Shulou(Shulou.com)06/01 Report--

EndPoint Learning path _ 01:EndPoint Overview

Where the time is, the harvest is there!

Recently, I had a chance to participate in a terminal security management project. I also challenge myself and change my mindset to try to contact a new product again: learn it, understand it, conquer it. Turn learning ability into skill improvement, then absorb and apply it to your own work, show self-worth and enhance self-pursuit!

[personal humble opinion]

For the learning and mastery of any product, you might as well try to learn and precipitate step by step with the learning way of "overview"-> "principle"-- > "structure"-- > "practice", and then turn to the self-understanding and absorption of the product. Here, take the EndPoint product as an example, individuals will continue to update the learning ideas and methods of the product, hope that peers or like-minded people can give more guidance and communication (personal WeChat account: qq-970558252).

An overview of EndPoint

Endpoint policy management:

The Check Point Endpoint Policy Management Software Blade simplifies endpoint security management by unifying all endpoint security features of PC and Mac in a single console. Monitoring, managing, educating and implementing policies, from at-a-glance dashboards to user and machine details, can be done with a few clicks.

The advantages of

1) Unified endpoint security management reduces security vulnerabilities

L unify all endpoint security in a single management console

Concise policy language focused on business processes

L achieve comprehensive, immediate security through preconfigured, customizable policies

L is integrated into the Check Point software blade architecture for on-demand security

2) maximum visibility and security controls and clear dashboards

Manage the security of the entire organization, groups, users and their devices

L implement and repair endpoint compliance before accessing the network

L search for security events across networks and endpoints

Manage endpoints and network security from one management device

3) Policy management and security of users, not just machines

L gain an in-depth understanding of users and all their related computers to investigate status

L apply security policies to users no matter what computer they log on

Modify, track and report policy changes at all levels of the organization

L use AD or customize your own organizational structure to enforce policies

Zero feature

1) Unified Endpoint Security Management

The Endpoint Security Software Blade is managed by the Endpoint Policy Management Software Blade under a console and server, providing:

Full encryption: a combination of pre-boot protection, enabling authentication and strong encryption to ensure that only authorized users can access information stored on desktops and laptops.

Media encryption and port protection: protect data stored on the computer by encrypting removable media devices and allowing strict control of computer ports (USB, Bluetooth, etc.).

L Capsule Docs:Capsule Docs is a secure mobile document management system that tracks your documents anytime, anywhere, ensuring that you have complete control over who accesses sensitive data and what they can do with it.

L remote access × ×: remote security, seamless access to the corporate network

L Anti-malware: protects endpoints from unknown viruses, worms and Trojan malware.

L firewalls and compliance checks: block unwanted traffic, prevent malware and block targeted *, and ensure that protected computers meet the organization's security requirements, and assign different levels of security based on the compliance status of the endpoint computer.

L SandBlast agent: SandBlast Agent uses a complete set of real-time advanced protection technologies to protect endpoints, including threat simulation, threat extraction, anti-extortion software, anti-robot, zero phishing and automatic event analysis.

2) Fine user security

In addition to the associated computers, the Endpoint Policy Management Software Blade provides granular user security from a single console.

Using the Active Directory-based structure, you can search or drill down from the console with just a few clicks to see:

L organization

L group

L specific users

L user's related machine

In addition:

All policies and exceptions can be viewed and edited on one screen

L you can change policies for groups or individuals

The unique "slider" makes it easy to set policies.

L you can customize fine-grained policy settings for exceptions

3) Free compliance analysis tool

This free tool allows you to view your current endpoint security status and potential risks immediately. This tool will analyze your security situation and provide reports in three categories: data loss risk, * risk, and malware risk.

4) Integration into Check Point Software Blade Architecture

The endpoint policy management software blade is fully integrated into the software blade architecture, allowing customers to quickly expand security to meet changing needs, saving time and reducing costs.

5) single console and customizable overview dashboard

The Endpoint Policy Management Software Blade enables central policy management, enforcement, and logging from a single user-friendly console. Centralized management provides unparalleled leverage and security policy control, and a variety of deployment options provide easy installation and minimize user impact, reducing overall operating costs.

6) Compliance check

The Endpoint Policy Management Software Blade allows you to enforce endpoint compliance on multiple checks before the user logs on to the network.

You can check out:

L installed the appropriate endpoint security software blade

The correct OS Service Pack is installed on the endpoint

Only approved applications can run on endpoints

The appropriate anti-malware product and version are running on the endpoint.

In addition, if the user does not comply with the policy, the user is set to observe, warn, or restrict access to the network. In addition, automatic or user-based remediation is allowed

7) Integration with Check Point management architecture

Manage endpoints and network security from one management device, with functions such as performing security forensics, security analysis and searching for security events.

Note: the definition, functions, features and characteristics of the product concept are recommended to be studied and consulted on the official website.

The above information comes from

Https://www.checkpoint.com/products/endpoint-policy-management/

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.