・ Symantec Endpoint Protection provides state-of-the-art defense against all types of attacks and seamlessly integrates the essential antivirus security tools needed into a single, high performance agent with a single management console.
• Symantec Endpoint Protection offers the following features: anti-virus, anti-spyware, firewall, intrusion prevention system, application control, device control, and proactive threat scanning.
• As an optional feature, the Symantec Endpoint Protection Manager can be integrated with the Active Directory. The Symantec Endpoint Protection Manager can import the organizational unit and the account data and synchronize that data with the Active Directory automatically.
Room for Improvement:
・ Windows only. Remote management requires IE. Client messages can be confusing. Learning how to configure can take time.
・ Some of the messages that clients receive are not easy to understand. Instead of saying that spy/virus ware is blocked, the client receives a confusing message about HTTP common name traffic detection.
・ During scans and attacks it slower downs the system, making it very difficult to work.
This is the most comprehensive centrally managed endpoint security solution for businesses. It includes a host-based intrusion protection system (HIPS), device control, anti-malware, a network IPS, and a software firewall. Client policy is almost infinitely tweak-able from a central console—practical for large enterprises but a bit of overkill for the average small business.