Endpoint security management is a policy-based approach to network security that requires endpoint devices to comply with specific criteria before they are granted access to network resources. Endpoints can include PCs, laptops, smartphones and tablets, as well as wearables and specialized equipment such as bar code readers, intelligent sensors and point of sale (POS) terminals. Each endpoint in an organization provides multiple attack vectors against the organization's systems, networks and data. Although the perimeter firewall and end-user awareness training remain an important part of defense-in-depth security, the bulk of an organization's security efforts should focus on network endpoint security controls. The business benefits of endpoint security management include decreasing the number of data breaches and other incidents, easing the deployment of new security technologies, reducing costs and blocking unwanted activity. Endpoint security management software Endpoint security management systems, which can be purchased as software or as a dedicated appliance, discover, manage and control computing devices that request access to the corporate network. Endpoint security systems work on a client/server model in which a centrally managed server or gateway hosts the security program and an accompanying client program is installed on each network device. In a software-as-a-service (SaaS) delivery model, the host server and its security programs are maintained remotely by the vendor. In either delivery model, when a client attempts to log onto the network, the server program validates user credentials. Required elements may include an approved operating system, a VPN client and anti-virus software with current updates. Devices that do not comply with policy are given limited access or quarantined on a virtual LAN (VLAN). Endpoints that do not comply with policy can be controlled by the system to varying degrees. For example, the system may remove local administrative rights or restrict Internet browsing capabilities. |
No comments:
Post a Comment