Components of Symantec Endpoint Protection and Symantec Network Access Control

Article:HOWTO27562  |  Created: 2010-01-09  |  Updated: 2010-01-20  |  Article URL http://www.symantec.com/docs/HOWTO27562
Article Type
How To

Product(s)

Environment


Components of Symantec Endpoint Protection and Symantec Network Access Control

Table: Product components lists the product's components and describes their functions.

Table: Product components

Component

Description

Symantec Endpoint Protection Manager

Symantec Endpoint Protection Manager is a management server that manages the client computers that connect to your company's network.

Symantec Endpoint Protection Manager includes the following software:

  • The console software coordinates and manages security policies and client computers.

  • The server software provides secure communication to and from the client computers and the console.

See What you can do from the console.

Database

The database that stores security policies and events. The database is installed on the computer that hosts Symantec Endpoint Protection Manager.

See About the management of databases.

Symantec Endpoint Protection client

The Symantec Endpoint Protection client protects the computers with antivirus and antispyware scans, a firewall, an intrusion prevention system, and other protection technologies. It runs on the servers, desktops, and portable computers that you want to protect.

For more information, see the Client Guide for Symantec Endpoint Protection and Symantec Network Access Control.

The Symantec Endpoint Protection Mac client protects the computers with antivirus and antispyware scans.

Symantec Network Access Control client

The Symantec Network Access Control client enforces security policy compliance on the client computers by using Host Integrity checks and self-enforcement capabilities. The client reports its Host Integrity compliance status to a Symantec Enforcer.

For more information, see the Implementation Guide for Symantec Network Access Control Enforcement.

For more information, see the Client Guide for Symantec Endpoint Protection and Symantec Network Access Control.

Symantec Protection Center

Symantec Protection Center is installed when you install Symantec Endpoint Protection Manager. Protection Center lets you integrate management consoles from multiple supported Symantec security products into a single management environment.

Symantec Enforcer (optional)

An Enforcer ensures that the clients that try to connect to the network comply with configured security policies. You can restrict non-compliant computers to specific network segments for remediation and you can completely prohibit access to non-compliant computers.

Symantec Network Access Control includes the following types of Enforcers:

  • The Enforcer appliance, which is a hardware appliance on which you install one of several Symantec Enforcer appliance images.

  • The Integrated Enforcers, which are the software components that interact with a Microsoft DHCP Server and a Microsoft Windows Network Policy Server.

For more information, see the Implementation Guide for Symantec Network Access Control Enforcement.

Symantec Network Access Control On-Demand clients for Windows and Macintosh (optional)

On-Demand clients are the temporary clients that you provide to users when they are unauthorized to access your network because they do not have the software that is compliant with your security policy.

LiveUpdate Server (optional)

The LiveUpdate Server downloads definitions, signatures, and product updates from a Symantec LiveUpdate server and distributes the updates to client computers.

For more information, see the Symantec LiveUpdate Administrator User's Guide.

Central Quarantine (optional)

The Central Quarantine receives suspicious files and unrepaired infected items from the Symantec Endpoint Protection clients. Central Quarantine forwards a sample to Symantec Security Response, which analyzes the sample. If a threat is new, Symantec Security Response produces security updates.

For more information, see the Symantec Central Quarantine Implementation Guide.


Figure: The product components in a network

The product components in a networkenterprise;snac;print;web

See Key features of Symantec Endpoint Protection and Symantec Network Access Control.


Legacy ID



349982


Article URL http://www.symantec.com/docs/HOWTO27562


Terms of use for this information are found in Legal Notices