Kaspersky Endpoint Security 8
A number of new features was introduced in Kaspersky Endpoint Security 8 for Windows:
Application control – allows or blocks particular software depending on the corporate security policy. Application control includes:
Application startup control component. It uses allowing and blocking rules configured by an administrator. The rules can be based on software categories developed by Kaspersky Lab, or as fits the administrator. Active Directory integration allows assigning these rules to users or Active Directory groups.
Application activity control component. It blocks software depending in its threat level and reputation, according to Kaspersky Lab criteria.
Vulnerability monitor component. It allows detecting vulnerabilities in software installed and run on the computer.
New Web control component. It allows creating limiting and blocking rules for web sites. Among the rule settings are web content categories, data types, particular URLs or groups of URLs. Active Directory integration allows assigning these rules to users or Active Directory groups.
New GUI.
The main application window displays all the necessary statistics on control and protection components, as well as scan and update task execution.
Added IRC, Mail.ru, AIM protocols traffic scan.
Added Active Directory integration.
Improved in Kaspersky Endpoint Security 8 for Windows:
Improved antivirus protection, in particular through Kaspersky Security Network integration. The integration serves for receiving reputation data and files/URLs verdicts.
Improved active infection elimination technology.
Improved self-defense against file, process, and system registry modification.
Improved proactive defense technologies:
The System watcher component allows logging software activity;
The BSS (Behavior Stream Signatures) proactive defense technology allows identifying malicious behavior using updatable signature database;
The disinfection process now allows to rollback malicious actions carried out by malware.
Improved Firewall component. It monitors incoming/outgoing traffic by ports, IP addresses, traffic-generating software.
Improved IDS (Intrusion Detection System): it is now possible to add exclusions by IP address.
Improved Device control component:
extended list of supported buses and device types;
it is now possible to use device serial numbers as criteria;
it is now possible to limit access to device file systems on the level of read / write / view device folders tree;
added scheduling.
|
