By controlling the launch and activity of all applications and system drivers, Enterprise Suite enables the effective protection of endpoints against all types of malware and vulnerability exploits without the need for frequent and cumbersome signature updates. This approach also blocks zero-day threats and user activity such as unauthorized information or device access, launching of unapproved applications, and other actions that run counter to corporate security policies.
The Enterprise Suite PLUS antivirus scanner is provided to enable scanning of unknown applications for malware using a combination of signatures and heuristic analysis. Depending on the results of the scan, administrators can decide whether to launch the application in a sandbox or without restrictions. It can also be used to scan external devices for malicious software prior to allowing those devices to connect to the network.
User-driven rules for application activity, file system and registry access, peripheral device and network resource access, combined with monitoring and logging, allow administrators to control and block malicious or unintentionally-risky employee actions. Centralized management and a modular approach reduce the cost and workload for administrators.
Enterprise Suite PLUS consists of the following modules:
|→ Protection against all kinds of malicious software and hacker attacks|
|Dynamic integrity control||
Controls application launches, blocking the launch of hidden applications, and preventing new applications from launching until the administrator can determine whether the application should be permitted to run.
Unknown or potentially dangerous applications are launched in a limited user account or a sandbox , so they cannot affect other processes or the system itself. This method allows malicious activity to be blocked before patches or signature updates can be applied.
|Application activity control||
Controls how different applications can access files and folders, USB drives, registry keys, external devices, and network resources. User-driven rules can be created to control application activity.
Enterprise Suite PLUS has a built-in antivirus scanner that enables scanning of files for known malicious code and repairing of infected files where possible. It also enables administrators to scan unknown applications before launching them and to perform regular system scans if required.
|Targeted software protection||
Enables custom protection to be implemented for specific software in the following ways:
|→ User activity control and data loss prevention|
|Application launch control||
Block attempts by users to launch any unknown application or block only specified unwanted software such as games or multimedia players.
|Access to files and folders||
Set access rules to files and folders for individual applications or groups of applications. Active Directory support enables rules to be set for individual users or groups of users.
|Access to peripheral devices||
Granular settings control access to USB drives and CD/DVD devices, down to the level of device type, name, vendor and ID.
|Monitor access to file storage and other external devices||
Alerts are generated whenever access to an unauthorized application launch or unauthorized file, registry or external device is attempted. Using the audit logs, reports can easily be created to provide timely information about all endpoint activity.
|Remote display screen shot session||
Remote screen shot session of user’s workstation display in real time as part of a forensic investigation.
|Record keyboard input||
Record all keyboard input for any application in order to track who used a particular application when and what data was entered or changed.
|Shadow copying of changed files||
Automatically saves original copies of changed or deleted files and system registry keys.
|System usage monitoring||
Keep track of who uses which applications as well as the time spent using those applications.
|→ Cutting edge technologies|
|SysWatch Enterprise Suite PLUS built around SoftControl’s unique, patent-pending V.I.P.O. (Valid Inside Permitted Operations) technology, which combines three levels of protection:|
|D.I.C. (Dynamic Integrity Control)||
Protects all executable software on the system by detecting any unauthorized activation attempt and preventing the process from launching before damage can occur. Preserves the system in a known-good state.
|D.S.E. (Dynamic Sandbox Execution)||
Specially-designated user account for potentially dangerous software provides system-level privilege controls to block malicious software activity. Also protects the PC from software vulnerabilities.
|D.R.C. (Dynamic Resource Control)||
Controls how different applications can access files and folders, registry keys, external devices, and network resources.
|→ Easy to deploy and manage|
Easily scales to meet the needs of growing businesses.
|Integration with other security solutions||
Operates alongside and can be integrated with other security and network management tools, such as SIEM, IAM, network traffic security, encryption, and traditional antimalware solutions.
|→ Centralized management|
SysWatch Enterprise Suite PLUS installations can be updated through local server connections.
|Remote management console||
The built-in remote management console supports remote installation and uninstallation, policy and configuration changes.
The management console enables administrators to remotely make decisions on action to be taken in case of incidents such as attempts to launch unknown applications or breach of security policy or to process incidents automatically.
If, for any reason, the client is stopped on a remote workstation, or there is an attempt to breach security policies, an alert is issued to the management console or directly to a designated administrator via email.
SafenSoft, 2004-2019. All rights are reserved.