User manual VMWARE VSHIELD ENDPOINT DATASHEET

[. . . ] DATA S H E E T VMware vShield Endpoint Endpoint Security for Virtual Datacenters AT A G L A N C E VMware vShield Endpoint strengthens security for virtual machines and their hosts while improving performance by orders of magnitude for endpoint protection. vShield Endpoint enables offloading of antivirus and anti-malware processing to dedicated security-hardened virtual machines delivered by VMware partners. [. . . ] ·Improvevirtualmachineperformanceand eliminate antivirus and anti-malware bottlenecks. ·Reduceriskbyeliminatingagentssusceptibleto attacks, and enforce remediation more easily. ·Satisfyauditrequirementswithdetailedlogging of antivirus and anti-malware activities. How Does VMware vShield Endpoint Work? vShield Endpoint protects virtual machines and their hosts against viruses, malware and other threats. vShield Endpoint plugs directly into vSphere and consists of three components: 1. VMware Endpoint Security (EPSEC) loadable kernel module (LKM) to link the first two components at the hypervisor layer vShield Endpoint monitors virtual machine file events and notifies the antivirus engine, via VMware EPSEC, which scans and returns a disposition. It also supports scheduled full and partial file scans initiated by the antivirus engine in the security virtual machine. VMware vShield Endpoint streamlines and optimizes antivirus and anti-malware deployments for virtualized environments. P R O D U C T DATA S H E E T / 1 VMware vShield Endpoint When remediation is necessary, administrators can specify what actions to take using their existing antivirus and anti-malware management tools, and vShield Endpoint manages any action withintheaffectedvirtualmachines. Antivirus and Anti-Malware Service Across Virtual Machines ·Antivirusengineandsignaturefilesareonlyupdatedwithinthe security virtual machine, but policies can be applied across all virtual machines on a vSphere host. How Is VMware vShield Endpoint Used? Streamline antivirus and anti-malware deployment ­ With vShield Endpoint, administrators only need to deploy the enterprise antivirus engine and signature file to a single security virtual machine instead of each and every individual virtual machine on a vSphere host. Improve virtual machine performance ­ vShield Endpoint helps organizations securely achieve higher consolidation ratios by offloading activities such as antivirus and anti-malware scans from individual virtual machines to a single security virtual machine on each vSphere host. Prevent antivirus storms and bottlenecks ­ Administrators can use vShield Endpoint to prevent antivirus storms and prevent bottlenecks associated with multiple simultaneous antivirus and anti-malware scans and updates. Protect Antivirus security software from attack ­ vShield Endpoint lets administrators deploy and run the antivirus and anti-malware client software in a hardened security virtual machine to prevent attacks that target antivirus and antimalware solutions. Enforce Remediation ·Pre-definedpoliciesdictatewhetheramaliciousfileshouldbe deleted, quarantined or otherwise handled. ·vShieldEndpointdrivermanagesfileremediationactivitywithin the virtual machine. Partner Integrations ·IntegrationofVMwarevShieldEndpointwithsecurityvirtual machine solutions from VMware partners is facilitated through VMware EPSEC, which provides a library and API for introspection into file activity at the hypervisor layer. Policy and Configuration Management ·vShieldManagerprovidesfull-featuredconfigurationofvShield Endpoint policies. ·RESTAPIsallowcustomizedintegrationofvShieldEndpoint capabilities into solutions. Logging and Auditing ·Loggingisbasedonsyslogstandard. ·RESTAPIsandvShieldManagerprovideaccessto third-party logging and auditing tools. [. . . ] VMware products are covered by one or more patents listed at http://www. vmware. com/go/patents. All other marks and names mentioned herein may be trademarks of their respective companies. [. . . ]