INTRODUCING KASPERSKY SECURITY FOR VIRTUALIZATION LIGHT AGENT FOR





















- Slides: 21
INTRODUCING: KASPERSKY SECURITY FOR VIRTUALIZATION | LIGHT AGENT FOR MICROSOFT AND CITRIX VIRTUAL ENVIRONMENTS
WHAT IS VIRTUALIZATION SUPPOSED TO BRING? REDUCED IT COSTS OS MIGRATIONS FASTER DISASTER RECOVERY VM CENTRALIZED HW MANAGEMENT STABILITY DATA SECURITY
VIRTUAL ENVIRONMENTS IMMUNITY: TRUE OR FALSE? ? ► VIRTUAL ENVIRONMENTS ARE MORE SECURE THAN PHYSICAL ENVIRONMENTS ‘IN 2012, 60% OF VIRTUALIZED SERVERS WILL BE LESS SECURE THAN THE PHYSICAL SERVERS THEY REPLACE’ Gartner ? ► CYBERCRIMINALS DON’T TARGET VIRTUAL MACHINES MORCUT (AKA CRISIS), THE FIRST TROJAN TARGETING VIRTUAL MACHINES, WAS IDENTIFIED IN 2012 ? ► MALWARE CAN’T SURVIVE THE DECOMMISSIONING OF NON-PERSISTENT VIRTUAL MACHINES RESIDENT MALWARE CAN
THE GROWING MALWARE THREAT … New threats per day 315 k+ Spam messages per day 30 M+ Advanced protection is required 1999 Web-borne infections prevented per month 270 M 2001 2003 Network attacks blocked per month 2005 2007 160 M 2009 2011 2013
4 CHOICES TO MAKE NO PROTECTION TRADITIONAL NOT AN OPTION! AGENTLESS VMWARE SUPPORT ONLY 5 PROTECTION GAPS OPTIONS FOR VIRTUAL PROTECTION LIGHT AGENT SUPERIOR SECURITY
NO PROTECTION – NOT AN OPTION VIRTUAL INFECTION AND SPREAD VIRTUAL EAVESDROPPING TARGET OF CYBERCRIMINALS MALWARE CAN SURVIVE “TEAR-DOWN” OF NONPERSISTENT MACHINES 6
TRADITIONAL PROTECTION APPLIED TO VIRTUAL ENVIRONMENTS AV-STORMS REDUNDANT ANTI-MALWARE AND SIGNATURE FILES HIGHER BOOT LATENCY REDUCED CONSOLIDATION RATIOS 7
THE LIGHT AGENT APPROACH OPTIMIZED PERFORMANCE THROUGH TIGHT HYPERVISOR INTEGRATION LIGHT AGENT ALLOWS IN-DEPTH INDIVIDUAL MACHINE SCANNING FOR MAXIMUM PROTECTION SEPARATE DEDICATED SECURITY VIRTUAL MACHINE HANDLES THE HEAVY WORK. VIRTUAL, PHYSICAL AND MOBILE - MANAGED THROUGH A SINGLE CONSOLE HIGHLY SCALABLE FROM SMB TO LARGE ENTERPRISE ORGANIZATIONS 8
HOW KSV | LIGHT AGENT WORKS
KSV | LIGHT AGENT HIGHLIGHTS NO ADVERSE EFFECT ON HYPERVISOR PERFORMANCE FAST, STRAIGHTFORWARD DEPLOYMENT WITH NO REBOOTS CONTROLS LIMIT OR BLOCK TIME- AND SPACEWASTING SOCIAL WEBSITES AND APPLICATIONS SUPPORTS ALL KEY MICROSOFT AND CITRIX VIRTUALIZATION TECHNOLOGIES SHARED CACHE TECHNOLOGY AVOIDS UNNECESSARY RE-SCANNING 10
FILE LEVEL PROTECTION AWARD-WINNING ANTI-MALWARE ENGINE REAL-TIME RESPONSE TO ZERO-DAY THREATS KASPERSKY SECURITY NETWORK CLOUD-BASED INTELLIGENCE DEEP-LEVEL SCANNING AT INDIVIDUAL MACHINE LEVEL, PROTECTING AGAINST THE MOST ADVANCED MALWARE PROACTIVE DEFENSE INCLUDING AUTOMATIC EXPLOIT PREVENTION 11
NETWORK LEVEL PROTECTION FEATURES HOST-BASED INTRUSION PROVENSION SYSTEM (HIPS) AND FIREWALL NETWORK ATTACK BLOCKER IDENTIFIES AND RESPONDS TO SUSPICIOUS TRAFFIC BEHAVIOUR IDENTIFIES AND BLOCKS LINKS TO PHISHING SITES 12
CONTROLS WEB CONTROL APPLICATION CONTROL DEVICE CONTROL
MANAGEMENT - KASPERSKY SECURITY CENTER SINGLE INTUITIVE CONSOLE PHYSICAL, VIRTUAL AND MOBILE ENVIRONMENT MANAGED TOGETHER COMBINED VIRTUAL AND PHYSICAL MACHINE ADMINISTRATION AND REPORTING ‘SINGLE-PANE” APPROACH CREATES EFFICIENCY & SAVINGS FOR STRETCHED IT RESOURCES SCALABLE TO THE MOST COMPLEX ENTERPRISE ENVIRONMENTS 14
MICROSOFT HYPER-V AND CITRIX XEN SUPPORT A SINGLE LICENSE COVERS LIGHT AGENT FOR EITHER OR BOTH PLATFORMS KEY SUPPORTED FEATURES: • DYNAMIC MEMORY • CLUSTER SHARED VOLUMES • LIVE BACKUP 15 KEY SUPPORTED FEATURES: • DYNAMIC MEMORY CONTROL • VM PROTECTION & RECOVERY (VMPR) • XENMOTION (LIVE MIGRATION) • MULTI-STREAM ICA • CITRIX RECEIVER • PERSONAL VDISK
FLEXIBLE LICENSING CHOOSE BETWEEN “PER-MACHINE” OR “PER-CORE” ‘PER MACHINE’ –BASED ON MAXIMUM NUMBER OF ACTIVATED VIRTUAL MACHINES RUNNING CONCURRENTLY ‘PER CORE’ – COVERS ALL HARDWARE CORES ACROSS THE ORGANIZATION /DATA CENTER. ‘PER CORE’ - IDEAL FOR INFRASTRUCTURE AS A SERVICE (IAAS), WHERE VM COUNT FLUCTUATES A SINGLE LICENCE COVERS BOTH HYPER-V, XEN AND VMWARE (AGENTLESS) PLATFORMS 16
FLEXIBLE LICENSING - HOW IT WORKS A SINGLE LICENSE COVERS LIGHT AGENT FOR EITHER OR BOTH PLATFORMS Virtual Servers and Workstations BAND: 1+ CORE KEY FILE: 1 TERM: 1, 2, 3 YEARS BAND: 1+ SERVERS | 10+ WORKSTATIONS KEY FILE: 1 TERM: 1, 2, 3 YEARS • BASE • RENEWAL • CROSS-GRADE 17 • EDUCATIONAL • PUBLIC SECTOR • GOVERNMENTAL
KSV | LIGHT AGENT IS: SIMPLIFIED MANAGEMENT PERFORMANCE ADVANCED FILE LEVEL PROTECTION NETWORK PROTECTION VIRTUAL MACHINE CONTROLS
KASPERSKY SECURITY FOR VIRTUALIZATION - LIGHT AGENT PROVIDES OUTSTANDING PROTECTION AND CONTROLS FOR HYPER-V AND XEN PLATFORMS AT FILE AND NETWORK LEVEL, WITHOUT COMPROMISING PERFORMANCE.
20
THANK YOU! Contact Kaspersky or your preferred reseller for more information on Kaspersky’s virtualization security options