Video Screencast Help
Search Video Help Close Back
to help

Security Community Blog

Showing posts in English
Symantec Corp. | 29 Oct 2012 | 0 comments

By Rob Greer, Vice President & General Manager, Enterprise Mobility, Symantec

Over the last few years, we’ve seen an increase in the number of new mobile operating systems. The latest example is Microsoft’s announcement today of the availability of Windows Phone 8. At Symantec, we work to ensure that our customers are able to protect and manage their data, apps, devices and users on all mobile platforms. As such, we’re pleased to announce that Symantec Mobile Management Suite – a single solution that covers mobile device management, mobile application management, and mobile security – now provides support for the new Windows Phone 8 platform.

As users start to access corporate email and other resources with their new Windows Phone 8 devices, businesses will need to protect these activities. The mobile device management component of the suite,...

Swathi Turlapaty | 26 Oct 2012 | 0 comments

As companies move to the cloud and offer their employees increased mobility, IT needs toexamine new methods of ensuring trustworthy access. Companies can no longerrely on traditional security models, because they are obsolete and in turn elevating risk. This calls for new ways of ensuring trustworthy access, including risk-based authentication methods that strike a balance between robust security and accessibility. Symantec offers a diverse set of integrated authentication technologies that are highly flexible, lower total cost of ownership, and leverage Symantec's expertise and investment in operational excellence. To find out how to provide risk-based authentication methods that strike a balance between security and accessibility, read this article http://bit.ly/SyVBTw

Pritesh J. Chauhan | 25 Oct 2012 | 0 comments

Approximately two weeks since my last post I write again this morning (times as per current location) whilst on a break in between sessions in a Worldwide Technical Symposium based Las Vegas. This is where a number of Symantec Technical employees attend a five day conference to not only enhance their knowledge around Symantec products and Solutions, but to also develop existing relationships further and knowledge share, ultimately to ensure our customers have a much better experience. We are all here so we can better protect the world people and information.

I am sat near the front of the lab today, learning about the advanced configurations of the Symantec Web Gateway and how it works when connected to SSIM and the DLP offerings - powerful is a plain understatement of what this solution can do for an organisation.

Whilst I write, a lot of the people in the lab have gone for a quick coffee break and I am sat here with approximately three other people, who in the...

Teresa Law | 21 Oct 2012 | 0 comments

Announcing Managed PKI Service v8.6

Symantec would like to announce the release of Managed PKI Service v8.6, which includes new Managed PKI clients for the Android and the Apple Mac. 

Summary of New Features:

  • Transparent certificate enrollment and automation capabilities across all platforms
  • PKI Client for Android (can be downloaded from Google Play)
  • PKI Client for MAC
  • Microsoft’s Auto Enrollment enhancements that provide post processing functionality with fully transparent auto enrollment through PKI Client (not available with Microsoft Auto Enrollment alone)
  • Certificate Management enhancements
  • Enterprise Gateway GUI based installer
  • Allow configuration of KU and EKU extensions

Enhancements such as theAndroid client are one of the Symantec tools that can help organizations more safely and economically adopt Bring Your Own Device (BYOD...

Eileen | 19 Oct 2012 | 0 comments

Sealed Air Corporation, which operates in 62 countries and employs over 26,000, needed to step up their risk management, improve IT staff productivity, and have a service in place for around the clock monitoring. Sealed Air turned to Symantec Managed SecuritySolutions to aid them in tackling and managing risk. As a result, Sealed Air was able to focus on its business, protect assets, and increase both IT productivity and IT risk posture. To learn more about Sealed Air’s implementation of Symantec products, watch this video.

 

...

Johnny Karam | 16 Oct 2012 | 0 comments

It is day three of GITEX and I’ve been talking from morning to night with CIOs, IT executives and partners. But I’m not tired...I’m actually energised. Energised because now more than ever before I am seeing how Symantec is an integral piece of the puzzle at the heart of Middle East organizations – and that is exciting!

In making the rounds at this premiere IT event for the Middle East, one of the resounding subjects in every discussion has been cyber security threats. The recent blaze of high profile attacks in the region has brought to life the growing concern and deeper awareness of the threats that organisations are facing today and how to protect their information and minimize the risks from undue downtime, unwanted costs and damage to brand reputation.

It is clear that endpoint security is no longer enough, and organisations need to employ a defence in-depth security strategy that includes a mix of aware, educated end users; strict...

James Hanlon | 07 Dec 2012 | 0 comments

Cyberspace presents an incredible amount of opportunity for today’s organisations. Connectivity, innovation, productivity and collaboration are just some of the benefits on offer. However, cyberspace presents equally significant risks. Those risks can have huge impact and visibility; it seems that a week cannot go by without another cyber incident being splashed across internet feeds, newspapers and websites. This visibility means that cyber risks have the attention of the executive management of every organisation.

Cyber risks include targeted attacks, advanced persistent threats, data loss, denial-of-service attacks, hackitivism, negligent and malicious insiders, reputational damage, cyber espionage and nation state threats. In 2011, Symantec blocked over 5.5 billion malware attacks, an 81% increase over the previous year, witnessed a 36% increased in web based attacks and an increased focus and intensity of advanced persistent...

Pritesh J. Chauhan | 11 Oct 2012 | 0 comments

 

Over the last few weeks we have been working with a number of customers who have large administrative overheads when protecting their IT Infrastructure.

 

When selecting a new service they have either gone to tender or bought an off the shelf solution upon recommendation from colleagues/friends. 

 

Whilst this may seem great at first, over the years this has built up a number of systems each requiring their own management systems, portals, update systems and most importantly, they lack integration between solutions. Whilst this may seem like a large problem, it gets worse - the issue with these customers was that they had multiple products performing conflicting tasks. 

 

One example from a customer who had one product that is designed to AV scan contents of a USB pen drive upon connection to the machine. Another product to encrypt USB pen drives upon connection. This is great if the admin could...

Nick_Kael | 10 Oct 2012 | 0 comments

An August afternoon 2011 on my patio in New Jersey, My Friend Young Min Ju AKA- “The Minja” was spending some time at my home. We laughed and joked while he smoked his cigars and I drank my Jack Daniels Honey with Ginger Ale. We talked about personal things and somehow the discussion would always find its way back to Information Security and work.

We discussed many security topics and agreed on many of them and agreed to disagree on some of the others, when we got fired up on those topics we enjoyed challenging each other in many ways. One that always came up was based on industry certifications, and we both had a decent amount of them. However he would always trump me with the fact that he had his Certified Ethical Hacker and I did not. The CEH certification was a badge of honor to my friend, and one that I was jealous he had and I did not. So I publically committed to him and others on my patio that day, that I would attain my CEH certification.

Almost...

Matthew R. Ellison | 10 Oct 2012 | 0 comments

This blog continues from Part One.

Firstly we looked at how the email got through in the first place. The technique of an email coming from one place, but appearing to come from another is known as spoofing. Often in larger organisations it is quite normal to have third party applications or companies who legitimately spoof email – Marketing, HR, Cloud based application vendors and many more.

This is what had happened here, some issues with an external vendor had caused them to turn off the Content Control rule to allow spoofed email to be delivered. Of course what should have happened is for an exception to be created for that particular sender. It was only a temporary change during testing, but had never been fixed (I am not going to comment here on their testing processes).

That was easy...