these applications only.
Compliance and Policy Enforcement
Application control allows the monitoring and control
of application usage on the device including ‘Default
Deny’ and ‘Default Allow’ support.
“Over The Air” Provisioning
Secures phones remotely by sending either an
email or SMS containing a link to the corporate
portal where users can download the profile and
applications you’ve approved. Access to data won’t
be granted until the user has accepted.
Containerisation
Private ‘App’ Portal
Personal
Secure Configuration
Ensures hardware and software integrity by enabling
rooting and jailbreak detection. Other security
settings include ‘camera disable’, forced password
and more.
Corporate
Simple Configuration via a Single Console
Unlike other solutions, Kaspersky Lab allows
administrators to use only one console to manage the
security of mobile devices, physical endpoints, virtual
systems, encryption and policy enforcement tools.
• Keeps corporate
data separate
• Encrypted
• Selectively wiped
App
App
App
App
App
App
App
App
Kaspersky
Security
Center
Perfect for “Bring Your Own Device” (BYOD) initiatives
Mobile Device
Management and Security
Containerisation
Many employees use their own devices for both personal and corporate tasks. In fact, some organisation
encourage workers to choose their preferred smartphone or tablet from a retailer, and IT adds email and
corporate access to the employee-owned device.
Apple MDM
Internet
• Android, Symbian and
BlackBerry Devices
16
• Windows
Devices
• iOS
Devices
Application Portal
Personal
Microsoft Exchange ActiveSync
There are savings and productivity benefits, but BYOD can also open the organisation to security risks.
Corporate data, improperly secured and potentially co-mingled with personal items, can be easily exploited.
Often these devices are also used by family members with no regard for application security. Some are even
rooted or jailbroken.
Corporate
Kaspersky Security Center
Kaspersky Security for Mobile solves these problems by enabling secure configuration and deployment
of smartphones and tablets using the same console as your network security. IT administrators
• Keeps corporate can be
data separate
confident that user devices are configured with the correct settings and can be secured
in the event of
• Encrypted
loss, theft or user abuse.
• Selectively wiped
17
KASPERSKY
Systems Management
Introducing Kaspersky Systems Management. This solution offers a
broad set of powerful IT productivity tools written into the same code and
managed from one console. The resulting platform provides the simplicity
and automation you want — and the security and control you need.
Disparate IT tools create complexity — and complexity is
the enemy of security.
Avoid duplication
Eliminate the duplication of effort involved in setting up individual systems for new
and existing users. Using system provisioning technology, disk images can be created,
managed and deployed from a central location.
Enhance security
Administrators tell us their days are often filled with ensuring patches are up to date.
Kaspersky helps to remove complexity by identifying vulnerabilities that could be
immediately exploited and which fixes can be postponed for after-hours. This prioritising
helps administrators plan their day and increase their security posture.
SYSTEMS MANAGEMENT FEATURES:
Operating System and Application
Provisioning
Easy creation, storage, cloning and deployment
of system images from a central location. Ensure
systems are delivered to the user without issues
and with optimal security settings. This tool is wellsuited for migration to Microsoft Windows 8.
Support for Microsoft Windows Server
Update Services (WSUS)
Kaspersky Systems Management regularly
synchronises data on available updates and
hotfixes with servers, including Microsoft Windows
Update, downloading them via Windows Update
Services and efficiently distributing them.
Stay on Top of Vulnerabilities
A one-click hardware and software scan compares
results across multiple vulnerability databases,
so you can prioritise which vulnerabilities need
immediate attention and which you can postpone
for after-hours.
Network Admission Control (NAC)
With Network Admission Control (NAC), you can
create a network ‘guest’ policy. Guest devices
(including mobile devices) are automatically
recognised and sent to a corporate portal where
the correct credentials enable them to use the
resources you’ve approved.
Remote, Flexible Software Installation
Minimise network workload by using either manual
or scheduled deployments.
Remote Agents
Assign a workstation in a remote or branch office as
a central update agent. Save bandwidth by sending
one update to a remote office — and using the
assigned local workstation to distribute the update
for that location.
Support for Wake-on-LAN Technology
For after-hours deployment or support,
Kaspersky Systems Management can power-on a
workstation remotely.
Troubleshooting Tools
Remotely and securely connect to a client system to
fix issues — from the same administrative console.
Hardware and Software Inventories
PCs, hard drives and even removable devices are
automatically discovered and inventoried. The
introduction of a new device triggers a notification
to the administrator. This feature enables the
administrator to track the status and usage of
hardware on the network.
Licence Provisioning and Control
Kaspersky Systems Management reports exactly
what software is in use within your environment.
This enables you to adjust your licencing costs
and identify users who are out of compliance.
When deployed with Kaspersky Lab’s endpoint
control tools, you can limit usage only to approved
applications and versions - and restrict the number
of licences in use at any one time.
Work efficiently
Administrators can remotely install images, updates, patches and applications. If a user
has an issue, IT can remotely log in to the machine and troubleshoot the system. This
means the administrator isn’t wasting time by moving from desk to desk or spending
frustrating hours providing less productive phone support.
These features and more are part of Kaspersky Systems Management and are accessed
through the Kaspersky Security Center administration console. Because each tool
doesn’t require its own console, commands are consistent and intuitive, requiring no
additional training.
18
19
KASPERSKY
SECURITY for
File Server
KASPERSKY
SECURITY for
mail Server
Kaspersky Security for File Server reliably protects servers running
Microsoft® Windows®, Novell NetWare and Linux from all types
of malicious programs.
Kaspersky Security for Mail Server protects mail and groupware servers
from malicious programs and spam.
Antivirus protection for shared file storage is essential, as a single infected file on a server
could infect the workstations of all users of the resource. Proper protection of the file server
not only ensures that users and their data are protected, but also eliminates the danger of
malicious programs making their way into backup copies of files, which could cause repeated
malware outbreaks and other incidents.
Product Highlights*
•Support for the latest versions of Microsoft®
Windows® and Linux platforms
•Optimised usage of system resources
•Support for Hierarchical Storage Management
systems (HSM)
•Protection of terminal servers and cluster servers
•VMware Ready certification
•NSS file system support
•Free BSD support
Product Highlights*
Mail Server Protection
Anti-malware and anti-spam protection of mail traffic
for all popular mail systems.
System Resource Optimisation
A new anti-virus engine, load balancing of server
resources and scan exclusions all reduce the load
on your system.
KSN integration for anti-spam
Increases spam detection rate thanks to integration
with Kaspersky Lab’s cloud-based threat identification
engine (KSN).
Reduced Traffic Load
Cloud-enabled, intelligent spam filtering significantly
reduces traffic load.
Features
Features
•Protection of file servers running Windows
(including Windows Server® 2008 R2), Linux
(including Samba) and Novell NetWare
•Enhanced proactive protection from new
malicious programs
•Real-time antivirus protection
•Treatment of active infections
•On-schedule scanning of file storage
•Scanning of critical system areas
•Isolation of infected workstations
®
•Scalability
•Backup storage of data prior to disinfection
or deletion
•Centralised installation, management and updates
•Choice of installation and management methods
•Flexible system of scanning and incident
response scenarios
•Application status notification system
•Comprehensive reports on network protection status
Applications
•Kaspersky Anti-Virus for Windows® Servers
Enterprise Edition
•Kaspersky Anti-Virus for Linux File Server
•Kaspersky Endpoint Security for Windows®
•Kaspersky Anti-Virus for Novell NetWare
•Kaspersky Security Center
*Product features may vary depending on the combination of components used. Please see the component descriptions at: www.kaspersky.com for more information about individual
component features.
20
The product includes applications that protect mail traffic for all popular servers, including
Microsoft® Exchange, Lotus® Domino®, Sendmail, Qmail, Postfix, Exim and CommuniGate Pro.
The solution can also be used to set up a dedicated mail gateway.
•Integrated protection of mail servers from all types
of malicious programs
•Efficient protection against spam
•Real-time antivirus protection
•On-schedule scanning of emails and databases
•Protection for Sendmail, qmail, Postfix, Exim and
CommuniGate Pro mail servers
•Scanning of messages, databases and other
objects on Lotus® Domino® servers
•Scanning of all messages on the Microsoft®
Exchange server, including public folders
•Filtration of messages by attachment type
•Scalability
•Support for Microsoft® Exchange Server 2007 clusters
and DAG for Microsoft® Exchange Server 2010
•Backup storage of data prior to disinfection
or deletion
•Isolation of infected objects
•Cancellation of repeated mail scanning
•Convenient tools for installation, management
and updates
•Comprehensive reports on protection status
•Flexible system of scanning and incident
response scenarios
•Application status notification system
Applications
•Kaspersky Security for Microsoft® Exchange Servers
•Kaspersky Anti-Virus for Lotus® Domino®
•Kaspersky Security for Microsoft® Exchange Server 2003
•Kaspersky Security for Linux Mail Server
*Product features may vary depending on the combination of components used. Please see the component descriptions at: www.kaspersky.com for more information about individual
component features.
21
KASPERSKY
SECURITY for
Internet Gateway
KASPERSKY
SECURITY for
Collaboration
Kaspersky Security for Internet Gateway provides secure Internet access
for all employees in an organisation.
Kaspersky Security for Collaboration applies the latest in protection
technologies to your Collaboration platform, combining ease of management
and high malware detection rates.
•Protection of Microsoft® Forefront® TMG
•Wide variety of policy management and
configuration tools
•Scanning of VPN-connections
•Email traffic protection (via POP3 and SMTP protocols)
•Scanning of HTTP and FTP traffic from published
servers
•VMware Ready certification
Features
•Real-time scanning of internet traffic using HTTP,
HTTPS, FTP, POP3 and SMTP protocols
•Integrated protection from all types of malicious
programs
•Support for Squid, Blue Coat and Cisco® proxy servers
•Backup storage
•Load balancing of server processors
•Scalability
•Convenient tools for installation, management
and updates
•Flexible system of scanning and incident response
scenarios
•Comprehensive reports on network protection status
Features
•Innovative malware detection technology is
designed to identify and block threats from
attempted uploads or downloads in real time
•Prevents end users from storing specified types
of files, (e.g. music, video, executable files)
or files with inappropriate text
•Global management settings can be configured
on all protected servers from a single dashboard
•Simple, intuitive management — no special
training needed
•Integration with Active Directory streamlines
setup and user authentication
•Detailed logs and backup of modified files help
support administrators responding to violations
or security issues
•Detailed, flexible reporting
Internet
(External Users)
External
Product Highlights*
Kaspersky Security for Collaboration uses Kaspersky’s award-winning antivirus engine
to protect Microsoft® SharePoint® environments. With award-winning malware detection
technology, the product can protect a single server or entire SharePoint farms — while its
content and file filtering capabilities help prevent storage of inappropriate content.
Kaspersky Security for Collaboration
Web Front End
Firewall
Application Servers
SQL Servers
Internal
Kaspersky Security for Internet Gateway supports most popular gateways based on the
Windows and Linux platforms. Known malicious and potentially dangerous programs running
via HTTP, HTTPS, FTP, POP3 and SMTP protocols are automatically deleted from the data flow.
Optimisation technology, scalability and support for the latest platforms make it the ideal
product for large organisations with huge volumes of traffic.
Web Front End
Kaspersky Security for Collaboration
Applications
•Kaspersky Anti-Virus for Microsoft® ISA Server and
Forefront® TMG Standard Edition
•Kaspersky Anti-Virus for Microsoft® ISA Server
Enterprise Edition
•Kaspersky Anti-Virus for Proxy Server
Internal Users
*Product features may vary depending on the combination of components used. Please see the component descriptions at: www.kaspersky.com for more information about individual
component features.
22
23
Agentless Security Deployment
VM
VM
VM
MANAGEMENT
FEATURES:
APP
APP
APP
KASPERSKY
SECURITY for
Virtualization
Virtual
Single management console.
OS
OS
OS
Appliance
Kaspersky Security Center — which is available at no
additional cost — VMware
is a single
management console
vShield
that lets you manage the security of virtual machines,
physical machines and
mobile
VMware
ESXidevices.
Supports VMware vMotion.
By fully supporting VMware vMotion, Kaspersky
Physical
Security for Virtualization ensures that
protection is
Host
not interrupted when a workload is moved
from one
ESXi host to another. Provided the new host has the
necessary licences, the protection will follow the
workload and all security settings will remain the same.
Kaspersky Security for Virtualization – built for the unique requirements
of virtualised IT environments — delivers award-winning anti-malware
protection for virtualised servers, desktops and data centers.
Kaspersky Security for Virtualization is an agentless anti-malware solution that provides a
more efficient way to protect your virtualised infrastructure — with greater performance and
less impact on virtualisation density. The application is easy to deploy and includes advanced
management features that simplify a wide range of security tasks — across both physical and
virtual computing assets.
Mobile Workstations
•Advanced Antivirus Engine. Kaspersky’s awardwinning anti-malware technologies — together
with Kaspersky’s industry-leading frequency
of updates — help to protect against new and
emerging threats. A heuristic analyser combats
polymorphic malware.
VM
VM
APP
APP
APP
OS
OS
OS
APP
APP
OS
OS
APP
APP
OS
OS
OS
Virtual
Appliance
APP
APP
OS
OS
APP
APP
APP
APP
OS
OS
OS
OS
UNIFIED ADMINISTRATION CONSOLE
(Kaspersky Security Center)
+VMware vShield
Workstations
Mobile Devices
Virtual
Appliance
Kaspersky Security for Virtualization
Kaspersky Lab Security Solution
VMware vShield
VMware ESXi
•Automatic Protection. New virtual machines
are automatically provided with anti-malware
protection — to help eliminate security gaps and
misconfigurations. Any guest VM is always protected
with the latest signature database regardless of
whether a VM was previously off line.
Physical
Host
•Higher density virtualisation. Because Kaspersky
Security for Virtualization is an agentless solution, it
helps to eliminate ‘Update Storms’ and ‘Scan Storms’,
achieve higher density virtualisation, reduce impact on
performance and address security gaps that can be
introduced by some agent-based products.
Kaspersky Security for Virtualization
provides agentless antivirus for
VMware deployments.
Mobile Workstations
24
Agent-based Virtual Deployment
APP
Agentless Security Deployment
VM
File Server
Agentless Virtual Deployment
PROTECTION AND PERFORMANCE FEATURES
•Centralised security. Kaspersky Security for
Virtualization is a virtual appliance that plugs
into VMware’s vShield Endpoint – to deliver antimalware scanning capabilities. It provides a single,
centralised anti-malware engine and database for
each physical host.
Integrated with VMware vCenter.
Kaspersky Security for Virtualization receives
information about virtual machines from vCenter —
including a list of all virtual machines and relevant
parameters. In addition to giving the IT team better
visibility, this integration with vCenter ensures that
protection is automatically provided whenever a new
virtual machine is configured.
Agentless Virtual Deployment
APP
File Server
Agent-based Virtual Deployment
APP
APP
25
KASPERSKY
Anti-Virus
for Storage
Kaspersky Anti-Virus for Storage protects the EMC Celerra family of network
storage products from all types of malware.
Data storage systems on a network provide employees working in organisations of all
sizes with fast and easy shared access to information. However, if a corporate network
is unprotected, access to shared files can lead to some very undesirable consequences.
A single infected file stored on a system may compromise the entire network, potentially
causing substantial business, financial and reputational damage. That is why comprehensive
protection for network storage systems is absolutely essential.
Kaspersky Anti-Virus for Storage is fully compatible with the EMC Celerra range of products.
It has been expertly designed to provide them with the highest levels of protection, detecting
and neutralising malware from files and archives stored in Celerra systems. The solution
allows administrators to configure the system to perform scanning tasks in real-time as
objects are saved and modified, or on-demand if required.
Features
•Protection for EMC Celerra data storage systems
•Support for Windows Server® 2008 R2
•Support for Hierarchical Storage Management
systems (HSM)
•Enhanced proactive protection from new
malicious programs
•Real-time antivirus protection
•On-schedule scanning of file storage
•Scanning of critical system areas
•Optimised usage of system resources
26
•Backup storage of data prior to disinfection
or deletion
•Scalability
•VMware Ready certification
•Centralised installation, management and updates
through Kaspersky Security Center
•Integrates fully with the Kaspersky Endpoint Security
for Business Platform and other Kaspersky Products
•Application status notification system
•Comprehensive reports on network protection status
Kaspersky Lab UK & Ireland
97 Jubilee Avenue, Milton Park, Abingdon, Oxfordshire, OX14 4RW
www.kaspersky.co.uk
All about Internet security:
www.securelist.com
Find a partner near you:
www.kaspersky.com/buyoffline
© 2013 Kaspersky Lab ZAO. All rights reserved. Registered trademarks and service marks are the property of their respective
owners. Mac and Mac OS are registered trademarks of Apple Inc. Cisco is a registered trademark or trademark of Cisco Systems,
Inc. and/or its affiliates in the U.S. and certain other countries. IBM, Lotus, Notes and Domino are trademarks of International
Business Machines Corporation, registered in many jurisdictions worldwide. Linux is the registered trademark of Linus Torvalds
in the U.S. and other countries. Microsoft, Windows, Windows Server and Forefront are registered trademarks of Microsoft
Corporation in the United States and other countries. Android™ is a trademark of Google, Inc. The Trademark BlackBerry is owned
by Research In Motion Limited and is registered in the United States and may be pending or registered in other countries.
Was this manual useful for you? yes no
Thank you for your participation!

* Your assessment is very important for improving the work of artificial intelligence, which forms the content of this project

Download PDF

advertisement