Symantec Endpoint Protection 11.0 Update and Review Endpoint Security Group September 2008

Symantec Endpoint Protection 11.0Update and Review

Endpoint Security Group

September 2008

2

Agenda

New features and improvements in SEP MR2/MR31

2

Upsell/Cross-sell Opportunities3

Selling Tips and Resources4

NEW! Third Party SEP Research Results

Q&A5

3

Symantec Endpoint Protection MR2

• Applications • Windows 2008 support (client)• Windows Vista SP1 support (client)• MSFT NAP Framework• Enhanced Device Control Support

• Performance• Fixed port leaks• Optimized/fixed disk space utilization (LiveUpdate, database, AV Logs)• Reduced CPU utilization• Client communication speed improvement

• Functionality/Usability• Stability

– Reduced the amount of crashes and errors that appear on the screen

• Communication and Connectivity– Improved communication between SEPM and SEP client

• Resolved inconsistent scanning of files on SEP client

• Improvements to SEPM console home page include all charts displayed properly, all agents and agent status appear correctly • Fixed site and agent replication issues • Fixed ClientRemote Utility • Optimized creation of group folders so that they can be created in a timely manner • Optimized performance of Active Directory synchronization to avoid database deadlocks • Minimized boot time on SEP client by optimizing Symantec processes during startup • Device control enhancements that permit more specific granularity of choices i.e. Vendor Device ID

4

SEP 11.0 Maintenance Release 3 (MR3) enhancements

Boot Time

• Significant boot time impact improvement

• Utilize persistent cache of known good files between reboots

• Delayed loading of definitions reduces memory usage by 60MB when not on-demand scanning

• Reduced On Disk Footprint: 284MB

• Less disk I/O• Reduced thread count

Comparisons based on Symantec internal tests on a test system of 1.0 Ghz CPU and 256MB RAM.

SCS 3.1.6 SEP MR0 SEP MR1 SEP MR2 SEP MR30.00

100.00

200.00

300.00

400.00

500.00

Competitive Boot Time

Windows XP SP 3256 MB RAM / 1 GHZ

Windows XP SP3 1 GB RAM / 1.86 GHZ

0

20

40

60

80

100

120Symantec Endpoint Protection 11.0 MR3 - BETA

Trend Micro OfficeScan 8.0 - Evaluation

McAfee Total Protection of Endpoint - Evalua-tion

• McAfee VirusScan Enterprise 8.5i• McAfee AntiSpyware Enterprise 8.5• McAfee HIPS 7.0• McAfee SiteAdvisor 1.5

Comparisons based on Symantec internal tests using competitive trialware for the products referenced above .

Application Load Time

Microsoft Word Microsoft Outlook0

2

4

6

8

10

12

14

16

18





Comparisons based on Symantec internal tests using competitive trialware for the products referenced above on a test system of 1.0 Ghz CPU and 256MB RAM.

Website Load Time

yahoo.com google.com0

1

2

3

4

5

6

7

8





Comparisons based on Symantec internal tests using competitive trialware for the products referenced above on a test system of 1.0 Ghz CPU and 256MB RAM.

• Utilizes a new delta creation process called X-Delta.

• Typically delta creation takes seconds instead of minutes (as was the case with MR2 and previous).

• Managed clients must be running MR3 also for this X-Delta process to work.

• Previous process (mdef25builder )is still present and utilized for all preMR3 managed clients.

Improved Management Server Performance

Symantec Endpoint Protection 11.0 – MR3 and Beyond… 9

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111120

5

10

15

20

25

30

35

40

45

Time(s)

MR2 resource usage with mdefbuilder

MR3 improvements with x-delta

Significant reduction in resource usage during delta content creationExample shows a one month delta being created

10

SEPM Performance MR3 vs. MR2

Symantec Endpoint Protection 11.0 – MR3 and Beyond…

Significant speed improvement…

Smaller delta sizes in certain cases…

SEPM Performance MR3 (X-Delta) vs MR2

Symantec Endpoint Protection 11.0 – MR3 and Beyond… 11

• Content download more virtualization friendly.

• Configurable option to randomize when client will pull content from SEPM after it is available on the server.

• Ensures less chance of heavy disk I/O due to the SEP client on different VMs loading new content at the same time.

12

Content Download Randomization


• Control # days content is stored• Control amount of disk space used

on client• Configure client to never bypass

GUP– Configure the hours and days clients will

wait for GUP until the download directly from SEPM

– Configure client to never bypass so that traffic is minimized

• Increased Scalability of client to GUP ratio

– Now officially supports up to 1000 clients

– Configurable thread pool used to serve clients (10-1000)

13

GUP Enhancements


14

• Allows admin to have control over specific policies

• AntiVirus and AntiSpyware

• Firewall

• Intrusion Prevention

• Application and Device Control

• Centralized Exceptions

• Host Integrity

• Policies not selected, will not appear in UI

• All policies enabled by default

• Policies filtered in Clients and Policy Library

Granular Roles Administration


• More secure because we only enable the options we need.

• Previous website (IIS default) enabled many options, was more prone to vulnerability and attack.

• Custom helps avoid conflicts with other apps or specific configuration which are used with the default website.

15

IIS custom website now utilised by default


16

Symantec Endpoint Protection MR3

• LiveUpdate in SEPM• Automatic download of new releases to the SEPM console via

LiveUpdate!

• Virtualization Support• Randomize Client connections to SEPM for obtaining Content

Updates

• Scalability Controls• Group Update Provide modifications

• Other• SNAC trialware now included!• Fixes 160+ bugs!!!

17

MR3 Beta Customer

“ Great news… I have created a Pilot group on the management server … We have heard great feedback at this point. Pre MR3 reports of 30 minutes from startup to usability to presently not even noticing it is running at startup are good signs.. Additionally, sluggishness during full scans has dropped dramatically… I would like to pilot a larger group on the MR3 but for now, I am getting very positive feedback…”

• US Financial Services company specializing in tax services

18

The Tolly Group: Impact on Office Productivity

Productivity Impact

• Highlight Symantec’s strengths vs. McAfee– Less impact on typical office usage

– Faster open and save time for Word and PowerPoint

• The Test– Symantec Endpoint Protection11.0 vs. McAfee Total Protection for

Endpoint bundle

– Measure time to open and save 5MB Microsoft Word file

– Measure time to open and save 20MB Microsoft PowerPoint file

• The Result– Better Open and Save times when compared to McAfee

19

Productivity Impact

Tim

e (

se

co

nd

s)

Microsoft Office 2007/Vista File “Open” Times(Increase Over Unprotected System)

Source: The Tolly Group – Symantec Endpoint Protection vs. McAfee Total Protection for Endpoint Page 1 (08/2008)

Productivity Impact

Tim

e (

se

co

nd

s)

Microsoft Office 2007/Vista File “Save/Close” Times(Increase Over Unprotected System)

Source: The Tolly Group – Symantec Endpoint Protection vs. McAfee Total Protection for Endpoint Page 1 (08/2008)

22

Upsell/Cross-sell Opportunities

23

Competitive Displacement: Solution

Symantec Endpoint Protection

Symantec Network Access Control Starter Edition

+ • Includes lic. & 1 year maintenance

• Single Comp UG SKU

• Live now

Up to 50% savingsoff of MSRP

Symantec Multi-tier Protection

Symantec Network Access Control Starter Edition

+ • Includes lic. & 1 year maintenance

• Single Comp UG SKU

• Live now

Up to 50% savingsoff of MSRP

Op

tion

1O

ptio

n 2

24

Up selling Customers to SMP

Symantec™ Multi-tier Protection 11.0• Symantec Endpoint Protection 11.0 • Symantec AntiVirus for Macintosh & Linux• Symantec Mail Security for Domino & MS Exchange • Symantec Mobile AntiVirus for Windows Mobile (NEW!)• SMS 8300 Software Subscription (AV & AS) (NEW!)• Premium Antispam (NEW!)

Symantec™ Multi-tier Protection Small Business Edition 11.0

Symantec Endpoint Protection 11.0 Symantec Mail Security for MS Exchange Symantec AntiVirus for Macintosh 10.2 (NEW!)Premium Antispam (NEW!)

Heterogeneous protection for larger organizations

Windows based protection for smallerorganizations (but not limited to them)

25

The Big Draw SEP – Competitive Showdown Promotion

• Products eligible

– SEP and SMP products• Add on rewards for:

– Competitive displacement SEP/SMP SKUs: extra $250

– Adding SNAC: extra $100• Express, Academic, Government and

Rewards Buying Programs

New and Improved!!

26

Resources and Next Steps

MR3 Resources available

Partner ToolKit• Technical and

sales training

• How to get product support from Symantec

• How to install and Deploy Endpoint Protection

• Best practices

• Where to find more valuable resources

http://go.symantec.com/endpoint_protection_mr2


Migration Assistance online

http://www.symantec.com/enterprise/support/endpointsecurity/migrate/index.jsp

http://www.symantec.com/enterprise/support/endpointsecurity/migrate/index.jsp

Symantec Technology Network

Endpoint Security 29

www.symantec.com/stn

30

Presentation Identifier Goes Here

30

Sales Tools

• PartnerNet – Datasheets, Quickstart Guides, licensing guides, trainings, sales

scripts, FAQ, cross sellers, presentations, and more!

– SKU Generator

– Sales and Technical Webcasts

– MR3 Page: http://go.symantec.com/endpoint_protection_mr3

• Symantec.com: Partners– http://www.symantec.com/partners/index.jsp

• SMB Resources– http://www.symantec.com/partners/smb_resources/index.jsp

• Symantec University– http://www.symantec.com/partners/training/index.jsp


http://www.symantec.com/partners/index.jsp

http://www.symantec.com/partners/smb_resources/index.jsp

http://www.symantec.com/partners/training/index.jsp

Additional Tools & Resources

• SEP Installation & Migration Site– http://www.symantec.com/business/support/endpointsecurity/mi

grate/

• New Installation & Deployment Flash Tour– http://www.symantec.com/business/products/multimedia.jsp?pci

d=2241&pvid=endpt_prot_1

31

http://www.symantec.com/business/support/endpointsecurity/migrate/

http://www.symantec.com/business/support/endpointsecurity/migrate/

http://www.symantec.com/business/products/multimedia.jsp?pcid=2241&pvid=endpt_prot_1

http://www.symantec.com/business/products/multimedia.jsp?pcid=2241&pvid=endpt_prot_1

Next Steps

• Ensure your SMB customers know about the improvements in MR2 and MR3

• Download the MR3 Toolkit for all sales and technical materials

• Use the resources available from Symantec to make selling to all your customers easy!

32

33

&ANSWERSQUESTIONS

BACKUP

Documents

Symantec Endpoint Protection 11.0 Update and Review Endpoint Security Group September 2008