SEE 6.0 Technical Presentation

8/9/2019 SEE 6.0 Technical Presentation

1/19

Symantec Endpoint Encryption 6.0


2/19

Symantec Endpoint Encryption 2

Data is Pervasive and Portable: Desktops and Laptops

Computer hard drives

Removable storage devices, such as CDs or USB drivesRisk for organizations:

Loss of data and associated expenses

Data at Risk puts your Business at Risk

The Problem with Data


3/19



4/19


Fast-growing, mobile work force

93M laptops, 2008 - 170M USB dev., 50% CAGR

Disclosure is mandatory, costs are gigantic USA: SB1386 36 State laws, 5 Federal bills

Encryption is the only safe harbor

Growing notification requirements, penalties

FSA, BASEL-II, Data Protection Act (UK / EU), EUDirective 95/46/EC

SOX, HIPAA, GLBA

Average tangible cost per breach: ~$7.5 Million1/15th as expensive to prevent

Market Drivers

StricterCompliance

Increased

Mobility

Cost ofDisclosure


5/19

What is Endpoint Encryption and How itWorks


6/19


Product Overview

Symantec Endpoint Encryption 6.0 provides advancedencryption for desktops, laptops and removable storagedevices. It offers scalable security and preventsunauthorized access to endpoints.

Symantec EndpointEncryption 6.0

Symantec Endpoint EncryptionFull Disk Edition

Symantec Endpoint EncryptionRemovable Storage Edition


7/19Symantec Endpoint Encryption 7

Endpoint EncryptionBusiness Benefits

Reduce Risk Protect sensitive, proprietary or protected data

Prevent erosion of trust, brand, goodwill and image

Eliminate the legal liabilities of a data breach

Prove that no information has been lost

Save Money and Time

Reduce time and cost of privacy compliance

Eradicate the customer service costs of data breachdisclosure

Use data security as a competitive advantage

Disclosure(SB1386)

RemediationCost

Legal Liability

Brand Erosion



Endpoint Encryption key Highlights

Pre-boot Protection

Centralized Management

Support for 3rd party Authentication

Seamless Key sharing

Secure user recovery

Enforceable policies

Extensive Reporting

Multiple encryption algorithms



Symantec Endpoint EncryptionFull Disk Edition

Full disk encryption

Encrypts all disk sectors

Supports standby and hibernation modes

Excellent performance

Mandatory pre-boot authentication

Hardened pre-boot operating system

Single Sign-on

Token support

Automatic recovery



Symantec Endpoint EncryptionFull Disk Edition - continued

Multiple user / administrator accts.

Supports multiple users

Password recovery

Two recovery methods

Self Service

Help Desk assisted

Automatic client reportingand audit trail



Transparent, policy-based fileencryption

Multiple devices/media

USB flash drives, USB harddrives, SD cards, CF cards,CDs/DVDs, iPods, etc.

Portability

Password protected executableto decrypt even if you dont havethe application

Self-extracting files

Symantec Endpoint EncryptionRemovable Storage Edition
http://www.sxc.hu/browse.phtml?f=download&id=658960



Monitoring and logging Policies

Activity

Kiosk Mode Operation

Flexibility

A personal key, groupkey, or key for entire

organization

Symantec Endpoint EncryptionRemovable Storage Edition - continued


13/19Symantec Endpoint Encryption

Removable StorageCD/DVD Burning

14



Architecture

15

ADAM

Reporting

Keys

ComputerState

ActiveDirectory

Polic ies Users, Computersand Groups/OUs

Adam

Unique Instance

Does not requireSchemaModification to AD

Allows forApplicationSpecific Needs

SupportsReplication

Active Directory

Authentication

User Identities

Group Policies



Active Directory (AD) Administrators

Overall AD administrators

Perform initial Management Console installation

Delegate control to specific Symantec Endpoint Encryption Policy Administrators

Symantec Endpoint Encryption Policy Administrators

Create Client Setup (.msi) files and deploy to users computers

Create and deploy policy updates to clients

Audit clients with Symantec Endpoint Encryption Client Monitor

Establish Symantec Endpoint Encryption Client Administrators

Symantec Endpoint Encryption Client Administrators

Perform administrative tasks on clients

Unregister users

Extend a scheduled lockout condition

Initiate data recovery operations

Unlock a machine

16

Administrative Roles



Managed Through GPOs

17

Client Admin Accounts

Autologon Timeframe Immediate DecryptionOne-Time Password Off or OnAuthenti-Check Off or On

Authenti-Check Questions Reporting IntervalADAM Client Account Single Sign-On or Password PolicyMax Incorrect Password Attempts

Registration Password & LogonAssistance Messages Decryption Rights Required Network Access Time Limit Display Last User Name at Logon



Additional Endpoint Protection

Results:

ReducedCost, Complexity &

Risk Exposure

IncreasedProtection, Control &

Manageability

Symantec EndpointProtection 11.0

Symantec NetworkAccess Control 11.0

AntiVirus

Antispyware

Firewall

IntrusionPrevention

Device Control

Network AccessControl

Single Agent, Single Console



Additional Data Loss Protection


19/19

Thank You !

Documents

SEE 6.0 Technical Presentation