Kaspersky Business Products 2013 See. Control. Protect. ABOUT KASPERSKY LAB Kaspersky Lab is the world’s largest independent security software company. We provide the best possible IT security for your organisation through a combination of powerful anti-malware protection, flexible control tools, encryption technology and systems management tools. Kaspersky security extends from the endpoint to your servers and gateways, and our unique integrated design approach means you can secure and control all your physical, virtual and mobile devices from a single central management console, whatever the size of your infrastructure. Kaspersky technology is also used worldwide inside the products and services of industry-leading IT manufacturers and publishers. Learn more at: www.kaspersky.com. For the latest on antivirus, anti-spyware, anti-spam and other IT security issues and trends, visit: www.securelist.com. 3 THE INDUSTRY’S ONLY TRULY Integrated SECURITY PLATFORM THE RIGHT SOLUTION FOR YOU One Console Kaspersky Security for Business delivers the right solution for your organisation — hether you are looking to protect and control your endpoints (from workstations to smartphones and virtual machines) to secure your servers and gateways, or to manage your entire security environment remotely. One Platform Kaspersky boasts a comprehensive list of technologies, from encryption and mobile device management to patch management and licence inventories. All work seamlessly together, supported by the cloud-based Kaspersky Security Network, to give our customers the world-class protection they need to combat ever more sophisticated and diverse cyber threats. Kaspersky products are designed so that, from one ‘single pane of glass’, the administrator can view and manage the entire security scene — virtual machines, physical and mobile devices alike. At Kaspersky Lab, we have developed our own console, security modules and tools inhouse rather than acquiring them from other companies. The same programmers working from the same codebase have developed technologies that talk together and work together. The result is stability, integrated policies, useful reporting and intuitive tools. In short, we’ve delivered the industry’s first Security Platform, built from the ground up, making it easy for IT administrators to see, control and protect their world. One Cost All Kaspersky products and tools are from one vendor, delivered in one installation — so you don’t have to go through a new budgeting and justification process every time to bring your security risks in line with your business objectives. • Collaboration Servers • Mail Servers • Internet Gateways Centrally Managed by Kaspersky Security Center Administration Console Anti-malware Protection • Signature-based Scanner • Proactive Scanner • Workstation • Laptop • File Server • Storage Endpoint Controls • Application Control • Web Control • Dynamic Whitelisting Encryption • 256 bit AES • Full Disk • File • Removable/ internal devices • Workstation • Laptop 4 • Image Deployment • Software Licence Management • Advanced Vulnerability Scanning • Intelligent Patch Management • Device Control Denotes inclusion of cloud-assisted technologies via the Kaspersky Security Network Systems Management Mobile Device Management and Security • Remote Deployment • Security Proﬁles • Containers • Anti-theft • Application Security • Encryption • Anti-malware • Virtualization • Smartphones • Tablets 5 KASPERSKY ENDPOINT SECURITY FOR BUSINESS KASPERSKY SECURITY FOR BUSINESS Our technologies, and how they work together for you Core Select Advanced Total Managed by Security Center Available in a Targeted Solution Anti-Malware • • • • • Firewall • • • • • Application Control • • • • Device Control • • • • Web Control • • • • File Servers • • • • • Mobile Endpoint Agent • • • • • Mobile Device Management • • • • • Encryption Technology • • • OS Image Management • • • • Licence Management • • • • Vulnerability Management • • • • Patch Management • • • • Network Admission Control • • • • Anti-Malware & Firewall Endpoint Controls Mobile Security Encryption Systems Management Mail, Web Collaboration, Core TIER Starting from a foundation of Kaspersky’s award-winning and powerful non-server anti-malware technology and a protective firewall, we add Kaspersky Security Center — our intuitive administration console. For customers who require anti-malware only, this is the solution. Collaboration • • Mail Servers • • Internet Gateways • • Virtualization • • Storage • • 6 Centralised Management Select TIER Building on the CORE level, we’ve added File Server Security, Application Whitelisting and Control, Device Control and Web Control to the protection roster. Also included is a Mobile Protection Solution which consists of an endpoint security agent and Mobile Device Management (or MDM). If your needs include protecting a mobile workforce and enforcing IT policy, SELECT might be the right tier for you. Advanced TIER At the ADVANCED tier, Kaspersky adds data protection in the form of file or full-disk encryption. Another new offering, Kaspersky Systems Management, combines security with IT efficiency. This broad set of features includes essential tools allowing the administrator to: •Create images and deploy systems using the Image Management module. •Prioritise the treatment of hardware and software vulnerabilities with a powerful combination of Advanced Vulnerability Scanning and Intelligent Patch Management. •Track license usage and compliance with Software Licence Management. •Set data and infrastructure access policies for users and guests with Network Admission Control. •Deploy and install updates and new software to users remotely from the central console. Kaspersky Total Security for Business Our flagship offering, Kaspersky Total Security for Business, combines all three previous tiers and further enhances your security posture with additional Web, Mail and Collaboration Server protection. This is the perfect solution for organisation with broad security requirements who demand the best protection for each network. 7 KASPERSKY ENDPOINT SECURITY FOR BUSINESS KEY FEATURES: Powerful Endpoint Anti-Malware Kaspersky’s scanning engines operate at multiple levels in the operating system, rooting out malware. Cloud Enabled Protection With the cloud-based Kaspersky Security Network, users are protected in real time against new threats. Core Centralised Management Administrators can centrally remove existing antivirus software, configure and deploy Kaspersky, and perform reporting — all from the same console. Endpoint Anti-Malware Features: Frequent Updates and Signature-Based Protection Industry-proven traditional signature-based method for detecting malware threats. Centralised Management Anti-Malware & Firewall Endpoint Controls Mobile Security Encryption Systems Management Mail, Web Collaboration Award-winning anti-malware with ceontralised deployment, management and reporting. A layered security model begins with best of breed anti-malware. Because Kaspersky has long been known as the leader in detection and removal of malicious software, there is no better foundation. The Kaspersky Endpoint Security for Business ‘Core’ tier is centrally managed by the Kaspersky Security Center and is assisted by the cloud-based Kaspersky Security Network. Behavioral Analysis Performed by System Watcher The Kaspersky Security Network (KSN) provides a response to suspected threats, much faster than traditional methods of protection. KSN’s response time can be as little as 0.02 seconds! Host-based Intrusion Prevention System (HIPS) with Personal Firewall Predefined rules for hundreds of the most commonly used applications reduce time spent on configuring the firewall. Broad Platform Support Kaspersky offers endpoint security for Windows ®, Macintosh® and Linux®, easing the workload of the administrator supporting diverse networks. Kaspersky Security Center features: One Central Console For remote management of all your Kaspersky protected endpoints. Web Interface Remotely monitors protection status and reports on key events from an accessible interface. Intuitive User Interface Clear, actionable information in an uncluttered dashboard allows administrators to view real-time protection status, set policies, manage systems and obtain reports. Scalable Support Whatever your infrastructure size, Kaspersky Security Center offers deployment and management tools, flexible policy options and robust reporting to meet your growing needs. Centrally Managed by Kaspersky Security Center Administration Console Signature-based anti-malware engine Proactive anti-malware engine Cloud-Assisted via Kaspersky Security Network Firewall • Workstation • Laptop Kaspersky Endpoint Security for Business Core Tier — Powerful Anti-Malware featuring Cloud-Assisted Protection. 8 9 KASPERSKY ENDPOINT SECURITY FOR BUSINESS KEY FEATURES: Powerful Endpoint Anti-Malware Kaspersky’s ‘best of breed’ scanning engine operates at multiple levels in the operating system, rooting out malware. The cloud-based Kaspersky Security Network (KSN) protects users in real time against new threats. Flexible, Granular Control Tools A cloud-based, catagorised database of safe and unsafe applications and websites helps the administrator to set and enforce policies for applications and web surfing, while granular controls ensure that only specific devices can plug in to machines on the network. Select Centralised Management Anti-Malware & Firewall Endpoint Controls Mobile Security Encryption Systems Management Mail, Web Collaboration Efficient Mobile Deployment and Security for Smartphones and Tablets Agent-based mobile security is available for Android™, BlackBerry®, Symbian and Windows® Mobile devices. Mobile device policies and software can be securely deployed over the air to these and to iOS devices through Kaspersky MDM. Introducing in this tier: Endpoint Controls: Tools to enable a mobile workforce, ensure IT security policy conformity and block malware. Kaspersky’s ‘Select’ tier includes mobile device deployment and protection via Mobile Device Management (MDM) and mobile anti-malware. Endpoint control tools (web, device and application) help your organisation enforce IT policy, keeping the essential elements of your IT environment secure. Application control Enables IT administrators to set policies that allow, block or regulate applications (or application categories). Web Control Means that endpoint-based surfing controls follow the user — whether on the corporate network or roaming. Device Control Allows users to set, schedule and enforce data policies with removable storage and other peripheral device controls — connected to USB or any other bus type. Dynamic Whitelisting Real-time file reputations delivered by the Kaspersky Security Network ensure your approved applications are malware free and help maximise user productivity. Kaspersky Security for Mobile: Centrally Managed by Kaspersky Security Center Administration Console Anti-malware Protection Mobile Device Management • Remote Deployment • Security Profiles • Containers • Anti-theft • Application Security • Encryption • Proactive engine • Signature-based engine Control Tools • Application Control • Web Control • Smartphones • Tablets • Workstation • Laptop • File Server Innovative Anti-Malware Technologies Combined signature-based, proactive and cloudassisted detection results in real-time protection. A safe browser and anti-spam increase the security. Application Control for Mobile Devices Monitors applications installed on a mobile device according to the pre-defined group policies. Includes a “Mandatory Application” group. Deployment with Over The Air (OTA) Provisioning The ability to pre-configure and deploy applications centrally using SMS, email and PC. Support for Employee Owned Devices Corporate data and applications are isolated in encrypted containers which are transparent to the user. This data can be wiped separately. Remote Anti-Theft Tools SIM-Watch, rRemote Lock, Wipe and Find all prevent unauthorised access to corporate data if a mobile device is lost or stolen. • Device Control Denotes inclusion of cloud-assisted technologies via the Kaspersky Security Network Kaspersky Endpoint Security for Business — Select Tier. Featuring Control tools and Mobile Security. 10 11 KASPERSKY ENDPOINT SECURITY FOR BUSINESS KEY FEATURES: Advanced Centralised Management Endpoint Controls Anti-Malware & Firewall Mobile Security Encryption Systems Management Mail, Web Collaboration Powerful Encryption Technology Full disk and folder level AES 256-bit encryption protects lost or stolen data, and allows secure data sharing via removable devices, email, network or web, all with transparency to the user. Mobile Deployment and Security for Smartphones and Tablets Agent-based mobile endpoint security, and remote device and software policy management through Kaspersky MDM. Systems Configuration and Patch MANAGEMENT Operating systems image creation and deployment, vulnerability scanning, automated patch management, Network Admission Control, inventories and licence management combine to provide a fully integrated toolkit administered through a single, user-friendly central console. Powerful Endpoint Anti-Malware and Flexible Controls Kaspersky’s cloud-assisted ‘best of breed, antimalware and granular applications, web and device control tools. Introducing in this tier: ENCRYPTION AND DATA PROTECTION: Security tools combined with IT optimisation features abound in this valuable array of solutions from Kaspersky Lab. Kaspersky’s Advanced tier delivers the protection and management solution your organisation needs to enforce IT policy, keep users free from malware, prevent data loss, and enhance IT efficiency. Comprehensive Encryption Choose from full-disk or file level , backed by Advanced Encryption Standard (AES) with 256 bit encryption, to secure critical business information in the event of device theft or loss. Secure Data Sharing Create encrypted and self-extracting packages to ensure data is protected when sharing via removable devices, email, network or web. Support for Removable Devices Increases your security through policies that enforce the encryption of data on removable devices. Transparency for End-users Kaspersky’s encryption solution is seamless and invisible to users, and has no adverse impact on productivity. No impact on application settings or updates, either. SYSTEMS CONFIGURATION AND PATCH MANAGEMENT: Patch Management Advanced in-depth scanning for vulnerabilities combined with the automated distribution of patches. Centrally Managed by Kaspersky Security Center Administration Console Anti-malware Protection • Signature-based scanner • Proactive Scanner • Workstation • Laptop • File Server Endpoint Controls • Application Control • Web Control • Dynamic Whitelisting Encryption • AES-256 • Full Disk • File level • Removable/ Internal Devices Systems Management • Image Deployment • Software Licence Management • Advanced Vulnerability Scanning • Intelligent Patch Management • Device Control Mobile Device Management and Security • Remote Deployment • Security Proﬁles • Containers • Anti-theft • Application Security • Encryption • Anti-malware Operating System and Application Image Deployment Easy creation, storage and deployment of system images from a central location. Perfect for a migration to Microsoft® Windows® 8. Remote Deployment of Software Central deployment of software to client machines, even to branch offices. Network Admission Control (NAC) With Network Admission Control (NAC), you can create a network ‘guest’ policy. Guest devices (including mobile devices) are automatically recognised and sent to a corporate portal where the correct identification password enables them to use the resources you’ve approved. Hardware, Software and Licence Control Hardware and software inventory reports help keep control over software licence obligations. So you can save on costs by centrally provisioning software rights. • Workstation • Laptop Denotes inclusion of cloud-assisted technologies via the Kaspersky Security Network • Smartphones • Tablets Kaspersky Endpoint Security for Business — Advanced Tier. Featuring Encryption Technology and Security Systems Management. 12 13 KASPERSKY TOTAL SECURITY FOR BUSINESS KEY FEATURES: All the features of the previous three tiers, plus: Mail Server Protection Anti-malware and anti-spam protection of mail traffic for all popular mail systems Security for Internet Gateways Ensure secure internet access across the organisation by automatically removing malicious and potentially hostile programs in HTTP(S)/FTP/ SMTP and POP3 traffic. Collaboration Security Kaspersky defends your SharePoint® servers against malware, while content and file filtering capabilities help prevent the storage of inappropriate content. Introducing in this tier: Centralised Management Endpoint Controls Anti-Malware & Firewall Mobile Security Encryption Mail, Web Collaboration Systems Management MAIL SERVERS: End-to-end protection against malware, encryption, comprehensive IT efficiency and policy enforcement tools. Kaspersky Total Security for Business delivers the most complete platform of protection and management offered in the industry today. Total Security for Business secures every layer of your network and includes powerful configuration tools to ensure your users are productive and free from the threat of malware, regardless of device or location. • Collaboration Servers • Mail Servers • Signature-based Scanner • Proactive Scanner • Workstation • Laptop • File Server Endpoint Controls • Application Control • Web Control • Dynamic Whitelisting KSN INTEGRATION FOR ANTI-SPAM Increases spam detection rate thanks to integration with Kaspersky Lab’s cloud-based threat identification engine (KSN). Reduced Traffic Load Cloud-enabled, intelligent spam filtering significantly reduces traffic load. System Resource Optimisation A new antivirus engine, load balancing of server resources and scan exclusions all reduce the load on your system. INTERNET GATEWAYs: High Performance A powerful antivirus engine plus optimised, intelligent scanning technology and load balancing increase performance and reduce the resources needed for virus scanning. • Internet Gateways Multi-Platform Support Kaspersky Security for Internet Gateway supports most popular gateways based on the Windows and Linux platforms. COLLABORATION Centrally Managed by Kaspersky Security Center Administration Console Anti-malware Protection MAIL TRAFFIC PROTECTION Protecting mail on the latest versions of major mail and collaboration platforms: Microsoft Exchange, IBM Lotus Domino and Linux-based mail servers. Encryption • 256 bit AES • Full Disk • File • Removable/ internal devices Systems Management • Image Deployment • Software Licence compliance • Advanced Vulnerability Scanning • Intelligent Patch Management • Device Control Mobile Device Management and Security • Remote Deployment • Security Proﬁles • Containers • Anti-theft • Application Security • Compliance • Encryption Anti-malware barrier for SharePoint farms Uses innovative detection technology designed to identify and block malware from attempted uploads or downloads in real time. Content Filtering Helps prevent inappropriate external uploads , enforcing internal communication policies and blocking storage of inappropriate files by file type or text content. • Anti-malware • Workstation • Laptop Denotes inclusion of cloud-assisted technologies via the Kaspersky Security Network 14 • Smartphones • Tablets 15 KASPERSKY SECURITY FOR MOBILE Encryption Data in motion is protected via transparent full-disk and file level data encryption which can also be Private ‘App’ Portal applied to a container. Complete mobile security combining Mobile Device Management (MDM) and Endpoint Security for Mobile Devices. Anti-Theft Administrators can remotely perform a full or App App selective device wipe, pinpoint the location of a missing device using GPS “Find” and receive notification if a SIM card is removed or swapped. security risk control: Kaspersky MDM makes the secure configuration of mobile devices painless and straightforward, while Kaspersky Endpoint Security for Mobile Devices provides the protection you need against today’s threats — even on employee owned devices. Detailed Features of Kaspersky Security FOR MOBILE: App App Mobile Anti-Malware Kaspersky Lab’s anti-malware engine features multiple layers of detection including cloud-assisted protection, and combines with a safe browser and powerful anti-spam to ensure the device is not compromised by malicious software. Kaspersky Security Center Corporate and personal Data Integrity: App App Containers In support of an employee-owned device scenario, corporate applications can be placed Appdata and App in isolated “containers”. This provides maximum security for corporate data, and optimal integrity for personal content. Remote Data Safety Tools In the event a device is misplaced, Remote Lock can be engaged. Corporate data within a container on the device can be secured, encrypted, remotely managed and wiped independently of personal data on the device. IT Efficiency features: Private Application Portal Administrators publish a corporate portal that contains links to approved applications. Users can be limited to only these applications only. Compliance and Policy Enforcement Application control allows the monitoring and control of application usage on the device including ‘Default Deny’ and ‘Default Allow’ support. “Over The Air” Provisioning Secures phones remotely by sending either an email or SMS containing a link to the corporate portal where users can download the profile and applications you’ve approved. Access to data won’t be granted until the user has accepted. Containerisation Private ‘App’ Portal Personal Secure Configuration Ensures hardware and software integrity by enabling rooting and jailbreak detection. Other security settings include ‘camera disable’, forced password and more. Corporate Simple Configuration via a Single Console Unlike other solutions, Kaspersky Lab allows administrators to use only one console to manage the security of mobile devices, physical endpoints, virtual systems, encryption and policy enforcement tools. • Keeps corporate data separate • Encrypted • Selectively wiped App App App App App App App App Kaspersky Security Center Perfect for “Bring Your Own Device” (BYOD) initiatives Mobile Device Management and Security Containerisation Many employees use their own devices for both personal and corporate tasks. In fact, some organisation encourage workers to choose their preferred smartphone or tablet from a retailer, and IT adds email and corporate access to the employee-owned device. Apple MDM Internet • Android, Symbian and BlackBerry Devices 16 • Windows Devices • iOS Devices Application Portal Personal Microsoft Exchange ActiveSync There are savings and productivity benefits, but BYOD can also open the organisation to security risks. Corporate data, improperly secured and potentially co-mingled with personal items, can be easily exploited. Often these devices are also used by family members with no regard for application security. Some are even rooted or jailbroken. Corporate Kaspersky Security Center Kaspersky Security for Mobile solves these problems by enabling secure configuration and deployment of smartphones and tablets using the same console as your network security. IT administrators • Keeps corporate can be data separate confident that user devices are configured with the correct settings and can be secured in the event of • Encrypted loss, theft or user abuse. • Selectively wiped 17 KASPERSKY Systems Management Introducing Kaspersky Systems Management. This solution offers a broad set of powerful IT productivity tools written into the same code and managed from one console. The resulting platform provides the simplicity and automation you want — and the security and control you need. Disparate IT tools create complexity — and complexity is the enemy of security. Avoid duplication Eliminate the duplication of effort involved in setting up individual systems for new and existing users. Using system provisioning technology, disk images can be created, managed and deployed from a central location. Enhance security Administrators tell us their days are often filled with ensuring patches are up to date. Kaspersky helps to remove complexity by identifying vulnerabilities that could be immediately exploited and which fixes can be postponed for after-hours. This prioritising helps administrators plan their day and increase their security posture. SYSTEMS MANAGEMENT FEATURES: Operating System and Application Provisioning Easy creation, storage, cloning and deployment of system images from a central location. Ensure systems are delivered to the user without issues and with optimal security settings. This tool is wellsuited for migration to Microsoft Windows 8. Support for Microsoft Windows Server Update Services (WSUS) Kaspersky Systems Management regularly synchronises data on available updates and hotfixes with servers, including Microsoft Windows Update, downloading them via Windows Update Services and efficiently distributing them. Stay on Top of Vulnerabilities A one-click hardware and software scan compares results across multiple vulnerability databases, so you can prioritise which vulnerabilities need immediate attention and which you can postpone for after-hours. Network Admission Control (NAC) With Network Admission Control (NAC), you can create a network ‘guest’ policy. Guest devices (including mobile devices) are automatically recognised and sent to a corporate portal where the correct credentials enable them to use the resources you’ve approved. Remote, Flexible Software Installation Minimise network workload by using either manual or scheduled deployments. Remote Agents Assign a workstation in a remote or branch office as a central update agent. Save bandwidth by sending one update to a remote office — and using the assigned local workstation to distribute the update for that location. Support for Wake-on-LAN Technology For after-hours deployment or support, Kaspersky Systems Management can power-on a workstation remotely. Troubleshooting Tools Remotely and securely connect to a client system to fix issues — from the same administrative console. Hardware and Software Inventories PCs, hard drives and even removable devices are automatically discovered and inventoried. The introduction of a new device triggers a notification to the administrator. This feature enables the administrator to track the status and usage of hardware on the network. Licence Provisioning and Control Kaspersky Systems Management reports exactly what software is in use within your environment. This enables you to adjust your licencing costs and identify users who are out of compliance. When deployed with Kaspersky Lab’s endpoint control tools, you can limit usage only to approved applications and versions - and restrict the number of licences in use at any one time. Work efficiently Administrators can remotely install images, updates, patches and applications. If a user has an issue, IT can remotely log in to the machine and troubleshoot the system. This means the administrator isn’t wasting time by moving from desk to desk or spending frustrating hours providing less productive phone support. These features and more are part of Kaspersky Systems Management and are accessed through the Kaspersky Security Center administration console. Because each tool doesn’t require its own console, commands are consistent and intuitive, requiring no additional training. 18 19 KASPERSKY SECURITY for File Server KASPERSKY SECURITY for mail Server Kaspersky Security for File Server reliably protects servers running Microsoft® Windows®, Novell NetWare and Linux from all types of malicious programs. Kaspersky Security for Mail Server protects mail and groupware servers from malicious programs and spam. Antivirus protection for shared file storage is essential, as a single infected file on a server could infect the workstations of all users of the resource. Proper protection of the file server not only ensures that users and their data are protected, but also eliminates the danger of malicious programs making their way into backup copies of files, which could cause repeated malware outbreaks and other incidents. Product Highlights* •Support for the latest versions of Microsoft® Windows® and Linux platforms •Optimised usage of system resources •Support for Hierarchical Storage Management systems (HSM) •Protection of terminal servers and cluster servers •VMware Ready certification •NSS file system support •Free BSD support Product Highlights* Mail Server Protection Anti-malware and anti-spam protection of mail traffic for all popular mail systems. System Resource Optimisation A new anti-virus engine, load balancing of server resources and scan exclusions all reduce the load on your system. KSN integration for anti-spam Increases spam detection rate thanks to integration with Kaspersky Lab’s cloud-based threat identification engine (KSN). Reduced Traffic Load Cloud-enabled, intelligent spam filtering significantly reduces traffic load. Features Features •Protection of file servers running Windows (including Windows Server® 2008 R2), Linux (including Samba) and Novell NetWare •Enhanced proactive protection from new malicious programs •Real-time antivirus protection •Treatment of active infections •On-schedule scanning of file storage •Scanning of critical system areas •Isolation of infected workstations ® •Scalability •Backup storage of data prior to disinfection or deletion •Centralised installation, management and updates •Choice of installation and management methods •Flexible system of scanning and incident response scenarios •Application status notification system •Comprehensive reports on network protection status Applications •Kaspersky Anti-Virus for Windows® Servers Enterprise Edition •Kaspersky Anti-Virus for Linux File Server •Kaspersky Endpoint Security for Windows® •Kaspersky Anti-Virus for Novell NetWare •Kaspersky Security Center *Product features may vary depending on the combination of components used. Please see the component descriptions at: www.kaspersky.com for more information about individual component features. 20 The product includes applications that protect mail traffic for all popular servers, including Microsoft® Exchange, Lotus® Domino®, Sendmail, Qmail, Postfix, Exim and CommuniGate Pro. The solution can also be used to set up a dedicated mail gateway. •Integrated protection of mail servers from all types of malicious programs •Efficient protection against spam •Real-time antivirus protection •On-schedule scanning of emails and databases •Protection for Sendmail, qmail, Postfix, Exim and CommuniGate Pro mail servers •Scanning of messages, databases and other objects on Lotus® Domino® servers •Scanning of all messages on the Microsoft® Exchange server, including public folders •Filtration of messages by attachment type •Scalability •Support for Microsoft® Exchange Server 2007 clusters and DAG for Microsoft® Exchange Server 2010 •Backup storage of data prior to disinfection or deletion •Isolation of infected objects •Cancellation of repeated mail scanning •Convenient tools for installation, management and updates •Comprehensive reports on protection status •Flexible system of scanning and incident response scenarios •Application status notification system Applications •Kaspersky Security for Microsoft® Exchange Servers •Kaspersky Anti-Virus for Lotus® Domino® •Kaspersky Security for Microsoft® Exchange Server 2003 •Kaspersky Security for Linux Mail Server *Product features may vary depending on the combination of components used. Please see the component descriptions at: www.kaspersky.com for more information about individual component features. 21 KASPERSKY SECURITY for Internet Gateway KASPERSKY SECURITY for Collaboration Kaspersky Security for Internet Gateway provides secure Internet access for all employees in an organisation. Kaspersky Security for Collaboration applies the latest in protection technologies to your Collaboration platform, combining ease of management and high malware detection rates. •Protection of Microsoft® Forefront® TMG •Wide variety of policy management and configuration tools •Scanning of VPN-connections •Email traffic protection (via POP3 and SMTP protocols) •Scanning of HTTP and FTP traffic from published servers •VMware Ready certification Features •Real-time scanning of internet traffic using HTTP, HTTPS, FTP, POP3 and SMTP protocols •Integrated protection from all types of malicious programs •Support for Squid, Blue Coat and Cisco® proxy servers •Backup storage •Load balancing of server processors •Scalability •Convenient tools for installation, management and updates •Flexible system of scanning and incident response scenarios •Comprehensive reports on network protection status Features •Innovative malware detection technology is designed to identify and block threats from attempted uploads or downloads in real time •Prevents end users from storing specified types of files, (e.g. music, video, executable files) or files with inappropriate text •Global management settings can be configured on all protected servers from a single dashboard •Simple, intuitive management — no special training needed •Integration with Active Directory streamlines setup and user authentication •Detailed logs and backup of modified files help support administrators responding to violations or security issues •Detailed, flexible reporting Internet (External Users) External Product Highlights* Kaspersky Security for Collaboration uses Kaspersky’s award-winning antivirus engine to protect Microsoft® SharePoint® environments. With award-winning malware detection technology, the product can protect a single server or entire SharePoint farms — while its content and file filtering capabilities help prevent storage of inappropriate content. Kaspersky Security for Collaboration Web Front End Firewall Application Servers SQL Servers Internal Kaspersky Security for Internet Gateway supports most popular gateways based on the Windows and Linux platforms. Known malicious and potentially dangerous programs running via HTTP, HTTPS, FTP, POP3 and SMTP protocols are automatically deleted from the data flow. Optimisation technology, scalability and support for the latest platforms make it the ideal product for large organisations with huge volumes of traffic. Web Front End Kaspersky Security for Collaboration Applications •Kaspersky Anti-Virus for Microsoft® ISA Server and Forefront® TMG Standard Edition •Kaspersky Anti-Virus for Microsoft® ISA Server Enterprise Edition •Kaspersky Anti-Virus for Proxy Server Internal Users *Product features may vary depending on the combination of components used. Please see the component descriptions at: www.kaspersky.com for more information about individual component features. 22 23 Agentless Security Deployment VM VM VM MANAGEMENT FEATURES: APP APP APP KASPERSKY SECURITY for Virtualization Virtual Single management console. OS OS OS Appliance Kaspersky Security Center — which is available at no additional cost — VMware is a single management console vShield that lets you manage the security of virtual machines, physical machines and mobile VMware ESXidevices. Supports VMware vMotion. By fully supporting VMware vMotion, Kaspersky Physical Security for Virtualization ensures that protection is Host not interrupted when a workload is moved from one ESXi host to another. Provided the new host has the necessary licences, the protection will follow the workload and all security settings will remain the same. Kaspersky Security for Virtualization – built for the unique requirements of virtualised IT environments — delivers award-winning anti-malware protection for virtualised servers, desktops and data centers. Kaspersky Security for Virtualization is an agentless anti-malware solution that provides a more efficient way to protect your virtualised infrastructure — with greater performance and less impact on virtualisation density. The application is easy to deploy and includes advanced management features that simplify a wide range of security tasks — across both physical and virtual computing assets. Mobile Workstations •Advanced Antivirus Engine. Kaspersky’s awardwinning anti-malware technologies — together with Kaspersky’s industry-leading frequency of updates — help to protect against new and emerging threats. A heuristic analyser combats polymorphic malware. VM VM APP APP APP OS OS OS APP APP OS OS APP APP OS OS OS Virtual Appliance APP APP OS OS APP APP APP APP OS OS OS OS UNIFIED ADMINISTRATION CONSOLE (Kaspersky Security Center) +VMware vShield Workstations Mobile Devices Virtual Appliance Kaspersky Security for Virtualization Kaspersky Lab Security Solution VMware vShield VMware ESXi •Automatic Protection. New virtual machines are automatically provided with anti-malware protection — to help eliminate security gaps and misconfigurations. Any guest VM is always protected with the latest signature database regardless of whether a VM was previously off line. Physical Host •Higher density virtualisation. Because Kaspersky Security for Virtualization is an agentless solution, it helps to eliminate ‘Update Storms’ and ‘Scan Storms’, achieve higher density virtualisation, reduce impact on performance and address security gaps that can be introduced by some agent-based products. Kaspersky Security for Virtualization provides agentless antivirus for VMware deployments. Mobile Workstations 24 Agent-based Virtual Deployment APP Agentless Security Deployment VM File Server Agentless Virtual Deployment PROTECTION AND PERFORMANCE FEATURES •Centralised security. Kaspersky Security for Virtualization is a virtual appliance that plugs into VMware’s vShield Endpoint – to deliver antimalware scanning capabilities. It provides a single, centralised anti-malware engine and database for each physical host. Integrated with VMware vCenter. Kaspersky Security for Virtualization receives information about virtual machines from vCenter — including a list of all virtual machines and relevant parameters. In addition to giving the IT team better visibility, this integration with vCenter ensures that protection is automatically provided whenever a new virtual machine is configured. Agentless Virtual Deployment APP File Server Agent-based Virtual Deployment APP APP 25 KASPERSKY Anti-Virus for Storage Kaspersky Anti-Virus for Storage protects the EMC Celerra family of network storage products from all types of malware. Data storage systems on a network provide employees working in organisations of all sizes with fast and easy shared access to information. However, if a corporate network is unprotected, access to shared files can lead to some very undesirable consequences. A single infected file stored on a system may compromise the entire network, potentially causing substantial business, financial and reputational damage. That is why comprehensive protection for network storage systems is absolutely essential. Kaspersky Anti-Virus for Storage is fully compatible with the EMC Celerra range of products. It has been expertly designed to provide them with the highest levels of protection, detecting and neutralising malware from files and archives stored in Celerra systems. The solution allows administrators to configure the system to perform scanning tasks in real-time as objects are saved and modified, or on-demand if required. Features •Protection for EMC Celerra data storage systems •Support for Windows Server® 2008 R2 •Support for Hierarchical Storage Management systems (HSM) •Enhanced proactive protection from new malicious programs •Real-time antivirus protection •On-schedule scanning of file storage •Scanning of critical system areas •Optimised usage of system resources 26 •Backup storage of data prior to disinfection or deletion •Scalability •VMware Ready certification •Centralised installation, management and updates through Kaspersky Security Center •Integrates fully with the Kaspersky Endpoint Security for Business Platform and other Kaspersky Products •Application status notification system •Comprehensive reports on network protection status Kaspersky Lab UK & Ireland 97 Jubilee Avenue, Milton Park, Abingdon, Oxfordshire, OX14 4RW www.kaspersky.co.uk All about Internet security: www.securelist.com Find a partner near you: www.kaspersky.com/buyoffline © 2013 Kaspersky Lab ZAO. All rights reserved. Registered trademarks and service marks are the property of their respective owners. Mac and Mac OS are registered trademarks of Apple Inc. Cisco is a registered trademark or trademark of Cisco Systems, Inc. and/or its affiliates in the U.S. and certain other countries. IBM, Lotus, Notes and Domino are trademarks of International Business Machines Corporation, registered in many jurisdictions worldwide. Linux is the registered trademark of Linus Torvalds in the U.S. and other countries. Microsoft, Windows, Windows Server and Forefront are registered trademarks of Microsoft Corporation in the United States and other countries. Android™ is a trademark of Google, Inc. The Trademark BlackBerry is owned by Research In Motion Limited and is registered in the United States and may be pending or registered in other countries.