SEP_SNAC_安全软件销售简介概要.ppt

新的威胁和攻击动机促成了新的保护技术 Symantec终端安全防护的概念 Symantec 防病毒与先进的威胁防护技术结合起来 单一的解决方案提供终端安全防护 单代理、单控制台 终端安全典型销售群体 终端日益成为企业信息安全建设的短板 终端的特点－难于管理 数量众多 配置不一 用户水平参差不齐 重视和投入程度不够 终端安全管理关注点 风险管理和成本控制(CIO) 企业为终端安全不断采购新的安全产品，采购和运维成本如何控制？ 怎样才能从根本上解决终端安全带来的风险？ 终端安全标准化－破解困局的唯一出路 控制安全风险 没有标准化就没有全面的防护 没有标准化就没有统一的管理 没有标准化就没有强制的安全 提高运维效率 没有标准化就没有自动化 没有标准化就没有效率 没有标准化就无法降低成本 终端安全标准化解决方案的四个要求 可管理的、可改善的终端安全 SEP/SNAC－技术的革新 全面的、层次化的终端安全 * * The Symantec Agent adapts its security policy to the type of network connection, such as wireless, Ethernet or VPN, plus the location of the network connection, such as home, an Internet café, or the office. Sygate eliminates rogues that expose the organization to hackers while automating the process, thus enhancing not only protection but also cost effectiveness. Support for the following triggers: - IP address (range or mask) - DNS Server - DHCP Server - WINS Server - Gateway Address - TMP Token Exists (hardware token) - DNS Name Resolves to IP - Policy Manager Connected - Network Connection (wireless, VPN, Ethernet, dialup) * * This process is delivered via Symantec Network Access Control. An innovative solution that ensures endpoint compliance, and ensures it through utilizing the broadest array of enforcement options. [Build text] Whether fitting into an existing infrastructure, say Cisco or Microsoft, Symantec gives you NAC capabilities right out of the box. Without the need to upgrade every switch router, server or VPN concentrator to get you there. We work within your environment to get your endpoints compliant in the fasted time. Pervasive Endpoint Coverage Unmanaged Guests, Contractors, Home Computers Central, Scalable, Flexible Policy Management Distributed servers, redundancy, data base replication, AD integration Universal enforcement (W)LAN, IPSec VPN, SSL VPN, Web Portal Integration with Existing and Emerging Standards 802.1x, Cisco NAC, Microsoft NAP, TCG’s TNC Automated Remediation Process No user intervention required Learning mode