Symantec Endpoint Protection 12.1: Partner Opportunities
Reputation-based security is not a new technology, but it has long lacked the ability to deal with files that are neither “good” nor “bad.” But Symantec Endpoint Protection 12.1, features new technology that not only recognizes those files of unknown reputation but also deals with them as customers see fit.
Symantec Endpoint Protection 12.1 includes Insight, which identifies files that don’t show up on white lists or black lists and enables users to create risk profiles for those files, and SONAR, which constantly checks the behavior of files determined to be “good” files for any changes in behavior. If a file’s behavior does change, Symantec Endpoint Protection 12.1 can quarantine that file to protect the network at large.
Randy Cochran, Symantec's VP of channel sales, Americas, offers deeper insights in this FastChat Video:
“We’ve really gone to the next level with Insight and identified those files that have no reputation – that have not been on the Internet very long and what do you do with those?” said Cochran. “Our partners can … work with their customers to set a risk profile for those. You can set some parameters that say, for example, if it hasn’t been on the Internet for at least six months or if it doesn’t have at least 10,000 downloads then I don’t want it on my network. It’s really a comprehensive approach to good lists, bad lists and no list at all.”
In addition to Insight and SONAR technology, Symantec has also increased the performance of Symantec Endpoint Protection. The latest version is 3.5 times faster and uses two-thirds less memory than its closest competitor, Cochran said.
“We’ve really beefed up the capability as well as increased the performance and we’re really excited about what that means for our partners,” he said.
Symantec Endpoint Protection 12.1 also includes features that make it a good fit in virtualized environments, Cochran said, such as support for virtual client tagging, virtual image exception and shared insight cache. “We’ve been working with a lot of virtualization vendors out there and we’ve designed the product to [provide] a seamless approach to securing that infrastructure. … When you combine all [the new features], you get up to 90 percent reduction in disk I/O so we really did do a lot to support the virtual environment as well as the physical environment.”
Symantec partners working in either environment have myriad opportunities to sell Symantec Endpoint Protection 12.1, Cochran said, since the latest version is both robust and flexible.
“Having a secure platform and really protecting your data is important to everyone. Data is the No. 1 asset behind your people … so you need to protect it. We’re excited about how partners can differentiate (through the new technology), how they can maximize (through cross-sell and upsell opportunities) and how they can accelerate (by wrapping their own services offerings around SEP 12),” he said.