Conference Call: Access Code: Endpoint-Level Security at your Library or Nonprofit Introducing Symantec Endpoint Protection 12

Using ReadyTalk Chat & raise hand All lines are muted If you lose your internet connection, reconnect using the link ed to you. If you lose your phone connection, re-dial the phone number and re-join. ReadyTalk support: Conference Call: Access Code: Introducing Symantec Endpoint Protection 12

This seminar will be available on the TechSoup website along with past webinar presentations: You will receive a link to this presentation, material and links. After the webinar, you can ask follow-up questions in our Community Forum: Twitter hashtag: #techsoup You are being recorded… Conference Call: Access Code: Introducing Symantec Endpoint Protection 12

Conference Call: Access Code: Endpoint-Level Security at your Library or Nonprofit Conference Call: Access Code: Introducing Symantec Endpoint Protection 12

Presenters Kyla Hunt Facilitator Andy Singer Presenter Assisting with chat: Kevin Lo and Rachel Holmen Conference Call: Access Code: Introducing Symantec Endpoint Protection 12

Who is TechSoup? Security Threats Overview Endpoint Products for Libraries and Nonprofits Endpoint Product Updates Demo Q&A from Participants Agenda Conference Call: Access Code: Introducing Symantec Endpoint Protection 12

Who is TechSoup? TechSoup is a 501(c)(3) nonprofit organization. As of June 2010, TechSoup served more than 127,000 organizations, distributed more than 6.3 million technology donations, and enabled nonprofit recipients to save more than $1.8 billion in IT expenses in 33 countries around the world. Conference Call: Access Code: Introducing Symantec Endpoint Protection 12

TechSoup is part of TechSoup Global, is working towards the day when every nonprofit, library, and social benefit organization on the planet has the technology, knowledge, and resources they need to operate at their full potential. Who is TechSoup? Conference Call: Access Code: Introducing Symantec Endpoint Protection 12

Mid-sized Business 100 users 250 users 10 users Small Business SOHO 9 Symantec Endpoint Protection Portfolio Symantec™ Endpoint Protection Small Business Edition Symantec™ Endpoint Protection Client and Server Security Symantec™ Protection Suite Small Business Edition Symantec™ Protection Suite Enterprise Edition Client and Server Security, Mail and Backup Hosted Security for Clients Symantec Endpoint Protection.cloud™ Symantec Endpoint Protection.cloud™ Un-managed Client Security Norton™ from Symantec Conference Call: Access Code: Introducing Symantec Endpoint Protection 12

SMBs are serious about information protection Data loss and cyber attacks rank as the top business risks Two thirds of IT time is spent on information protection related activities Top IT projects are security, backup, recovery, disaster recovery Median spend is $51K on information protection 2,152 SMBs participated from 28 countries 50% of respondents had between 10 and 99 employees 50% of respondents had between 100 and 499 employees Cross-industry Owners, managers, IT staff, consultants SMB Information Protection Survey Results Global Symantec Sponsored Research Conference Call: Access Code: Introducing Symantec Endpoint Protection 12

Cyber attacks and loss of crucial business information 73% saw cyber attacks in past year – 30% of attacks were either somewhat or extremely effective 100% experienced disruption – Downtime, theft of corporate data, personally identifiable information 100% experienced financial impact – Loss of productivity, revenue Annual cost of cyber attacks: $188,242 74% were either somewhat or extremely concerned 42% lost confidential or proprietary information in the past 100% experienced a loss of revenue or business disruption Lost devices a big problem: – 62% lost devices within past 12 months – 100% have some devices that are not password protected 100% have devices that couldn’t be remotely wiped of data Cyber AttacksLoss of Business Information Conference Call: Access Code: Introducing Symantec Endpoint Protection 12

ISTR XVI - Threat Landscape 2010 Overarching Themes      Conference Call: Access Code: Introducing Symantec Endpoint Protection 12

January 2007: 250,000 viruses December 2010: 286 million Conference Call: Access Code: Introducing Symantec Endpoint Protection 12

Malware Authors Have Switched Tactics From: A mass distribution – one worm hits millions of PCs  Storm made its way onto millions of machines across the globe To: A micro distribution model.  Hacked web site builds a trojan for each visiter  The average Harakit variant is distributed to 1.6 users! 75% of malware infect less than 50 machines Conference Call: Access Code: Introducing Symantec Endpoint Protection 12

Threat Activity Trends Attacks Blocked/Technology - Endpoint Protection IPS DetectionsAV Detections Conference Call: Access Code: Introducing Symantec Endpoint Protection 12

SYMANTEC ENDPOINT PROTECTION 12.1 Conference Call: Access Code: Introducing Symantec Endpoint Protection 12

What is SEP 12? Antivirus Anti- spyware Firewall Intrusion Prevention Device Control Application Control Network Access Control (add-on) Single Agent, Single Console Windows, Mac & Linux Conference Call: Access Code: Introducing Symantec Endpoint Protection 12

Up to 70% reduction in scan overhead Smarter Updates Faster Management Powered by Insight Real Time Behavior Monitoring with SONAR Tested and optimized for virtual environments High VM densities Security Built for Virtual Environments Performance What’s New in SEP 12 Conference Call: Access Code: Introducing Symantec Endpoint Protection 12

Powered by Insight Proactive protection against new, mutating threats Puts files in context, using their age, frequency, location and more to expose threats otherwise missed Using community-based security ratings Derived from Symantec's more than 175 million endpoints Insight stopped Stuxnet Conference Call: Access Code: Introducing Symantec Endpoint Protection 12

Why Insight? Neither technique works well for the tens of millions of files with low prevalence. (But this is precisely where the majority of today’s malware falls) Neither technique works well for the tens of millions of files with low prevalence. (But this is precisely where the majority of today’s malware falls) Bad Files Good Files Prevalence White listing can identify common good files “Long Tail” files are harder to classify Blacklisting works well for common malicious files No existing protection addresses the “Long Tail” Conference Call: Access Code: Introducing Symantec Endpoint Protection 12

2 Prevalence Age Source Behavior 3 4 Look for associations Check the DB during scans Rate nearly every file on the internet5 Provide actionable data1 Associations Is it new? Bad reputation? 175 million PCs 2.5 billion files How Insight Works Conference Call: Access Code: Introducing Symantec Endpoint Protection 12

Symantec Protection Model Defense in Depth File-based Protection  Reputation-based Protection Behavioral-based Protection Network-based Protection Looks for and eradicates malware that has already taken up residence on a system Establishes information about entities e.g. websites, files, IP addresses to be used in effective security Looks at processes as they execute and uses malicious behaviors to indicate the presence of malware Stops malware as it travels over the network and tries to take up residence on a system  Insight  Domain Reputation  File Reputation  SONAR  Behavioral Signatures  Protocol aware IPS  Browser Protection Network FileReputationBehavioral Website/ Domain/ IP address File  Antivirus Engine  Auto Protect  Malheur Conference Call: Access Code: Introducing Symantec Endpoint Protection 12

Great Performance Powerful Protection Antivirus Antispyware Firewall Intrusion Prevention Symantec Endpoint Protection Small Business Edition 12.1 Conference Call: Access Code: Introducing Symantec Endpoint Protection 12

Unmatched accuracy 2 Quickly stops new Threats Eliminates risk Symantec Endpoint Protection Small Business Edition Delivers … Ranked FASTEST 1 Fewer, smarter scans Users won’t know it’s there Deploys in 20 minutes 3 One management console Reduced complexity FastSimple Effective Conference Call: Access Code: Introducing Symantec Endpoint Protection 12

25 Fast Scans - Powered by Symantec™ Insight Insight - Optimized Scanning Skips any file we are sure is good, leading to much faster scan times Traditional Scanning Has to scan every file On a typical system, 70 percent of active applications can be skipped! Conference Call: Access Code: Introducing Symantec Endpoint Protection 12

Stops stealth installs and drive-by downloads Monitors applications real time as they execute Threat Detection by Insight Unmatched effectiveness against mutating malware Conference Call: Access Code: Introducing Symantec Endpoint Protection 12

SMALL BUSINESS NEEDS AND CONCERNS Conference Call: Access Code: Introducing Symantec Endpoint Protection 12

Simple - Designed for Small Business 20-Minute deployment from start to finish for an entire network * Automated notifications and summary reports for easy management A single console to manage security for all computers and servers Fast Automated Easy to Manage * On average up to 50-user network Conference Call: Access Code: Introducing Symantec Endpoint Protection 12

Feature Norton Internet Security 2011 Symantec Endpoint Protection Small Business Edition 12.1 # of users Antivirus/Antispyware Desktop Firewall Intrusion Detection/Prevention Insight/SONAR Protection for Mac OS® X Protection for Linux® Device and Application Control Network Access Control Self- Enforcement Plug-in* Hosted Management Infrastructure Centrally Managed Built for Virtual Environments Consumer vs. Business Needs Conference Call: Access Code: Introducing Symantec Endpoint Protection 12

Product Demonstration Download Insight Introducing Symantec Endpoint Protection 12 Conference Call: Access Code:

Conference Call: Access Code: Monitor – Monitor for abuse or suspicious traffic patterns, receive new alerts for new vulnerabilities and threats Antivirus on endpoints is not enough – Deploy and use a comprehensive endpoint security product that includes additional layers of protection Restrict attachments – Configure mail servers to block or remove that contains file attachments that are commonly used to spread viruses Use an effective password policy – Ensure that passwords are a mix of letters and numbers, and change them often, do not use the same password for multiple applications or websites, use complex passwords Ensure that you have infection and incident response procedures in place – Ensure that you have your security vendors contact information, know who you will call, and what steps you will take if you have one or more infected systems Key Takeaways Introducing Symantec Endpoint Protection 12

What To Do Now! Try the product for FREE today – point-protection-small-business-edition point-protection-small-business-edition See the competitive comparison – Introducing Symantec Endpoint Protection 12 Conference Call: Access Code:

Symantec Donation Program To find out more about the Symantec Donation Program, go to To help determine your eligibility, check out TechSoup’s Eligibility Quiz at

QUESTIONS? Conference Call: Access Code: Introducing Symantec Endpoint Protection 12 Picture courtesy of Valerie Everett

Conference Call: Access Code: Thank you to our Webinar Sponsor! ReadyTalk offers dedicated product demos for TechSoup organizations 4 times per week. For more information: pages.readytalk.com/techsoup.html Introducing Symantec Endpoint Protection 12

PLEASE COMPLETE THE POST-EVENT SURVEY Thank You! Introducing Symantec Endpoint Protection 12