KASPERSKY FOR ENTERPRISE

Transcription

1 KASPERSKY FOR ENTERPRISE PRODUCTS AND SERVICES

2 We re Here to Save Your Business It s a familiar story a new technology becomes a critical business need, it s implemented in the organization, and a whole new set of threats emerges around it. It didn t take long, for example, for cybercriminals to start writing malware specifically targeting mobile devices, or developing threats that could withstand a virtual machine tear-down. There s no shortage of vendors offering new security solutions, purpose-built to address the latest attack vector. But what happens tomorrow? New products designed to solve today s security problems may be unprepared when the threat shifts to a new arena. Why? These point products are often developed by a small group of engineers focusing on a narrow security vision, rather than by teams of experts with a broad perspective on the entire threat landscape. So organizations are forced to adopt a reactive stance, because vendors are not ready with proactive defenses against a full spectrum of potential threats. The enterprise needs security based on expert intelligence that considers and monitors threats from every angle constantly evolving detection methods to a point where potential attack scenarios can be predicted and averted even before they affect your organization. At Kaspersky Lab, our experts develop security tools that not only leverage this intelligence, but themselves contribute even more threat data and insights, feeding into a continuous cycle of improving threat intelligence. The expertise to identify, understand, predict and solve business security problems is built into Kaspersky Lab s DNA. All the products and services in this catalogue are built on our own technology, All are designed to provide your organization with the broadest, deepest levels of security now and in the future, taking advantage of the best threat intelligence ecosystem in the world. Thank you for considering Kaspersky Lab for your security we look forward to working with you! The Kaspersky Lab Team 2 3

3 POWERFUL SECURITY FROM THE TECHNOLOGY LEADERS SECURITY SOLUTIONS AND SERVICES FOR ENTERPRISE In your search for the right security solution, you may find companies who claim to be Number One in technology leadership and threat intelligence. But only one company can make this claim and prove it. It s in our DNA! Kaspersky Lab consistently achieves top scores in more independent security tests than any other vendor Kaspersky Endpoint Security for Business Harnessing the expertise of the world s best threat intelligence ecosystem, Kaspersky Endpoint Security for Business provides a tiered security approach based on a single integrated platform to incorporate features including robust application, device and web control tools, data encryption, mobile endpoint security and MDM, and systems and patch management. Everything is managed from one central console Kaspersky Security Center. We invariably make the first and most relevant major security discoveries Kaspersky Total Security for Business All the endpoint protection and security features of Kaspersky Endpoint Security, together with mail, web and collaboration server security, safeguarding your perimeters and securing your complete enterprise IT environment. Kaspersky Lab is recognised as a Leader by all three of the most prominent and influential global analysts (Gartner, Forrester and IDC) We have built teams of world-renowned threat experts, strategically located around the world, providing unparalleled depth of analysis and understanding of all kinds of threats, from common malware, to targeted attacks and the most sophisticated cyber weapons We are trusted by and have partnerships with the world s premier law enforcement and government agencies, including Interpol and CERTs The Kaspersky Security Network gives us the broadest view of millions of threats from every corner of the world, allowing us to see and predict security incidents Kaspersky Targeted Solutions Kaspersky Services for Enterprise Standalone solutions allowing Kaspersky Lab security to be applied to specific areas of your infrastructure. Some solutions, like Kaspersky Security for Mobile (pages 14 and 15), are also available as part of Kaspersky Endpoint Security for Business. Others, like Kaspersky Security for Virtualization (pages 18 and 19), are available purely as targeted solutions. All are built on the same leading edge technologies and threat intelligence, and all physical, mobile and virtual endpoint security solutions are managed centrally through Kaspersky Security Center. Harnessing Kaspersky s threat intelligence, technical expertise and training skills to boost the security of your brand, your business and your employees Our CEO, Eugene Kaspersky, is the world s foremost, respected, influential security expert As the world s largest privately held IT security company, we are solely focused on technological quality and innovation, unconstrained by short-term, market-driven profit expectations Kaspersky Fraud Prevention A comprehensive, highly tailored and easy-to-use technology platform addressing fraud risks for online and mobile financial transactions. 4 5

4 KASPERSKY ENDPOINT SECURITY FOR BUSINESS Core KEY FEATURES: POWERFUL ENDPOINT ANTI-MALWARE Kaspersky s scanning engines operate at multiple levels in the operating system, rooting out malware. CLOUD ENABLED PROTECTION With the cloud-based Kaspersky Security Network, users are protected in real time against new threats. ENDPOINT ANTI-MALWARE FEATURES: CENTRALIZED MANAGEMENT Administrators can centrally remove existing antivirus software, configure and deploy Kaspersky, and perform reporting all from the same console. Centralized Anti-Malware & Firewall File Server Endpoint Controls Mobile Security & MDM Encryption Systems Mail, Web & Collaboration Award-winning anti-malware informed by Kaspersky Lab s unequalled threat intelligence and expertise, providing enterprise platform coverage together with centralized deployment, management and reporting. FREQUENT UPDATES AND SIGNATURE-BASED PROTECTION Industry-proven traditional signature-based method for detecting malware threats. KASPERSKY SECURITY NETWORK The Kaspersky Security Network (KSN) provides a response to suspected threats, much faster than traditional methods of protection. KSN s response time can be as little as 0.02 seconds! BEHAVIORAL ANALYSIS PERFORMED BY SYSTEM WATCHER Delivers proactive protection against threats that have not yet been recorded in signature databases. HOST-BASED INTRUSION PREVENTION SYSTEM (HIPS) WITH PERSONAL FIREWALL AND NETWORK ATTACK BLOCKER Predefined rules for hundreds of the most commonly used applications reduce time spent on configuring the firewall. BROAD ENTERPRISE PLATFORM SUPPORT Kaspersky offers endpoint security for Windows, Macintosh and Linux, easing the workload of the administrator supporting diverse networks. A layered security model begins with best of breed anti-malware. Because Kaspersky has long been known as the leader in detection and removal of malicious software, there is no better foundation. The Kaspersky Endpoint Security for Business Core tier is centrally managed by the Kaspersky Security Center and is assisted by the cloud-based Kaspersky Security Network. KASPERSKY SECURITY CENTER FEATURES: ONE CENTRAL CONSOLE For remote management of all your Kaspersky protected endpoints. WEB INTERFACE Remotely monitors protection status and reports on key events from an accessible interface. Centrally Managed by Kaspersky Security Center Administration Console INTUITIVE USER INTERFACE Clear, actionable information in an uncluttered dashboard allows administrators to view real-time protection status, set policies, manage systems and obtain reports. SCALABLE SUPPORT Whatever your infrastructure size, Kaspersky Security Center offers deployment and management tools, flexible policy options and robust reporting to meet your growing needs. Signature-based anti-malware engine Proactive anti-malware engine Cloud-Assisted anti-malware via Kaspersky Security Network Firewall & network attack blocker Workstation Laptop Kaspersky Endpoint Security for Business Core Tier. Powerful Anti-Malware featuring Cloud-Assisted. 6 7

5 KASPERSKY ENDPOINT SECURITY FOR BUSINESS Select KEY FEATURES: POWERFUL ENDPOINT ANTI-MALWARE Kaspersky s best of breed signature and heuristics based protection operates at multiple levels in the operating system, rooting out malware. The cloud-based Kaspersky Security Network (KSN) protects users in real time against new threats. FLEXIBLE, GRANULAR CONTROL TOOLS A cloud-based, categorized database of safe and unsafe applications and websites helps the administrator to set and enforce policies for applications and web surfing, while granular controls ensure that only specific devices can plug in to machines on the network. EFFICIENT MOBILE DEPLOYMENT AND SECURITY FOR SMARTPHONES AND TABLETS Agent-based mobile security is available for Android, BlackBerry, Symbian and Windows Phone Mobile devices. Mobile device policies and software can be securely deployed over the air to these and to ios and Samsung devices through mobile device management. Centralized Anti-Malware & Firewall File Server Endpoint Controls Mobile Security & MDM Encryption Systems Mail, Web & Collaboration INTRODUCING IN THIS TIER: ENDPOINT CONTROLS: Tools to enable a mobile workforce, ensure IT security policy conformity and block malware. Kaspersky s Select tier includes mobile device deployment and protection via Mobile Device (MDM) and mobile security technologies. Endpoint control tools (web, device and application) help your organization enforce IT policy, keeping the essential elements of your IT environment secure. APPLICATION CONTROL Enables IT administrators to set policies that allow, block or regulate applications and privileges in the operating system. DEVICE CONTROL Allows the administrator to set, schedule and enforce data policies with removable storage or any other type of peripheral device connected to any bus type, not just USB. WEB CONTROL Means that endpoint-based surfing controls follow the user whether on the corporate network or roaming. DYNAMIC WHITELISTING Real-time file reputations delivered by the Kaspersky Security Network ensure your approved applications are malware free and help maximize user productivity. KASPERSKY SECURITY FOR MOBILE: Mobile Device Remote Deployment Security Profiles Containers Anti-theft Application Security Encryption Centrally Managed by Kaspersky Security Center Administration Console Anti-malware Signature Based Heuristics Cloud Assisted Firewall Network Attack Blocker Smartphones Tablets Workstation Laptop File Server Control Tools Application Control Web Control Device Control INNOVATIVE ANTI-MALWARE TECHNOLOGIES Combined signature-based, proactive and cloudassisted detection results in real-time protection. A safe browser and anti-spam increase the security. DEPLOYMENT WITH OVER THE AIR (OTA) PROVISIONING The ability to pre-configure and deploy applications centrally using SMS, and PC. REMOTE ANTI-THEFT TOOLS SIM-Watch, Remote Lock, Wipe and Find all prevent unauthorized access to corporate data if a mobile device is lost or stolen. APPLICATION CONTROL FOR MOBILE DEVICES Monitors applications installed on a mobile device according to the pre-defined group policies. Includes a Mandatory Application group. SUPPORT FOR EMPLOYEE OWNED DEVICES Corporate data and applications are isolated in encrypted containers which are transparent to the user. This data can be wiped separately. Denotes inclusion of cloud-assisted technologies via the Kaspersky Security Network Kaspersky Endpoint Security for Business Select Tier. Featuring Control tools and Mobile Security. 8 9

6 KASPERSKY ENDPOINT SECURITY FOR BUSINESS Advanced KEY FEATURES: POWERFUL ENCRYPTION TECHNOLOGY Full disk and folder level AES 256-bit encryption protects accidental data loss and allows secure data sharing via removable devices, , network or web, all with transparency to the user. SYSTEMS CONFIGURATION AND PATCH MANAGEMENT Operating systems image creation and deployment, vulnerability scanning, automated patch management, Network Admission Control, inventories and license management combine to provide a fully integrated toolkit administered, for advanced security and simplified management, through a single, user-friendly central console. MOBILE SECURITY AND MDM FOR SMARTPHONES AND TABLETS A combination of advanced mobile security technologies EAS, Apple MDM & Samsung MDM designed to support BYOD initiatives and to protect mobile devices and valuable data stored on them. POWERFUL ENDPOINT ANTI-MALWARE AND FLEXIBLE CONTROLS Kaspersky s cloud-assisted best of breed, antimalware and granular applications, web and device control tools. Centralized Anti-Malware & Firewall File Server Endpoint Controls Mobile Security & MDM Encryption Systems Mail, Web & Collaboration INTRODUCING IN THIS TIER: ENCRYPTION AND DATA PROTECTION: Security tools combined with IT optimization features abound in this valuable array of solutions from Kaspersky Lab. Kaspersky s Advanced tier delivers the protection and management solution your organization needs to enforce IT policy, keep users free from malware, prevent accidental data loss, and enhance IT efficiency. COMPREHENSIVE ENCRYPTION Choose from full-disk or file level, backed by Advanced Encryption Standard (AES) 256 bit encryption, to secure critical business information in the event of loss of any device peripheral. SECURE DATA SHARING Create encrypted and self-extracting packages to ensure data is protected when sharing via removable devices, , network or web. SUPPORT FOR REMOVABLE DRIVES Increases your security through policies that enforce the encryption of data on removable devices. TRANSPARENCY FOR END-USERS Kaspersky s encryption solution is seamless and invisible to users, and has no adverse impact on productivity. No impact on application settings or updates, either. SYSTEMS CONFIGURATION AND PATCH MANAGEMENT: Anti-malware Centrally Managed by Kaspersky Security Center Administration Console Signature Based Heuristics Cloud Assisted Firewall Network Attack Blocker Endpoint Controls Application Control Web Control Dynamic Whitelisting Device Control Encryption Full Disk File/Folder level Removable devices Workstation Laptop File Server Denotes inclusion of cloud-assisted technologies via the Kaspersky Security Network Systems Image Deployment Software License Advanced Vulnerability Scanning Intelligent Patch Mobile Device and Security Remote Deployment Security Profiles Containers Anti-theft Application Security Encryption Anti-malware Smartphones Tablets Kaspersky Endpoint Security for Business Advanced Tier. Featuring Encryption Technology and Security Systems. AUTOMATED VULNERABILITY ASSESSMENT AND PATCH MANAGEMENT Automated OS and application vulnerability detection and prioritization combined with the automated distribution of patches and updates for both Microsoft and non-microsoft software. SYSTEM IMAGES AND APPLICATIONS DEPLOYMENT Easy creation, storage and deployment of OS images from a central location. Perfect for a migration to Microsoft Windows 8 and later versions. THROUGHOUT YOUR GLOBAL INFRASTRUCTURE Software distribution includes silent installation mode support and the easy deployment of more than 100 of the most popular applications, based on data from Kaspersky Security Network. Remote troubleshooting helps resolve incidents remotely and safely. Remote offices can also reduce Internet traffic and speed up software rollout by using special agents with the Multicast technology. NETWORK ADMISSION CONTROL (NAC) NAC makes controlling guest access easy and straightforward. New devices on the network are automatically recognized and checked across hard inventory and IT security policies. Compromised devices are automatically denied access to the corporate network and its resources, while guest devices are automatically redirected to the guest captive portal and granted Internet access. INVENTORY AND LICENSE CONTROL Hardware and Software inventories help to improve network visibility and allow administrators to see what devices and software are in use on the corporate network. Administrators can also track software license usage, control license expiration dates, understand the number of available licenses and identify what software rights should or should not be purchased

7 KASPERSKY TOTAL SECURITY FOR BUSINESS KEY FEATURES: All the features of the previous three tiers, plus: MAIL SERVER PROTECTION Anti-malware and anti-spam protection of mail traffic for all popular mail systems. SECURITY FOR INTERNET GATEWAYS Ensure secure Internet access across the organization by automatically removing malicious and potentially hostile programs in HTTP(S)/FTP/ SMTP and POP3 traffic. COLLABORATION SECURITY Kaspersky defends your SharePoint servers against malware, while content and file filtering capabilities help prevent the storage of inappropriate content. INTRODUCING IN THIS TIER: Centralized Anti-Malware & Firewall File Server Endpoint Controls Mobile Security & MDM Encryption Systems Mail, Web & Collaboration MAIL SERVERS: End-to-end protection against malware, encryption, comprehensive IT efficiency and policy enforcement tools. Kaspersky Total Security for Business delivers the most complete platform of protection and management offered in the industry today. Total Security for Business secures every layer of your network and includes powerful configuration tools to ensure your users are productive and free from the threat of malware, regardless of device or location. MAIL TRAFFIC PROTECTION Protecting mail on the latest versions of major mail and collaboration platforms: Microsoft Exchange, IBM Lotus Domino and Linux-based mail servers. KSN INTEGRATION FOR ANTI-SPAM Increases spam mail-based malware detection rates, supported by ongoing intelligence from Kaspersky Lab s cloud-based threat identification engine (KSN). INTERNET GATEWAYS: REDUCED TRAFFIC LOAD Cloud-enabled, intelligent spam filtering significantly reduces traffic load. SYSTEM RESOURCE OPTIMIZATION A powerful antivirus engine, load balancing of server resources and scan exclusions all reduce the load on your system. Collaboration Servers Mail Servers Internet Gateways HIGH PERFORMANCE A powerful antivirus engine plus optimized, intelligent scanning technology and load balancing combine to increase performance and reduce the resources needed for virus scanning. MULTI-PLATFORM SUPPORT Kaspersky Security for Internet Gateway supports most popular gateways based on the Windows and Linux platforms. Anti-malware Centrally Managed by Kaspersky Security Center Administration Console Signature Based Heuristics Cloud Assisted Firewall Network Attack Blocker Endpoint Controls Application Control Web Control Dynamic Whitelisting Device Control Encryption Full Disk File/Folder level Removable devices Systems Image Deployment Software License Advanced Vulnerability Scanning Intelligent Patch Mobile Device and Security Remote Deployment Security Profiles Containers Anti-theft Application Security Encryption Anti-malware COLLABORATION ANTI-MALWARE BARRIER FOR SHAREPOINT FARMS Capable of protecting the entire SharePoint farm, including the front end, SQL server, applications, search, index and more. CONTENT FILTERING Helps prevent inappropriate external uploads, enforcing internal communication policies and blocking storage of inappropriate files by file type or text content. Workstation Laptop File Server Denotes inclusion of cloud-assisted technologies via the Kaspersky Security Network Smartphones Tablets 12 13

8 KASPERSKY SECURITY FOR MOBILE Complete mobile security interfacing with Exchange ActiveSync, Apple MDM and Samsung MDM. Kaspersky Security for Mobile makes the secure configuration of mobile devices painless and straightforward, while providing the protection you need against today s threats even on employee owned devices. SECURITY RISK CONTROL: ENCRYPTION There are two encryption options, available through Kaspersky Security for Mobile: Enforce encryption capabilities, resident in most popular mobile devices, through MDM capabilities Encrypt application containers. ANTI-THEFT Administrators can remotely perform a full or selective device wipe, pinpoint the location of a missing device using GPS Find and receive notification if a SIM card is removed or swapped. CORPORATE AND PERSONAL DATA INTEGRITY MOBILE ANTI-MALWARE Kaspersky Lab s anti-malware engine features multiple layers of detection including signaturebased, proactive and cloud-assisted protection, and combines with a safe browser and anti-phishing to ensure the device is not compromised by malicious software. SECURE CONFIGURATION Ensures hardware and software integrity by enabling rooting and jailbreak detection. Other security settings include camera disable, forced password and more. DETAILED FEATURES OF KASPERSKY SECURITY FOR MOBILE: CONTAINERS In support of an employee-owned device scenario, corporate data and applications can be placed in isolated containers. Additional security policies, like container encryption or additional authorization, can be applied to containers. When employees leave the organization, the containers can be remotely wiped, while leaving personal files untouched. MANAGEMENT FEATURES MULTIPLE MOBILE PLATFORMS VIA A SINGLE ADMINISTRATION CONSOLE Unlike other solutions, Kaspersky Lab allows administrators to use only one console to manage the security of mobile devices, physical endpoints, virtual systems, encryption and policy enforcement tools. REMOTE DATA SAFETY TOOLS MDM features mean that in the event that a device is misplaced, Remote Lock can be engaged. Corporate data within a container on the device can be secured, encrypted, remotely managed and wiped independently of personal data. OVER THE AIR PROVISIONING Smartphones and tablets can be enabled into the corporate network Over The Air (OTA) via a link or a QR code, sent to the employee by or SMS. The IT security solution can be installed automatically. This avoids any IT security gaps and automates administrative routines. COMPLIANCE AND POLICY ENFORCEMENT Application Control allows the management and restriction of applications company-approved applicaitons only, while prohibiting the usage of unwanted apps in granular way (supported by KSN). Application inactivity control sets time limits on how long any application can remain idle before re-login is required. PRIVATE APPLICATION PORTAL Administrators publish a corporate portal that contains links to approved applications. Users can be limited to these applications only. SUPPORT TO MICROSOFT EXCHANGE ACTIVE SYNC, APPLE MDM SERVER AND SAMSUNG MDM Kaspersky Security for Mobile supports all functionality provided by EAS, Apple MDM and Samsung MDM. Administrators can enforce PIN settings, define password complexity, control encryption features, prevent camera usage and manage other related features. Separate consoles for each MDM component are not required - all actions can be performed from Kaspersky s single management console. PERFECT FOR BRING YOUR OWN DEVICE (BYOD) INITIATIVES Many employees use their own devices for both personal and corporate tasks. In fact, some organizations encourage workers to choose their preferred smartphone or tablet from a retailer, and IT adds and corporate access to the employee-owned device. There are savings and productivity benefits, but BYOD can also open the organization to security risks. Corporate data, improperly secured and potentially co-mingled with personal items, can be easily exploited. Often these devices are also used by family members with no regard for application security. Some are even rooted or jailbroken. Kaspersky Security for Mobile solves these problems by enabling secure configuration and deployment of smartphones and tablets using the same console as your network security. IT administrators can be confident that user devices are configured with the correct settings and can be secured in the event of loss, theft or user abuse

9 KASPERSKY SYSTEMS MANAGEMENT Introducing Kaspersky Systems. This solution offers a broad set of powerful IT productivity tools written into the same code and managed from one console. The resulting platform provides the simplicity and automation you want and the security and control you need. DISPARATE IT TOOLS CREATE COMPLEXITY AND COMPLEXITY IS THE ENEMY OF SECURITY. Avoid duplication Eliminate the duplication of effort involved in setting up individual systems for new and existing users. Using system provisioning technology, disk images can be created, managed and deployed from a central location. Enhance security Administrators tell us their days are often filled with ensuring patches are up to date. Kaspersky helps to remove complexity by identifying vulnerabilities that could be immediately exploited and which fixes can be postponed for after-hours. This prioritization helps administrators plan their day and increase their security posture. Work efficiently Administrators can remotely install images, updates, patches and applications. If a user has an issue, IT can remotely log in to the machine and troubleshoot the system. This means the administrator isn t wasting time by moving from desk to desk or spending frustrating hours providing less productive phone support. These features and more are part of Kaspersky Systems and are accessed through the Kaspersky Security Center administration console. Because each tool doesn t require its own console, commands are consistent and intuitive, requiring no additional training. SYSTEMS MANAGEMENT FEATURES: OPERATING SYSTEM AND APPLICATION PROVISIONING Easy creation, storage, cloning and deployment of system images from a central location. Ensure systems are delivered to the user without issues and with optimal security settings. This tool is wellsuited for migration to Microsoft Windows 8 and later versions. STAY ON TOP OF VULNERABILITIES A one-click hardware and software scan compares results across multiple vulnerability databases, automatically prioritizing vulnerabilities, defining which need immediate attention and which you can postpone for after-hours. REMOTE AGENTS Assign a workstation in a remote or branch office as a central update agent. Save bandwidth by sending one update to a remote office and using the assigned local workstation to distribute the update for that location. SUPPORT FOR WAKE-ON-LAN TECHNOLOGY For after-hours deployment or support, Kaspersky Systems can power-on a workstation remotely. TROUBLESHOOTING TOOLS Remotely and securely connect to a client system to fix issues from the same administrative console. SUPPORT FOR MICROSOFT WINDOWS SERVER UPDATE SERVICES (WSUS) Kaspersky Systems regularly synchronizes data on available updates and hotfixes with servers, including Microsoft Windows Update, downloading them via Windows Update Services and efficiently distributing them. NETWORK ADMISSION CONTROL (NAC) NAC makes controlling guest access easy and straightforward. New devices on the network are automatically recognized and checked across hard inventory and IT security policies. Compromised devices are automatically denied access to the corporate network and its resources, while guest devices are automatically redirected to the guest captive portal and granted Internet access. HARDWARE AND SOFTWARE INVENTORIES PCs, hard drives and even removable devices are automatically discovered and inventoried. The introduction of a new device triggers a notification to the administrator. This feature enables the administrator to track the status and usage of hardware on the network. LICENSE PROVISIONING AND CONTROL Kaspersky Systems reports exactly what software is in use within your environment. This enables you to adjust your licensing costs and identify users who are out of compliance. When deployed with Kaspersky Lab s endpoint control tools, you can limit usage to only approved applications and versions - and restrict the number of licenses in use at any one time

10 KASPERSKY SECURITY FOR VIRTUALIZATION Kaspersky Security for Virtualization is a flexible solution which delivers both protection and performance for your environment. LIGHT AGENT FOR ADVANCED PROTECTION Kaspersky Security for Virtualization includes a powerful but lightweight agent which is deployed on each virtual machine. This allows for the activation of advanced endpoint security features. These include vulnerability monitoring, application, device and web controls, antivirus protection for instant messaging, mail and web, plus advanced heuristics. The result is powerful, multi-layered security combined with efficient performance. Light Agent Deep scanning from network threats Controls Kaspersky Security for Virtualization Light agent configuration Security Virtual Appliance Anti-malware databases Centralized file scanning SECURITY VIRTUAL APPLIANCE (SVA) Kaspersky Lab provides two compelling solutions in this space, both of which rely on a Security Virtual Appliance. Kaspersky Lab s Security Virtual Appliance (SVA) centrally scans all VMs in the host environment. This architecture provides efficient VM protection without sacrificing endpoint resources, eliminating AV scanning, update storms and instant on-gaps, and resulting in greater consolidation ratios. INTEGRATION WITH PLATFORM ARCHITECTURE Kaspersky Security for Virtualization supports VMware, Microsoft Hyper-V and Citrix Xen platforms and their core technologies. AGENTLESS CONFIGURATION VMWARE ENVIRONMENTS Tight integration levels with VMware technologies mean that Kaspersky Security for Virtualization can also be very easily deployed and managed on this platform in an agentless security configuration. All security activity is concentrated in the Security Virtual Appliance, interfacing with vshield for instant automatic virtual machine protection and with vcloud for network protection. Advanced security features such as file quarantine, HIPS, vulnerability scanning and endpoint controls are not available in this configuration. Every virtual machine gets basic anti-malware protection automatically without any additional software Kaspersky Security for Virtualization Agentless configuration Security Virtual Appliance Anti-malware databases Centralized file scanning VMware Microsoft Hyper-V Citrix Xen High availability Dynamic memory Dynamic memory control vcenter integration Cluster Shared Volumes VM protection & recovery (VMPR) Host DRS (vmotion) Live Backup Xenmotion (live migration) Horizon View (full clones and linked clones) Live Migration Multi-stream ICA Citrix receiver Personal vdisk KEY PRODUCT FEATURES Centralized management via Kaspersky Security Center Centralized VM protection via a single SVA Advanced anti-malware Host-based Intrusion Prevention (HIPS) and firewall Endpoint controls for applications, web access and peripherals FLEXIBLE LICENSING Depending on your needs, Kaspersky Security for Virtualization is available in the following license options: Machine-based licensing: Per desktop Per server Resource-based licensing: Per core Cloud-assisted security via Kaspersky Security Network Network attack blocker Anti-phishing Anti-virus for IM, mail and Internet traffic No additional installation or reboots for new VMs* MULTIPLE PLATFORMS: SINGLE COST A single license of Kaspersky Security for Virtualization includes support for virtual environments based on Citrix, Microsoft and VMware. * For non-persistent VMs, instant protection is available after including the light agent into the VM s image. For persistent VMs, the administrator must deploy the light agent manually during installation

11 KASPERSKY SECURITY FOR FILE SERVER KASPERSKY SECURITY FOR MAIL SERVER Kaspersky Security for File Server reliably protects servers running on Microsoft Windows and Linux platforms from all types of malicious programs. Antivirus protection for shared file storage is essential, as a single infected file on a server could infect the workstations of all users of the resource. Proper protection of the file server not only ensures that users and their data are protected, but also eliminates the danger of malicious programs making their way into backup copies of files, which could cause repeated malware outbreaks and other incidents. PRODUCT HIGHLIGHTS * Kaspersky Security for Mail Server protects mail and groupware servers from malicious programs and spam. The product includes applications that protect mail traffic for all popular servers, including Microsoft Exchange, Lotus Domino, Sendmail, qmail, Postfix, Exim and CommuniGate Pro. The solution can also be used to set up a dedicated mail gateway. PRODUCT HIGHLIGHTS * MAIL SERVER PROTECTION Anti-malware and anti-spam protection of mail traffic for all popular mail systems. REDUCED TRAFFIC LOAD Cloud-enabled, intelligent spam filtering significantly reduces traffic load. Support for the latest versions of Microsoft Windows and Linux platforms Optimized usage of system resources Support for Hierarchical Storage systems (HSM) FEATURES Enhanced proactive protection from new malicious programs Firewall and Network Access Blocker for Windows servers Real-time antivirus protection Treatment of active infections On-schedule scanning of file storage Scanning of critical system areas Isolation of infected workstations Scalability APPLICATIONS Kaspersky Anti-Virus for Windows Servers Enterprise Edition Kaspersky Anti-Virus for Linux File Server of terminal servers and cluster servers VMware Ready certification NSS file system support Backup storage of data prior to disinfection or deletion Centralized installation, management and updates Choice of installation and management methods Flexible system of scanning and incident response scenarios Application status notification system Comprehensive reports on network protection status Kaspersky Endpoint Security for Windows Kaspersky Security Center SYSTEM RESOURCE OPTIMIZATION A powerful antivirus engine, load balancing of server resources and scan exclusions all reduce the load on your system. KSN INTEGRATION FOR ANTI-SPAM Increases spam and malware detection rates thanks to integration with Kaspersky Lab s cloud-based threat identification engine (KSN). FEATURES Integrated protection of mail servers from all types of malicious programs Efficient protection against spam Real-time antivirus protection On-schedule scanning of s and databases for Sendmail, qmail, Postfix, Exim and CommuniGate Pro mail servers Scanning of messages, databases and other objects on Lotus Domino servers Scanning of all messages on the Microsoft Exchange server, including public folders Filtration of messages by attachment type Scalability ZETA SHIELD TECHNOLOGY (Linux and Exchange servers) Kaspersky ZETA (Zero-day Exploits and Targeted Attacks) Shield defends against advanced persistent threats (APTs) which take advantage of zero-hour vulnerabilities. Complete protection of Microsoft Exchange Server and compatibiliy with DAG (Database Availability Group) Backup storage of data prior to disinfection or deletion Isolation of infected objects Cancellation of repeated mail scanning Convenient tools for installation, management and updates Comprehensive reports on protection status Flexible system of scanning and incident response scenarios Application status notification system APPLICATIONS Kaspersky Security for Microsoft Exchange Servers Kaspersky Security for Microsoft Exchange Server 2003 Kaspersky Anti-Virus for Lotus Domino Kaspersky Security for Linux Mail Server (this application managed through Kaspersky Security Center) *Product features may vary depending on the combination of components used. Please see the component descriptions at: for more information about individual component features. *Product features may vary depending on the combination of components used. Please see the component descriptions at: for more information about individual component features

12 KASPERSKY SECURITY FOR INTERNET GATEWAY KASPERSKY SECURITY FOR COLLABORATION Kaspersky Security for Internet Gateway provides secure Internet access for all employees in an organization. Kaspersky Security for Internet Gateway supports most popular gateways based on the Windows and Linux platforms. Known malicious and potentially dangerous programs running via HTTP, HTTPS, FTP, POP3 and SMTP protocols are automatically deleted from the data flow. Optimization technology, scalability and support for the latest platforms make it the ideal product for large organizations with huge volumes of traffic. Kaspersky Security for Collaboration applies the latest in protection technologies to your collaboration platform, combining ease of management and high malware detection rates. Kaspersky Security for Collaboration uses Kaspersky s award-winning antivirus engine to protect Microsoft SharePoint environments. With award-winning malware detection technology, the product can protect a single server or entire SharePoint farms while its content and file filtering capabilities help prevent storage of inappropriate content. PRODUCT HIGHLIGHTS * FEATURES of Microsoft Forefront TMG Support for Squid, Blue Coat and Cisco proxy servers Wide variety of policy management and configuration tools FEATURES Real-time scanning of Internet traffic using HTTP, HTTPS, FTP, POP3 and SMTP protocols Integrated protection from all types of malicious programs Backup storage Load balancing of server processors Scanning of VPN-connections traffic protection (via POP3 and SMTP protocols) Scanning of HTTP and FTP traffic from published servers Scalability Convenient tools for installation, management and updates Flexible system of scanning and incident response scenarios Comprehensive reports on network protection status Capable of protecting the entire SharePoint farm, including the front end, SQL server, applications, search, index and more Prevents end users from storing specified types of files, (e.g. music, video, executable files) or files with inappropriate text Global management settings can be configured on all protected servers from a single dashboard Simple, intuitive management no special training needed Integration with Active Directory streamlines setup and user authentication Detailed logs and backup of modified files help support administrators responding to violations or security issues Detailed, flexible reporting Application Servers Internet (External Users) Kaspersky Security for Collaboration Web Front End Firewall Web Front End SQL Servers Internal External APPLICATIONS Kaspersky Security for Collaboration Kaspersky Anti-Virus for Microsoft ISA Server and Forefront TMG Standard Edition Kaspersky Anti-Virus for Microsoft ISA Server Enterprise Edition Kaspersky Anti-Virus for Proxy Server Internal Users *Product features may vary depending on the combination of components used. Please see the component descriptions at: for more information about individual component features

13 KASPERSKY SECURITY FOR STORAGE Kaspersky Security for Storage protects EMC VNX and NetApp storage products from all types of malware. EXTENDED TECHNICAL SUPPORT Maintenance Service Agreement (MSA) for Enterprise and Business Data storage systems on a network provide employees working in organizations of all sizes with fast and easy shared access to information. However, if a corporate network is unprotected, access to shared files can lead to some very undesirable consequences. A single infected file stored on a system may compromise the entire network, potentially causing substantial business, financial and reputational damage. That is why comprehensive protection for network storage systems is absolutely essential. Kaspersky Security for Storage is fully compatible with EMC VNX and NetApp. It has been expertly designed to provide them with the highest levels of protection, detecting and neutralizing malware from files and archives stored in Celerra systems. The solution allows administrators to configure the system to perform scanning tasks in real-time as objects are saved and modified, or on-demand if required. Downtime is expensive and damaging to your business. Kaspersky s Extended Technical Support minimizes the impact for Kaspersky MSA Enterprise customers of a security infrastructure failure or security incident, focusing the full force of Kaspersky Lab expertise directly on finding the fastest, most effective route to getting you safely back online. At the hub of this service is your dedicated Technical Account Manager, taking ownership of your issue and fast-tracking it to expert teams of dedicated Kaspersky Lab engineers and analysts who consider finding a solution a priority. Our commitment to Extended Technical Support for MSA Enterprise and MSA Business customers includes: FEATURES for EMC VNX and NetApp Support for Hierarchical Storage systems (HSM) Enhanced proactive protection from new malicious programs Real-time antivirus protection On-schedule scanning of file storage Scanning of critical system areas Optimized usage of system resources Backup storage of data prior to disinfection or deletion Scalability VMware Ready certification Centralized installation, management and updates through Kaspersky Security Center Designed in conjunction with the Kaspersky Endpoint Security for Business Platform and other Kaspersky Products Application status notification system Comprehensive reports on network protection status Service Type Standard MSA Business MSA Enterprise Product Incidents Operation Mode Virus Response: Operation Mode Response time for high level incidents Technical Account Manager Hot fixes and patches Standard office hours 24/7/365 web / submission; standard processing Standard office hours 24/7/365 web / submission; priority processing 4 business hours 2 hours of receipt of call 24/7/365 telephone support, plus a dedicated Technical Account Manager during office hours. Dedicated Technical Account Manager Public patches during support phase Prioritization Access to global expertise Methods of communication Hot fixes and patches Public and private patches during support phase Incident prioritization during office hours Through the web, phone or Public patches during support phase Through the web, phone or Public and private patches during support phase Live incident reporting Service quality monitoring Security configuration inspections and health check OUR COMMITMENT TO YOU Regular reporting Available on request Priority provision of public & private patches, during support phase and throughout the contract as well as personal customized patches Prioritization of your incident and its resolution 24/7/365 Fast-track access to Kaspersky Lab engineering and antivirus teams through your Technical Account Manager Through the dedicated Technical Account Manager, by web, phone or whatever works best for you in each case. Remote access for resolution Ongoing priority provision of public & private patches, as well as personal customized patches Regular status updates as each incident is fast-tracked to resolution 24 25

14 INTELLIGENCE SERVICES: BOTNET THREAT TRACKING Frequent updates with recent tools Real-time notification of service users about attacks targered at their customers Expert monitoring and notification services to identify botnets threatening your reputation and customers. Protect your organization s reputation and customers today with Kaspersky Lab s Botnet Threats Notification Service. Botnet Kaspersky Lab intercepts commands and instruction from C&C Server Botnet C&C commands and instructions analysis Botnet Monitoring at Kaspersky Lab URLs of entities under attack Botnet name Attack date Attack type (screenshot, web inject, etc.) URLs of entities under attack Web inject codes C&C center addresses MD5 of associated malware Notifications TAKE ACTION WITH REAL-TIME DELIVERABLES: The service provides a subscription to personalized notifications containing intelligence about matching brand names by tracking keywords in the botnets monitored by Kaspersky Lab. Notifications include: Targeted URL of the botnet Bot malware is designed to wait until the user accesses the URL(s) of the targeted organization and then starts the attack rule. Botnet type Understand exactly what malware threat is being employed by the cybercriminal to affect your customers. Examples include Zeus, SpyEye, and Citadel. Attack type Identify what the cybercriminals are using the malware to do; for example, web data injection, keylogging, screen wipes or video capture. Attack rules Know what different rules of web code injection are being used such as HTML requests (GET / POST), data of web page before injection, data of web page after injection. Command and Control (C&C) server address Enables you to notify the Internet service provider of the offending server for faster dismantling of the threat. MD5 hashes of related malware Kaspersky provides the hash sum, which is used for malware verification. Kaspersky Lab s solution is available in either Standard or Premium for a variety of service terms and monitored brands. Consult with Kaspersky Lab or your reseller partner to determine which is right for your enterprise. Subscription Type Subscription Period Number of Brands Monitored Premium 1 year 10 Standard 1 year 5 Premium 6 months 10 Standard 6 months 5 Premium 3 months 10 Standard 3 months 5 PREMIUM SUBSCRIPTIONS ALSO INCLUDE: Decrypted configuration file of related bot identifying the full list of targeted brands. Related malware sample for further reversing and cyber forensic analysis of the botnet attack. Geographical distribution of detection Statistical data of related malware samples from around the world

15 CYBERSECURITY EDUCATION Course Description LEVEL 1 CYBERSECURITY AWARENESS Day 1: Cyberthreats and Attacks in the Modern World Day 2: Protecting Against Cyberthreats and Attacks Course Duration 2 days Course Audience Staff employees and executives from a broad range of organizations Leverage Kaspersky Lab s knowledge, experience and intelligence in the area of cybersecurity through this innovative education program. Cybersecurity awareness and education have become critical requirements for enterprises faced with an increasing volume of constantly evolving threats. Improving and enabling information security employee skills in advanced security techniques is a key component of effective enterprise threat management and mitigation strategy. Developed specifically for any business looking to promote the role of cybersecurity in its operations to better protect its infrastructure and intellectual property. Kaspersky Lab s Cybersecurity Education program offers a broad curriculum and certification ranging from basic to expert cybersecurity topics and techniques. IMPROVE YOUR IT SECURITY SKILLS TODAY: Real hands-on experience Kaspersky Lab s program is unique, providing hands-on experience with the latest attacks and malware an immense benefit not available through other training providers. LEVEL 2 GENERAL CYBERFORENSICS & MALWARE ANALYSIS Day 1: Course Introduction Day 2: Cyberthreats for Businesses Real Examples Day 3: Labs Malware Analysis Fundamentals Day 4: Labs Malware Analysis Real Examples Day 5: Labs Cyberforensics Basics / Mobile Infection Examples Upon course completion, all attendees will be able to pass a certification program to validate their knowledge. LEVEL 3 ADVANCED CYBER FORENSICS FINANCIAL THREATS Day 1: Course Introduction Day 2: Types of Financial Cyberfraud Day 3: Labs Cyberforencics Methodology of Financial Threats in Depth Day 4: Labs Cyberforensics Techniques in Depth Real-world online banking attack examples will be used in labs. Day 5: Labs ATM Threats / Mobile Financial Fraud Investigation Examples Real-world ATM & mtan hijacking attacks will be used in labs. Upon course completion, all attendees will be able to pass a certification program to validate their knowledge. 5 days 5 days Employees and executives with intermediate knowledge of IT security Employees with advanced level knowledge of IT security who need to gain expertise in the cyberforensics of financial threats Beginner, intermediate or expert? The program is well structured and useful for a broad range of attendees. A comprehensive offering All training courses are offered in English and are available either in-class at a local or regional Kaspersky Lab office, or on-demand at a customer premises. The courses are designed to include both theoretical and practical classes (labs). Attendees are provided with all required training materials and laptops for labs. Upon completion of the course, all attendees will be able to pass a certification program to validate their knowledge on the course subjects. Level 1 Beginner LEVEL 3 ADVANCED CYBERFORENSICS TARGETED THREATS Day 1: Course Introduction Day 2: Targeted Attacks Introduction Day 3: Labs Cyberforencics Methodology of Targeted Threats in Depth Day 4: Labs Cyberforencics Techniques of Targeted Threats in Depth Day 5: Labs Attack Timeline Analysis & Incident Response Real-world online banking attack examples will be used in labs. Upon course completion, all attendees will be able to pass a certification program to validate their knowledge. 5 days Employees (mostly from governmental agencies or CERTs) with advanced knowledge of IT security who need to gain expertise in the cyberforensics of targeted threats Cybersecurity Awareness LEVEL 3 ADVANCED MALWARE ANALYSIS & REVERSE ENGINEERING Level 2 Intermediate Level 3 Expert ADVANCED CYBERFORENSICS FINANCIAL THREATS General Cyberforensics & Malware Analysis ADVANCED CYBERFORENSICS TARGETED THREATS ADVANCED MALWARE ANALYSIS & REVERSE ENGINEERING Day 1: Course Introduction Day 2: Assembler Basics, Windows OS Internals Day 3: PE Format / Malware Analyst s Toolset Day 4: Compilers: Visual Studio; MFC; Visual Basic,.NET Day 5: Compilers: Delphi, GCC Day 6: Reverse Engineering Object Files, Linker, PE Resources Day 7: Reverse Engineering Network Analysis Day 8: Reverse Engineering Malware Techniques Day 9: Reverse Engineering System Drivers Analysis, Rootkits and Bootkits Day 10: Reverse Engineering Vulnerabilities and Exploits / Alternative OS / Web Application Analysis Upon course completion, all attendees will be able to pass a certification program to validate their knowledge. 10 days Employees (mostly from governmental agencies or CERTs) with high level of knowledge of IT security and programming skills who need to gain expertise in malware analysis and reverse engineering 28 29