Kaspersky security for virtualization light agent launch presentation

INTRODUCING:KASPERSKY SECURITY FOR VIRTUALIZATION | LIGHT AGENTFOR MICROSOFT AND CITRIX VIRTUAL ENVIRONMENTS

FASTER DISASTERRECOVERY

REDUCED IT COSTS

OSMIGRATIONS

STABILITYCENTRALIZEDHW MANAGEMENT

DATASECURITY

VMVM

WHAT IS VIRTUALIZATION SUPPOSED TO BRING?

► VIRTUAL ENVIRONMENTS ARE MORE SECURE THAN PHYSICAL ENVIRONMENTS?‘IN 2012, 60% OF VIRTUALIZED SERVERS WILL BE LESS SECURE THAN THE PHYSICAL SERVERS THEY REPLACE’ Gartner

FALSE

► CYBERCRIMINALS DON’T TARGET VIRTUAL MACHINES?FALS

EMORCUT (AKA CRISIS), THE FIRST TROJAN TARGETING VIRTUAL MACHINES, WAS IDENTIFIED IN 2012

► MALWARE CAN’T SURVIVE THE DECOMMISSIONING OF NON-PERSISTENT VIRTUAL MACHINES

?FALSE

RESIDENT MALWARE CAN

VIRTUAL ENVIRONMENTS IMMUNITY: TRUE OR FALSE?

New threa

ts per day

315k+

Network

attacks blocked

per month

160M

Spam messages

per day

Web-borne

infections

prevented per month

30M+

1999 2001 2003 2005 2007 2009 2011 2013

270M

Advanced protection is required

THE GROWING MALWARE THREAT …

5

4 CHOICES TO MAKE

AGENTLESS

NO PROTECTION

LIGHT AGENT

TRADITIONAL

OPTIONS FOR

VIRTUAL PROTECTIO

N

NOT AN OPTION!

PROTECTION GAPS

VMWARE SUPPORT ONLY

SUPERIOR SECURITY

MALWARE CAN SURVIVE “TEAR-DOWN” OF NON-PERSISTENT MACHINES

NO PROTECTION – NOT AN OPTION

6

VIRTUAL INFECTION AND SPREAD

VIRTUAL EAVESDROPPING

TARGET OF CYBERCRIMINALS

REDUCED CONSOLIDATION RATIOS

TRADITIONAL PROTECTION APPLIED TO VIRTUAL ENVIRONMENTS

7

AV-STORMS

REDUNDANT ANTI-MALWARE AND SIGNATURE FILES

HIGHER BOOT LATENCY

8

VIRTUAL, PHYSICAL AND MOBILE - MANAGED THROUGH A SINGLE CONSOLE

THE LIGHT AGENT APPROACH

OPTIMIZED PERFORMANCE THROUGH TIGHT HYPERVISOR INTEGRATION

LIGHT AGENT ALLOWS IN-DEPTH INDIVIDUAL MACHINE SCANNING FOR MAXIMUM PROTECTION

SEPARATE DEDICATED SECURITY VIRTUAL MACHINE HANDLES THE HEAVY WORK.

HIGHLY SCALABLE FROM SMB TO LARGE ENTERPRISE ORGANIZATIONS

HOW KSV | LIGHT AGENT WORKS

10

SUPPORTS ALL KEY MICROSOFT AND CITRIX VIRTUALIZATION TECHNOLOGIES

KSV | LIGHT AGENT HIGHLIGHTS

NO ADVERSE EFFECT ON HYPERVISOR PERFORMANCE

FAST, STRAIGHTFORWARD DEPLOYMENT WITH NO REBOOTS

CONTROLS LIMIT OR BLOCK TIME- AND SPACE-WASTING SOCIAL WEBSITES AND APPLICATIONS

SHARED CACHE TECHNOLOGY AVOIDS UNNECESSARY RE-SCANNING

PROACTIVE DEFENSE INCLUDING AUTOMATIC EXPLOIT PREVENTION

FILE LEVEL PROTECTION

11

AWARD-WINNING ANTI-MALWARE ENGINE

REAL-TIME RESPONSE TO ZERO-DAY THREATS - KASPERSKY SECURITY NETWORK CLOUD-BASED INTELLIGENCE

DEEP-LEVEL SCANNING AT INDIVIDUAL MACHINE LEVEL, PROTECTING AGAINST THE MOST ADVANCED MALWARE

NETWORK LEVEL PROTECTION

12

FEATURES HOST-BASED INTRUSION PROVENSION SYSTEM (HIPS) AND FIREWALL

NETWORK ATTACK BLOCKER IDENTIFIES AND RESPONDS TO SUSPICIOUS TRAFFIC BEHAVIOUR

IDENTIFIES AND BLOCKS LINKS TO PHISHING SITES

WEB CONTROL

APPLICATION CONTROL

DEVICE CONTROL

CONTROLS

14

MANAGEMENT - KASPERSKY SECURITY CENTER

SINGLE INTUITIVE CONSOLE

PHYSICAL, VIRTUAL AND MOBILE ENVIRONMENT MANAGED TOGETHER

COMBINED VIRTUAL AND PHYSICAL MACHINE ADMINISTRATION AND REPORTING

‘SINGLE-PANE” APPROACH CREATES EFFICIENCY & SAVINGS FOR STRETCHED IT RESOURCES

SCALABLE TO THE MOST COMPLEX ENTERPRISE ENVIRONMENTS

15

MICROSOFT HYPER-V AND CITRIX XEN SUPPORT

KEY SUPPORTED FEATURES:• DYNAMIC MEMORY• CLUSTER SHARED VOLUMES

• LIVE BACKUP

KEY SUPPORTED FEATURES:• DYNAMIC MEMORY CONTROL• VM PROTECTION & RECOVERY (VMPR)

• XENMOTION (LIVE MIGRATION)• MULTI-STREAM ICA• CITRIX RECEIVER• PERSONAL VDISK

A SINGLE LICENSE COVERS LIGHT AGENT FOR EITHER OR BOTH PLATFORMS

A SINGLE LICENCE COVERS BOTH HYPER-V, XEN AND VMWARE (AGENTLESS) PLATFORMS

FLEXIBLE LICENSINGCHOOSE BETWEEN “PER-MACHINE” OR “PER-CORE”

16

‘PER MACHINE’ –BASED ON MAXIMUM NUMBER OF ACTIVATED VIRTUAL MACHINES RUNNING CONCURRENTLY

‘PER CORE’ – COVERS ALL HARDWARE CORES ACROSS THE ORGANIZATION /DATA CENTER.

‘PER CORE’ - IDEAL FOR INFRASTRUCTURE AS A SERVICE (IAAS), WHERE VM COUNT FLUCTUATES

17

FLEXIBLE LICENSING - HOW IT WORKS

BAND: 1+ COREKEY FILE: 1TERM: 1, 2, 3 YEARS

BAND: 1+ SERVERS | 10+ WORKSTATIONS

KEY FILE: 1TERM: 1, 2, 3 YEARS

PER-CORE

PER-MACHINE

A SINGLE LICENSE COVERS LIGHT AGENT FOR EITHER OR BOTH PLATFORMS

Virtual Servers and Workstations

•BASE

•RENEWAL

•CROSS-GRADE

•EDUCATIONAL

•PUBLIC SECTOR

•GOVERNMENTAL

EACH APPROACH APPLIES TO:

SIMPLIFIED MANAGEMENT

ADVANCED FILE LEVEL PROTECTION

NETWORK PROTECTION

VIRTUAL MACHINE CONTROLS

PERFORMANCE

KSV | LIGHT AGENT IS:

KASPERSKY SECURITY FOR VIRTUALIZATION - LIGHT AGENT

PROVIDES OUTSTANDING PROTECTION AND CONTROLS FOR HYPER-V AND XEN PLATFORMS AT FILE AND NETWORK LEVEL, WITHOUT COMPROMISING PERFORMANCE.

20

KASPERSKY LAB PROVIDES BEST IN THE INDUSTRY PROTECTION*

1

0%

20%

40%

60%

80%

100%

0 20 40 60 80

N of independent tests/reviews

Sco

re o

f TO

P 3 p

lace

s

KasperskyLab1st places – 41

Participation in 79 tests/reviewsTOP 3 = 77%Bitdefender

Sophos

G-Data

Symantec

F-Secure

McAfee

Trend Micro

Avira

Avast BullGuard

AVG

Eset

AhnLab

Microsoft

Panda

In 2013 Kaspersky Lab products participated in 79 independent tests and reviews. Our products were awarded 41 firsts and received 61 top-three finishes.

* Notes:• According to summary result of independent test in 2013 for

corporate, consumer and mobile products• Summary includes tests conducted by the following

independent test labs and magazines:• Test labs: Anti-Malware.ru, AV-Comparatives, AV-Test,

Dennis Technology Labs, MRG Effitas, NSS Labs, PC Security Labs, Tolly Group, VB100

• Magazines: CHIP Online, ComputerBild, Micro Hebdo, PC Magazine, PCWorld, PC Welt

• The size of the bubble is number of 1st places

© 2014 Kaspersky Lab ZAO. All rights reserved. Registered trademarks and service marks are the property of their respective owners.

Contact Kaspersky or your preferred reseller for more information on Kaspersky’s virtualization security options

THANK YOU!