User manual SYMANTEC ALTIRIS SECURITY EXPRESSIONS DATASHEET

[. . . ] Data Sheet: Compliance and Security Management Altiris® SecurityExpressionsTM Proactive Security Configuration Management Overview One of the leading causes of security breaches and loss of data is improperly configured systems. Achieving and maintaining conformity across multiple systems challenges even the most technically adept and process-focused organizations. Even more complex is the ongoing validation that ensures that carefully-tuned security controls remain unchanged. [. . . ] The resulting policies can be tailored and published to document administrative controls. solutions from other solutions. Page 1 of 4 Confidence in a connected world. Data Sheet: Compliance and Security Management Altiris® SecurityExpressionsTM Quickly Identify Non-compliant Systems Symantec solutions allows IT and security personnel to conduct real-time audits. Altiris technology from Symantec can accurately and quickly compare the system's configurations against the company's existing policy. This process allows IT managers to conduct comprehensive audits on a frequent basis, plan and execute remediation, and re-evaluate compliance with minimal effort. In this manner, any security issues can be quickly identified and addressed. Companies can validate compliance with automated security audits rather than discover too late that vulnerabilities exist. Continually Monitor Security Status Assessing system security postures requires the ability to not only evaluate the system, but also the ability to easily visualize the results and assess progress. SecurityExpressions provides concise reporting that summarizes the results of any audit, as well as detailed reporting that provides all of the information necessary to remediate any vulnerabilities and misconfigurations. Access to reports, including trend and noncompliance reports, allows organizations to plan remediation activities and evaluate risk-based compliance. Organizations can even weigh each rule to produce relative risk analysis, apply asset classification to weight Tackle Issues with Closed-loop Remediation Integration with Altiris® Helpdesk SolutionTM software and Remedy, including extensibility to other service desk systems, enables organizations to plan and remediate systems while tracking configuration changes against ITIL-compliant processes. SecurityExpressions can automatically open an incident based on the audit results. IT administrators can then quickly remediate noncompliant systems using SecurityExpressions' built-in tools or integration with other Altiris management solutions from Symantec such as patch management or software delivery. Once the remediation step is complete, a secondary audit validates the fix and the incident can be closed. Closed-loop remediation improves IT change control processes without disrupting system availability. importance, and review roll-up scores for an entire audit. SecurityExpressions includes a comprehensive reporting function that allows you to compile dozens of reports such as trend, summary, noncompliance, and detail reports. Page 2 of 4 Confidence in a connected world. Data Sheet: Compliance and Security Management Altiris® SecurityExpressionsTM Detect and Evaluate Mobile Systems Mobile systems are infrequently connected to the local network; as a result they are often missed during routine audits. Because these systems also have infrequent communication with management systems, they are more at risk for failing to comply with configuration standards. SecurityExpressions includes an optional add-on, Audit-on-Connect, to ensure that mobile systems can be audited as they connect to the network rather than on a fixed schedule, so systems that are missed in a scheduled audit can be picked up the next time they connect. Optional Server Requirements · Memory--512 MB RAM · Minimum disk space--500 MB · ODBC Database--SQL Server 2000 or 2005, SQL Server Express · Services--IIS 5. 0 or later; Internet Explorer 5. 0 or later to access Operating Systems Supported · Console--Windows Server 2000, 2003 (32- and 64-bit), XP · Optional Server--Windows Server 2000 or Windows Supports Agentless and/or Agent-based Options SecurityExpressions offers both an agentless and an agent-based option that can be mixed and matched as required across all Windows, UNIX and Linux desktops, notebooks, and servers. The included agent does not require administrative credentials and is a perfect solution for auditing servers. [. . . ] Cupertino, CA 95014 USA +1 (408) 517 8000 1 (800) 721 3934 www. symantec. com Confidence in a connected world. Copyright © 2008 Symantec Corporation. Symantec and the Symantec logo are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U. S. Other names may be trademarks of their respective owners. [. . . ]