Endpoint Security Blog

The Endpoint Security Blog is the perfect place to get news addressing global endpoint security, insights from our relationships with government and cyber security industries, and hearing from our think-tank of experts regarding your world, your protection.

Follow Us on Twitter
  • 11
    Updated: dschrader 18 Feb 2011

    SEP 12 Announced

        Symantec today announced the next version of Symantec Endpoint Protection.  This release, version 12.1, will ship later this year.  You can sign up for the beta at http://go.symantec.com/sep12beta/ . Long in coming, this release is a major milestone.  On the face of it, that statement is odd; after all, SEP is mature product and its feature set hasn't at a fundamental level, changed.  It is still offers the critical elements of endpoint security, - malware protection, access control, device control, application control, firewall and IPS. It “kinda, sorta” looks like nothing has changed. Well, don't believe it. There are countless new features in this release, and in subsequent blog posts I will dive into them.  The real change, however, is under the covers and in the test results.  SEP 12 is built on a powerful new stack of security...
  • 10
    Updated: dschrader 31 Dec 2010

    Forefront Endpoint Protection 2010 - the new SEP?

    Today Microsoft introduced Forefront Endpoint Protection 2010.  4 years after Symantec they finally introduced Integration with Configuration Manager, Vulnerability Shielding and Firewall Management – the equivalents of which have all been in Symantec Endpoint Protection for the past 4 years.    The new version of Forefront still lacks functions we consider essential to endpoint security, including: Device control Application inventory or application control (outside of AppLocker) Access control self enforcement Mac & Linux support – only a promise that sometime next year “details on the timing of the Mac/Linux release will be available” Optimizations for virtual environments - no resource leveling – no way to prevent av storms in virtual environments Bootable recovery disk or a tool equivalent to Symantec’s Power Erasure A few additional thoughts:...
  • 0
    Updated: dschrader 03 Nov 2010

    Tips for reducing the impact of SEP in VDI infrastructures

    Garrett Bechler, a Security Solutions Architect at Symantec has put together a valuable list of tips to reduce the impact of SEP in VDI infrastructures.  With his permission, I thought I would post them here.  These are approaches that have been used in some larger (15-20K node) VDI instances to help ensure that SEP has minimal impact. 1)      Upgrade VDI devices (And SEPM) to latest build of SEP in order to take advantage of the new Resource Leveling settings introduced in SEP 11 06, including Scan Randomization and Content Randomization. 2)      Use the content randomizer in the client communication settings to randomize definition and signature delivery. Based on client density we have found the following to be a pretty decent guideline based on a 1 hour client pull based heartbeat: a.      25-30 VDI instances per host – 2 hour randomization b.  ...