• E-mail
• Print
• Comment
• Font Size
• Digg
• del.icio.us
• Discuss article

AppSense Extends Desktop Security With New Risk Assessment and Device Management Solutions; Provides Instant View of Desktop and Server Vulnerability; Proactive, Flexible Protection Against Endpoint Security Breaches

Posted on: Monday, 3 April 2006, 09:00 CDT

AppSense, a leader in endpoint security for the enterprise, announced today at InfoSec World extensions to its security software that strengthen device management capabilities while giving trusted users the freedom to authorize their own actions, and a new product to help organizations quickly assess the security 'health' of their system endpoints: New capabilities in AppSense Desktop Security suite enable IT administrators to lock-down USB devices while providing the flexibility required to meet end-users' disparate application needs. A new product called Security Analyzer is a free tool that quickly assesses and reports on security vulnerabilities in desktop, notebook and server environments.

"Endpoint security is critical, but it can't be a one-size-fits-all solution where end-users are so restricted that they can't do their work, or so free that their actions impact others. It's a challenging balancing act," said Danny Francisco, IT manager, British Columbia School District 67, which is renowned for its advanced IT infrastructure. "The AppSense security solution helps us achieve this balance and is integral to our IT recipe. Their new device management and user self-authorization features change the dynamics of how we manage IT security and make a big difference in our ability to secure endpoints while facilitating productivity of our 7,200 users."

AppSense Security Analyzer

AppSense Security Analyzer gives IT and security managers visibility into some of the most common, but often overlooked, endpoint weaknesses by identifying holes that can be exploited by increasingly sophisticated malware, illegal downloads or user-introduced applications.

Upon launch, AppSense Security Analyzer conducts a comprehensive analysis of a system by attempting to run unauthorized applications and perform various non-disruptive activities on the PC, notebook or server. The degree to which it is able to successfully complete these actions indicates the level of risk faced by that device. In less than 60 seconds, AppSense Security Analyzer creates a report that not only identifies where potential vulnerabilities exist, but also provides guidance on how they can best be addressed.

Common vulnerabilities that AppSense Security Analyzer can expose include the ability for users to:

-- Introduce malicious or damaging executable files or be tricked into introducing them

-- Modify unprotected registry keys or add new registry data

-- Download files with altered file extensions, thus introduce executable files

-- Access low level utilities to compromise system stability

-- Run .VBS files which are commonly used for malicious purposes such as virus profligation

-- Inadvertently provide knowledge of the network to a malicious user, allowing them to exploit vulnerabilities

With the information provided, companies can immediately close their security gaps and eliminate vulnerabilities using AppSense Desktop Security software, which provides proactive protection from malware attacks by preventing unauthorized, rogue and malicious applications from executing.

AppSense Desktop Security Extended Capabilities

Gartner Group estimates that while more than 60 percent of organizations want to enforce desktop lockdown, 20 percent of enterprise Windows desktops and fewer than 5 percent of laptops are locked down today.(1) Among the reasons for this low rate are concerns about usability, in which simple Windows operations--such as adding printer drivers that did not ship with Windows and installing extensions to Internet Explorer--are not allowed with a standard user account, and resource constraints, since traditionally lock downs require IT to create cumbersome exception processes that increase IT staff time requirements and complicate image management.

The new capabilities in AppSense Desktop Security suite address lock down usability and resource concerns, enabling organizations to more effectively secure endpoints while providing the flexibility needed for end-users. As with all AppSense products, a complete audit trail is provided for compliance and additional security.

AppSense's new capabilities expand the range of policies that can be applied to end-user accounts and company endpoints:

-- Device Lock-Down - Administrators can now lock-down mass storage devices such as USB pens that can be a major source of enterprise information leakage. Administrators can control USB access across both end-users and machines within the network, as well as auditing and reporting device access.

-- Self-Authorizing Users - Provides a new level of flexibility for different levels of users within the security policy framework that an organization already has in place. While some users may need to be protected by fully locking down the endpoint, others may need access to applications that have not been approved by the organization in order to work effectively. This capability makes that possible without overburdening IT staff. For instance, power users can be warned in advance that they are executing an unauthorized application before running it, and IT is notified so that they can investigate the actions for potential vulnerabilities.

"Most companies don't realize how vulnerable their desktops and servers really are, even with up-to-date anti-virus and firewall systems in place. Because there are so many ways that systems can become infected, it's vital that enterprises enact a proactive approach to protection, rather than one that reactively repairs damage that has already been done," said Martin Ingram, VP of product management, AppSense. "AppSense provides an unparalleled level of proactive protection. And now, with AppSense Security Analyzer and the extended AppSense Desktop Security capabilities, enterprises can determine how vulnerable their endpoints are, and implement measures that ensure malware never gets the chance to affect endpoints."

Availability

AppSense Security Analyzer is available immediately for free download from the AppSense website at www.appsense.com. AppSense Device Lock-down and Self-Authorizing User capabilities are available today as part of AppSense Desktop Security. Companies can download AppSense Desktop Security at www.appsense.com/desktopsecurity and evaluate the technology free of charge for 21 days.

About AppSense

AppSense is the leading provider of application-level endpoint security solutions for the enterprise - proactively protecting desktops, laptops, servers, virtual systems and embedded devices against all forms of malicious software and preserving end point environments in their optimal state to ensure system integrity. AppSense software secures thousands of organizations and is installed on hundreds of thousands of desktops and servers across the world in mid-to-large organizations and across many industries such as Public Sector, Finance, Pharmaceutical and Healthcare. AppSense solutions have been designed for desktops and servers which are based upon the Microsoft Windows platform and are ideal for Windows, Terminal Servers, Citrix MetaFrame Presentation Servers, Web Services and other critical business systems. AppSense operates through a world-wide channel of certified partners with offices in the US, UK, Germany, The Netherlands and Australia. For more information visit: www.appsense.com

(1) Windows Application Control Solutions Provide an Alternative for Desktop Lockdown, Gartner, 3/7/06

Source: Business Wire

More News in this Category