Trend Micro - Securing Your Web WorldTrend Micro Intrusion Defense Firewall

Easy-to-Deploy OfficeScan Plug-In Extends HIPS Security to Endpoints

Trend Micro Intrusion Defense Firewall

Overview:

Today’s enterprise endpoints face more sophisticated attacks than ever, especially when they are outside the corporate network and no longer protected by multiple layers of security. These endpoints require a blended approach to protection that secures data and applications from hacking attempts, Web threats, and the increasing threat of vulnerabilities being exploited.

As a plug-in for OfficeScan, Intrusion Defense Firewall provides earlier, stronger endpoint protection by supplementing highly effective OfficeScan client-level security with network-level Host Intrusion Prevention System (HIPS). A high-performance, deep-packet inspection engine monitors incoming and outgoing traffic for network protocol deviations, suspicious content that signals an attack, or security policy violations. Intrusion Defense Firewall shields vulnerabilities from being exploited before patches can be deployed to business-critical and hard-to-patch systems. Together with Intrusion Defense Firewall, OfficeScan provides one of the industry’s most secure platforms for protecting endpoints, whether they are on the network, mobile, or remote.

Protection Points

  • Endpoints

Threat Protection

  • Vulnerability Exploits
  • Denial of Service Attacks
  • Illegitimate Network Traffic
  • Web Threats

OfficeScan 10 protects your desktops, laptops, servers, storage appliances, and smartphones— on and off the network—with an innovative blend of world-class anti-malware and in-the-cloud protection from Trend Micro Smart Protection Network. New File Reputation frees endpoint resources by moving pattern files into the cloud. And Web Reputation blocks access to malicious websites. A flexible plug-in architecture, new Device Control, HIPS functionality, virtualization, and extended platform support all help lower management costs and increase flexibility.

Endpoint Security Solutions
Security Points OfficeScan Intrusion Defense Firewall Trend Micro Mobile Security
Blocks malware at network endpoints Yes, Included Yes, Included  
Enforces security policy compliance on endpoints Yes, Included
(with Cisco NAC)
   
Host Intrusion Prevention (HIPS)   Yes, Included  
Protects mobile devices from malware attacks     Yes, Included
Enables centralized management through the OfficeScan console Yes, Included Yes, Included Yes, Included

Trend Micro™ Enterprise Strategy
OfficeScan and Intrusion Defense Firewall are key components of Trend Micro Enterprise Security. Powered by our unique Smart Protection Network— Trend Micro Enterprise Security minimizes the time to protect your organization from content security risks, delivering better protection with less complexity.

Features & Benefits:

Key Benefits:

  • Reduces down-time for recovery with incremental protection against zero day attacks
  • Lowers potential legal exposure by improving data security compliance
  • Enhances firewall protection for remote and mobile enterprise endpoints
  • Provides real-time, centralized reporting to justify return on investment
  • Minimizes installation time and disruption through plug-in deployment
  • Lowers management costs by using the common OfficeScan infrastructure

Key Features:

Defends Against Advanced Threats

  • Protects endpoints with minimal impact on network throughput, performance, or user productivity
  • Shields endpoints against unwanted network traffic with multiple protection layers
  • Blocks known and unknown vulnerability exploits before patches are deployed
  • Protects systems that hold sensitive data, critical to regulatory and corporate policy compliance
  • Adds network-based malware protection to native OfficeScan malware protection
  • Automatically adjusts security configuration based on the location of an endpoint

Removes Bad Data from Business-Critical Traffic

  • Blocks attacks before they enter the end point’s application and execution layer
  • Applies application control filters to alert/ block specific traffic such as instant messaging and media streaming
  • Ensures delivery of business-critical communications with low false positives
  • Uses deep packet inspection to identify content that may harm the application layer
  • Filters forbidden network traffic and ensures allowed traffic through stateful inspection

Provides Earlier Protection

  • Provides protection before patches are deployed using attack blocking and vulnerability shielding
  • Shields operating system and common applications from known and unknown attacks
  • Detects malicious traffic that hides by using supported protocols over non-standard ports
  • Blocks traffic likely to damage at-risk components using vulnerability-facing network inspection
  • Prevents networking backdoors from penetrating into the corporate network
  • Blocks all known exploits with attack-facing network inspection
  • Defends custom and legacy applications using custom filters that block user-defined parameters

Deploys and Manages within Existing Infrastructure

  • Leverages plug-in architecture for instant, live deployment to previously installed OfficeScan clients
  • Easily deployed and managed from previously installed OfficeScan central management console
  • Shortens the deployment cycle by eliminating the need to redeploy the entire solution

System Requirements:

Minimum System Requirements
Intrusion Defense Firewall is an optional plug-in for OfficeScan within Trend Micro Enterprise Security for Endpoints. Please refer to Enterprise Security for Endpoints to find the minimum system requirements for the OfficeScan server and client. Then, to calculate your total minimum system requirements, add up the minimum system requirements for Endpoint Security for Endpoints and those of the plug-ins you have already installed or plan to install.
Additional Minimum System Requirements for Intrusion Defense Firewall
Server Requirement Enterprise Security for Endpoints, OfficeScan Client-Server Suite 8.0 SP1 or 10.0 server
  • No additional RAM required
  • 500 MB of Disk Space
Client Requirement Enterprise Security for Endpoints, OfficeScan Client-Server Suite 8.0 SP1 or 10.0 client
  • No additional RAM required
  • 30 MB of Disk Space