> Software > intrusion prevention

An introduction to network attack mitigation with IPS   ... Read more

An introduction to network attack mitigation with IPS   Where did IPS come from? How has it evolved? How does IPS work? What components does it have? What security needs can IPS address? Does IPS work with other security products? What is the “big picture”? What are the best practices related to IPS? How is IPS deployed, and what should be considered prior to a deployment?   Intrusion Prevention Fundamentals offers an introduction and in-depth overview of Intrusion Prevention Systems (IPS) technology. Using real-world scenarios and practical case studies, this book walks you through the lifecycle of an IPS project–from needs definition to deployment considerations. Implementation examples help you learn how IPS works, so you can make decisions about how and when to use the technology and understand what “flavors” of IPS are available. The book will answer questions like:   Whether you are evaluating IPS technologies or want to learn how to deploy and manage IPS in your network, this book is an invaluable resource for anyone who needs to know how IPS technology works, what problems it can or cannot solve, how it is deployed, and where it fits in the larger security marketplace.   Understand the types, triggers, and actions of IPS signatures Deploy, configure, and monitor IPS activities and secure IPS communications Learn the capabilities, benefits, and limitations of host IPS Examine the inner workings of host IPS agents and management infrastructures Enhance your network security posture by deploying network IPS features Evaluate the various network IPS sensor types and management options Examine real-world host and network IPS deployment scenarios   This book is part of the Cisco Press® Fundamentals Series. Books in this series introduce networking professionals to new networking technologies, covering network topologies, example deployment concepts, protocols, and management techniques.   Includes a FREE 45-Day Online Edition   Minimize

Symantec Endpoint Protection 12.1 Symantec Endpoint Protect ... Read more

Symantec Endpoint Protection 12.1 Symantec Endpoint Protection 12.1 is the fastest, most powerful endpoint protection security solution you can buy. Symantec Endpoint Protection provides state-of-the-art defense against all types of attacks for both physical and virtual systems. Seamlessly integrating the essential security tools you need into a single, high performance agent with a single management console, Symantec Endpoint Protection provides leading protection without slowing you down. Key Features Stops malware such as viruses, worms, Trojans, spyware, adware, bots, zero-day threats and rootkits. Prevents security outbreaks thus reducing administrative overhead. Powerful protection of both physical and virtual environments. Lowers total cost of ownership for endpoint security. State-of-the-art protection from the world leader in security Integrated antivirus, antispyware, firewall, and intrusion prevention as well as device control and application control Requires only a single agent Powerful central management of security for physical and virtual Windows and Mac endpoints Enables instant upgrade to self-enforced network access control without additional software deployment Antivirus and antispyware for Windows, Mac and Linux clients Seamless migration from previous versions of Symantec Endpoint Protection Built to secure your virtual infrastructure Secures both physical and virtual environments Real Time SONAR 3 Browser Intrusion Prevention Faster central console Smart Scheduler Enhanced client deployment Built for Virtual Environments SEP Manager Integration with Symantec Workflow The Symantec Endpoint Recovery Tool and Power Eraser Advanced Reporting and Analytics - 21182299 Minimize

Prevent security breaches by protecting endpoint systems wi ... Read more

Prevent security breaches by protecting endpoint systems with Cisco Security Agent, the Cisco host Intrusion Prevention System Secure your endpoint systems with host IPS Build and manipulate policies for the systems you wish to protect Learn how to use groups and hosts in the Cisco Security Agent architecture and how the components are related Install local agent components on various operating systems Explore the event database on the management system to view and filter information Examine Cisco Security Agent reporting mechanisms for monitoring system activity Apply Application Deployment Investigation to report on installed applications, hotfixes, and service packs Collect detailed information on processes and see how they use and are used by system resources Create and tune policies to control your environment without impacting usability Learn how to maintain the Cisco Security Agent architecture, including administrative access roles and backups Cisco Security Agent presents a detailed explanation of Cisco Security Agent, illustrating the use of host Intrusion Prevention Systems (IPS) in modern self-defending network protection schemes. At the endpoint, the deployment of a host IPS provides protection against both worms and viruses. Rather than focusing exclusively on reconnaissance phases of network attacks a host IPS approaches the problem from the other direction, preventing malicious activity on the host by focusing on behavior. By changing the focus to behavior, damaging activity can be detected and blocked–regardless of the attack.   Cisco Security Agent is an innovative product in that it secures the portion of corporate networks that are in the greatest need of protection–the end systems. It also has the ability to prevent a day-zero attack, which is a worm that spreads from system to system, taking advantage of vulnerabilities in networks where either the latest patches have not been installed or for which patches are not yet available. Cisco Security Agent utilizes a unique architecture that correlates behavior occurring on the end systems by monitoring clues such as file and memory access, process behavior, COM object access, and access to shared libraries as well as other important indicators.   Cisco Security Agent is the first book to explore the features and benefits of this powerful host IPS product. Divided into seven parts, the book provides a detailed overview of Cisco Security Agent features and deployment scenarios. Part I covers the importance of endpoint security. Part II examines the basic components of the Cisco Security Agent architecture. Part III addresses agent installation and local use. Part IV discusses the Cisco Security Agent management console’s reporting and monitoring capabilities. Part V covers advanced Cisco Security Agent analysis features. Part VI covers Cisco Security Agent policy, implementation, and management. Part VII presents additional installation and management information.   Whether you are evaluating host IPS in general or looking for a detailed deployment guide for Cisco Security Agent, this book will help you lock down your endpoint systems and prevent future attacks.   “While there are still a lot of ways that security can go wrong, Cisco Security Agent provides a defense even when something is wrong. I remember the email that came around from our system administrator that said, ‘There’s something attacking our web server. We’re not sure what it is, but Stormwatch is blocking it.’ That was the Nimda worm–the first of a long line of attacks stopped by Cisco Security Agent.” –Ted Doty, Product Manager, Security Technology Group, Cisco Systems®   This security book is part of the Cisco Press® Networking Technology Series. Security titles from Cisco Press help networking professionals secure critical data and resources, prevent and mitigate network attacks, and build end-to-end self-defending networks.   Minimize

Symantec Endpoint Protection 12.1 Symantec Endpoint Protect ... Read more

Symantec Endpoint Protection 12.1 Symantec Endpoint Protection 12.1 is the fastest, most powerful endpoint protection security solution you can buy. Symantec Endpoint Protection provides state-of-the-art defense against all types of attacks for both physical and virtual systems. Seamlessly integrating the essential security tools you need into a single, high performance agent with a single management console, Symantec Endpoint Protection provides leading protection without slowing you down. Key Features Stops malware such as viruses, worms, Trojans, spyware, adware, bots, zero-day threats and rootkits. Prevents security outbreaks thus reducing administrative overhead. Powerful protection of both physical and virtual environments. Lowers total cost of ownership for endpoint security. State-of-the-art protection from the world leader in security Integrated antivirus, antispyware, firewall, and intrusion prevention as well as device control and application control Requires only a single agent Powerful central management of security for physical and virtual Windows and Mac endpoints Enables instant upgrade to self-enforced network access control without additional software deployment Antivirus and antispyware for Windows, Mac and Linux clients Seamless migration from previous versions of Symantec Endpoint Protection Built to secure your virtual infrastructure Secures both physical and virtual environments Real Time SONAR 3 Browser Intrusion Prevention Faster central console Smart Scheduler Enhanced client deployment Built for Virtual Environments SEP Manager Integration with Symantec Workflow The Symantec Endpoint Recovery Tool and Power Eraser Advanced Reporting and Analytics - 21182300 Minimize

Symantec Endpoint Protection 12.1 Symantec Endpoint Protect ... Read more

Symantec Endpoint Protection 12.1 Symantec Endpoint Protection 12.1 is the fastest, most powerful endpoint protection security solution you can buy. Symantec Endpoint Protection provides state-of-the-art defense against all types of attacks for both physical and virtual systems. Seamlessly integrating the essential security tools you need into a single, high performance agent with a single management console, Symantec Endpoint Protection provides leading protection without slowing you down. Key Features Stops malware such as viruses, worms, Trojans, spyware, adware, bots, zero-day threats and rootkits. Prevents security outbreaks thus reducing administrative overhead. Powerful protection of both physical and virtual environments. Lowers total cost of ownership for endpoint security. State-of-the-art protection from the world leader in security Integrated antivirus, antispyware, firewall, and intrusion prevention as well as device control and application control Requires only a single agent Powerful central management of security for physical and virtual Windows and Mac endpoints Enables instant upgrade to self-enforced network access control without additional software deployment Antivirus and antispyware for Windows, Mac and Linux clients Seamless migration from previous versions of Symantec Endpoint Protection Built to secure your virtual infrastructure Secures both physical and virtual environments Real Time SONAR 3 Browser Intrusion Prevention Faster central console Smart Scheduler Enhanced client deployment Built for Virtual Environments SEP Manager Integration with Symantec Workflow The Symantec Endpoint Recovery Tool and Power Eraser Advanced Reporting and Analytics - 21182301 Minimize