Endpoint Security: Secure Enterprise Endpoints from Data Leakage and Malware

New and emerging threats continue to impact endpoint security, which is a challenge that enterprises constantly face with security and support issues arising from endpoint users and their use of applications and devices. The security landscape has shifted from large, widespread attacks at the enterprise perimeter, to threats focusing on corporate endpoints, which are traditionally less secure.

The enterprise desktop is evolving as well as it is no longer bound to an office desk in a controlled environment. Unmanaged removable media and applications can easily bypass traditional endpoint security methods and open the floodgates for data to escape into the wrong hands.

Most data leaks and security threats occur at the endpoint because they are not properly secured. In fact, 74 percent of an enterprise’s overall financial losses were the result of virus attacks, unauthorized access to networks, lost/stolen laptops and mobile hardware, theft of proprietary data or intellectual property¹.

Many of these threats and subsequent financial losses are generated internally as seen by the recent DuPont data theft case.

How to Make Whitelisting Operationally Efficient and Manageable
Lumension Security's SVP of Americas, Matt Mosher sits down to discuss the advancements in Endpoint Security with Operational Whitelisting.

Securing Your Corporate Endpoints

Endpoint security requires software that enforces user behavior policies, so that enterprise desktops don’t become a doorway for sensitive data to escape and for security threats such as malware to enter. It is easy to block known security threats from your network - it is the hidden threats lurking on the desktops that require a different approach.

Lumension’s Sanctuary Application Control® and Sanctuary Device Control® provides endpoint security through the use of a proactive approach that enables only authorized applications to run and only authorized devices to connect to a server, terminal services server, thin client, laptop or desktop - facilitating security and systems management, while providing necessary flexibility to the organization to easily enable the use of new/upgraded applications or devices.

Sanctuary provides the necessary controls to secure endpoints from unknown software, malicious code, and unauthorized applications as well as to manage and secure inbound and outbound data flow from endpoints. Lumension’s endpoint security solution ensures the confidentiality and integrity of sensitive data by enforcing encryption when copied to removable media. Sanctuary also can show the effectiveness or ineffectiveness of an organization’s endpoint security policy, by providing detailed audit information that shows successful and unsuccessful attempts to connect a device or execute an application on a protected endpoint.

Complete Endpoint Security is Achieved with Lumension’s Sanctuary by:

  • Enforcing endpoint security policies that prevent known and unknown threats from executing, such as malware, viruses, spyware and zero-day threats
  • Controlling and monitoring the flow of inbound and outbound data
  • Safeguarding the confidentiality, integrity and availability of sensitive data on desktops
  • Protecting against network and desktop security breaches where confidential data could be exposed to fraud
  • Providing a detailed audit trail of all device and application execution attempts, by tracking data that is copied to and from removable devices and by controlling what data is allowed to be copied to a device at the file level

1 - 2006 CSI/FBI Computer Crime and Security Survey

Read our solution datasheet here.