Kaspersky Endpoint Security For Business Total

Delivering multi-layer protection against malware
By combining signature-based, heuristic and cloud-assisted anti-malware technologies, Kaspersky TOTAL Security for Business protects businesses against known and emerging threats.

Securing multiple platforms**
Kaspersky TOTAL Security for Business provides anti-malware protection for Mac, Linux and Windows platforms.

Protecting against today’s sophisticated malware attacks
Kaspersky delivers malware database updates much more frequently than many other anti-malware vendors – so your business gets the latest protection against zero-day threats. Kaspersky’s pattern-based signatures help to improve malware detection rates and reduce the size of database updates – so you benefit from better security and reduced load on your network.

Delivering protection against new threats
Because Kaspersky’s Urgent Detection System database is continually being updated with data about new malware discoveries, Kaspersky can protect your corporate network against the latest threats and attacks – even before a new malware signature has been released.

Detecting suspicious behaviour
Kaspersky’s System Watcher automatically monitors how applications behave when they’re running on your systems. If System Watcher detects suspicious behaviour, Kaspersky TOTAL Security for Business will block the application.

Using the power of the cloud to protect your business
With millions of Kaspersky users having opted in to let the cloud-based Kaspersky Security Network (KSN) gather data about malware or suspicious behaviour on their computers, your business can benefit from this valuable information – even if you don’t opt in. KSN’s continual collection of real-time data about threats helps Kaspersky to provide every customer with a rapid response to new attacks – and also reduces the incidence of ‘false positives’. Independent tests have shown Kaspersky’s cloud-assisted protection can respond to new threats in as little as 0.02 seconds.

Defeating hackers
Kaspersky’s Host-based Intrusion Prevention System (HIPS) and personal firewall give you flexible control over inbound and outbound traffic. You can set up parameters for a specific port, IP address or application.

Blocking network attacks
Kaspersky’s Network Attack Blocker technology detects and monitors suspicious activities on your corporate network – and lets you preconfigure how your systems will respond if any suspicious behaviour is identified.

Active Disinfection
With Kaspersky’s Active Disinfection technology working at the lowest levels of a computer’s operating system, Kaspersky TOTAL Security for Business delivers even deeper protection against malicious code.

**Not all features are available on all platforms.

Protecting multiple platforms
With its world-class antivirus engine – and optimised scanning processes – Kaspersky TOTAL Security for Business protects file servers running Windows, Linux or FreeBSD, without any significant impact on server performance. As well as providing security for cluster servers, Kaspersky TOTAL Security for Business protects terminal servers – including Microsoft and Citrix.

Simplified management and reporting
To help minimise the time required to configure security for your file servers, Kaspersky TOTAL Security for Business includes easy-to-use management tools – plus reporting features.

Robust anti-malware
When a file server suffers a failure or an unplanned shut down, Kaspersky’s anti-malware application will re-launch when the file server restarts.

Application Control
Application Control tools give you granular control over how applications are allowed to run on your corporate network:

• Application Startup Control – lets you grant, block or audit each application
• Application Monitor – lets you monitor and classify each application as untrusted, restricted or trusted
• Application Privilege Control – lets you manage whether an application is allowed to access specific system resources, such as the file system or the registry

You can easily implement a Default Deny or Default Allow policy:

• Default Deny blocks all programs, except whitelisted applications
• Default Allow only blocks blacklisted applications.

Dynamic whitelisting
As the only security vendor that has invested in establishing its own Whitelist Lab, Kaspersky assesses commonly used applications and checks them for security risks. Updates for Kaspersky’s dynamic whitelist of applications are automatically downloaded from the cloud-enabled Kaspersky Security Network – ensuring Kaspersky customers benefit from our latest whitelist data.

Device Control
Device Control features make it easy to manage the use of removable devices and protect against the security risks that unauthorised devices can introduce. Kaspersky TOTAL Security for Business lets you:

• Manage access privileges – for a specific type of device, a device bus or an individual device (according to its unique serial number)
• Preconfigure the times when your device control policies apply – such as preventing the use of devices outside your normal office hours

Web Control
Flexible Web Control tools help administrators to:

• Monitor and filter each employee’s web browser usage
• Permit, prohibit, limit or audit users’ access to specific websites or categories of websites – including games sites, gambling websites or social networking sites

Managing your hardware, software & licences
With corporate IT networks growing in complexity, the task of monitoring and managing hardware and software assets has become much more difficult. Gaining total visibility of every hardware and software asset is an essential step in ensuring you can apply appropriate protection to every component on your corporate network.

By automatically discovering all hardware and software in your IT environment – and recording all items within hardware and software inventories – Kaspersky TOTAL Security for Business gives you detailed visibility of all of your IT assets, so it’s easier to:

• Monitor the security status of your systems
• Apply the necessary security settings
• Centralise your software licence provisioning – and identify breaches of licence conditions.

Automatic vulnerability scanning – plus patch management
Automatic vulnerability scanning detects the presence of any unpatched vulnerabilities in the Windows operating system and applications on your network. Working with Microsoft’s WSUS database, the Secunia Vulnerability Database and Kaspersky’s own database of vulnerabilities, Kaspersky TOTAL Security for Business can regularly synchronise data on Microsoft updates and hotfixes and automatically distribute them to your systems. For many non-Microsoft applications, information about new patches can be downloaded from Kaspersky’s own servers.

Simplifying OS deployment
With automatic features for creating and cloning computer images, Kaspersky TOTAL Security for Business helps to optimise operating system deployment. Kaspersky TOTAL Security for Business stores your computer images in a special inventory, so they can easily be accessed during deployment.

Application provisioning
Kaspersky TOTAL Security for Business simplifies the distribution of applications – by enabling administrators to deploy software on command or according to their own schedule, such as after working hours. The application deployment process is transparent to users.

Remote troubleshooting and software deployment
Remote access helps you to ensure rapid resolution of problems on any computer on your corporate network. If you need to install new software at a remote office, Kaspersky TOTAL Security for Business lets you use one local workstation as the update agent for the entire remote site. This can greatly reduce the volume of traffic on your corporate network.

Network Access Control
Kaspersky TOTAL Security for Business automatically discovers devices, so you can control which devices are allowed to access your corporate network. In addition, you can easily check that each user’s device complies with your corporate security policies – and block network access for any employee’s device that does not comply. If you need to let visitors’ devices access the Internet – without accessing confidential corporate data – Kaspersky TOTAL Security for Business lets you set up a captive portal.

Network Access Control
Kaspersky TOTAL Security for Business automatically discovers devices, so you can control which devices are allowed to access your corporate network. In addition, you can easily check that each user’s device complies with your corporate security policies – and block network access for any employee’s device that does not comply. If you need to let visitors’ devices access the Internet – without accessing confidential corporate data – Kaspersky TOTAL Security for Business lets you set up a captive portal.

File-level encryption and full disk encryption
Kaspersky TOTAL Security for Business provides both file-level encryption (FLE) and full disk encryption (FDE) – with FDE operating on the physical sectors of the hard disk, to deliver encryption that’s ‘close to the hardware’:

- FLE lets you encrypt individual files – to help ensure data can be shared securely, across your network
- FDE makes it easy to adopt an ‘encrypt everything at once’ approach

By using a combination of both FLE and FDE on a system’s internal hard drive, you can encrypt the entire hard drive – while ensuring individually encrypted files can be securely shared across your network.

For a group of computers, you can use FDE on each computer’s hard disk and use FLE on removable storage devices. This ensures that all data on each computer’s hard disk is encrypted – while data stored on removable drives is also encrypted, for secure use beyond your corporate network.

Sharing data outside your network
Users can create password-protected, encrypted, self-extracting packages of files and folders – so data can be securely shared, via email, the Web or removable devices.

Application privilege control
When you run file-level encryption (FLE), application privilege control lets you define data access rules for specific applications. You can select whether an individual application is:

• Blocked from accessing the encrypted data
• Allowed to access the data in its encrypted form
• Allowed to access unencrypted data

The decryption process is transparent to the application.

By ensuring encrypted data remains encrypted during transfer, storage and restoration – regardless of the policy settings at the endpoint where the data is restored – Kaspersky’s application privilege control features help you to create secure backups.

Application privilege control can also block the exchange of encrypted files via Instant Messaging (IM) or Skype – without affecting the legitimate use of IM or Skype.

Encryption that doesn’t affect productivity
All of Kaspersky’s encryption and decryption processes are executed ‘on the fly’. Non-encrypted versions of encrypted data are never present on a system’s hard drive as a result of Kaspersky’s processes. Furthermore, all encryption and decryption processes are transparent to your users – so employee productivity is not affected.

Storing decryption keys in escrow
If a computer develops a fault, a device-unique key – stored in escrow within Kaspersky Security Center – lets you decrypt data that’s stored within the faulty computer. Even if the computer’s operating system won’t boot, you’ll still be able to decrypt the data.

Recovering users’ passwords
When a user forgets their password, a challenge / response mechanism allows the recovery of the pre-boot password.

Integrated encryption and protection technologies
Kaspersky’s encryption and endpoint protection technologies are all part of the same unified codebase – to ensure a level of integration that enables you to configure a combination of encryption, anti-malware and endpoint control settings within a single policy.

Protecting mobile devices
Kaspersky TOTAL Security for Business protects a wide range of mobile platforms – including Android (plus special support for Samsung’s SAFE criteria for secure mobile devices), iOS, Windows Phone 8, Windows Mobile, BlackBerry and Symbian – against the latest malware threats. Because Kaspersky combines traditional, signature-based protection and proactive, cloud-based technologies – such as Kaspersky Security Network – your mobile devices can be protected against newly discovered threats.

Controlling application launches and website usage
Application Control features give you control over which applications are allowed to launch on any mobile devices that are permitted access to your corporate network. You can implement a ‘default allow’ policy – that only blocks blacklisted applications – or choose a ‘default deny’ policy, so that only non-whitelisted applications are blocked.

In addition, Web Control tools make it easy to block malicious websites and control access to websites that don’t conform to your corporate security or Internet usage policies – including social networking, recruitment, retailing, gambling and adult websites, plus proxy servers.

Kaspersky TOTAL Security for Business can also detect and report jailbreak or rooting incidents.

Protecting confidential corporate data
To help prevent your business data falling into the wrong hands, Kaspersky TOTAL Security for Business makes it easy to enable and manage the encryption features provided on most popular mobile devices.

Separating corporate and personal data – for BYOD
Kaspersky TOTAL Security for Business lets you separate corporate data and personal data on the user’s mobile device. By setting up a special container for each corporate application, you can enable the encryption of corporate data and you can ensure the device requests additional authorisation before a containerised application is allowed to launch.

If an employee leaves the business, all corporate data can be selectively wiped from their mobile device – to prevent the leakage of confidential corporate data, without deleting the employee’s personal data.

Protecting confidential information on a missing mobile device
If a mobile device is lost or stolen, remotely-operated features give you the ability to:

• Lock the device
• Delete the corporate data – or all the data – that’s stored on the device
• Find the device’s approximate location

If someone changes the SIM in the missing device, Kaspersky’s SIM Watch technology will automatically send you the device’s new phone number. You can then continue to operate the remote lock, find and data wiping features.

Simplifying mobile management
All mobile security and MDM features are centrally managed, from a single administration console. Kaspersky mobile device management (MDM) functionality includes support for:

• Microsoft Exchange ActiveSync
• Apple MDM Server
• Samsung SAFE

Kaspersky’s extensive MDM capabilities simplify the deployment of Kaspersky’s mobile security agent and any other applications you wish to distribute – either over the air (OTA) or via a tether.

***Only available for mobile platforms specified on the Kaspersky list of supported platforms. Some features are not available for some of the supported mobile platforms.

Advanced anti-spam
Effective spam filtering can help businesses to boost efficiency and productivity. Kaspersky’s intelligent spam filtering technology helps to prevent the arrival of distracting spam messages in users’ inboxes – and it reduces traffic on your corporate network.

Multi-platform support
With support for a wide range of mail servers – including Microsoft Exchange, IBM Lotus Notes / Domino, Sendmail, qmail, Postfix, Exim and CommuniGate Pro – Kaspersky’s mail server protection technologies protect mail traffic and groupware servers against malware and spam. Kaspersky TOTAL Security for Business can also be used to set up a dedicated mail gateway.

Simplified management
Easy-to-use tools simplify the management of Kaspersky’s mail server protection technologies, including:

• Monitoring protection status
• Managing scan settings
• Generating reports

Automatic, frequent database updates ensure you have Kaspersky’s latest defences against spam and malware.

Helping to preserve performance
With optimised anti-malware scanning – plus the option to exclude specific items from a scan – Kaspersky’s mail server protection also supports load balancing of server resources. This means you gain highly effective protection, without any significant impact on performance.

Anti-malware protection
Kaspersky technologies deliver protection for traffic flowing through most popular, Windows-based or Linux-based gateways – automatically removing malicious and potentially hostile programs that appear in HTTP(S), FTP, SMTP and POP3 traffic. With frequent database updates, Kaspersky TOTAL Security for Business helps to protect you against new and emerging threats.

Protecting mail
Kaspersky technologies can protect corporate mail flowing through Microsoft Forefront TMG or Microsoft ISA Server.

High detection rates – with low impact on performance
With intelligent, optimised anti-malware scanning – plus load balancing – Kaspersky TOTAL Security for Business delivers high detection rates, without any significant effect on system performance.

Easy management
Easy-to-use management tools – together with flexible reporting capabilities – help to ensure you get improved visibility and improved control of your security.

Protecting mobile devices
Easy-to-use anti-malware protection, file filtering and content filtering let you centrally manage the protection of an entire Microsoft SharePoint server farm – from a single console. Kaspersky’s protection technologies have very little impact on the performance of your systems.

Efficient use of existing storage capacity
To help you make more efficient use of your data storage, Kaspersky’s file filtering technologies help you to eliminate the storage of unnecessary files – and make it easier to enforce your document storage policies. You can create lists of prohibited file names and extensions – and Kaspersky also provides preset file type profiles that let you rapidly implement policies for music, video, executable files and more.

By analysing real file formats – regardless of the file extension name – Kaspersky technology ensures security policies cannot be violated by files that avoid the use of a prohibited file extension.

Flexible content filtering
By checking all documents against lists of prohibited content – including explicit words / phrases and the use of offensive language – content filtering helps you to control and assign internal collaboration policies. With pre-installed dictionaries / categories – and the ability to create your own list of prohibited words and phrases – it’s simple to configure content filtering that’s tailored to your business’s requirements.

Real-time status display
While Kaspersky’s dashboard display gives you at-a-glance access to real-time data – including IT security status, database version and licence status for all protected servers – Kaspersky TOTAL Security for Business also makes it easy to generate reports on events and security status.

Kaspersky TOTAL Security for Business is delivered complete with Kaspersky Security Center – the centralised management console that gives you control over the vast majority of Kaspersky protection technologies and Kaspersky systems management tools. Because you can manage so many functions from one console, Kaspersky Security Center helps to simplify day-to-day security and systems management tasks.

**** Kaspersky Security Center enables centralised control of most Kaspersky technologies within Kaspersky TOTAL Security for Business – except Kaspersky Security for Internet Gateway, Kaspersky Security for Mail Server and Kaspersky Security for Collaboration.