Safend FAQ

Frequently Asked Questions:

1. What does Safend do?
2. What is an "endpoint"?
3. What kinds of devices are commonly connected at endpoints?
4. What risks are associated with these devices connected at endpoints?
5. Is endpoint security a serious issue?
6. What products does Safend offer and what do they do?
7. Why do I need additional endpoint protection if we have the latest versions of Microsoft Windows and a firewall deployed?
8. How do Safend products compare to other endpoint solutions available today?
9. Does Safend have any type of ‘software assurance’ or maintenance program?
10. What new Safend products are on the horizon?
11. What are the system requirements for Safend products?
12. Where can I get answers to questions not addressed here?

1) What does Safend do?

Safend's advanced solutions deliver granular visibility and control over the organization’s endpoints – exposing existing and potential threats, and enabling precision prevention and remedy to ensure comprehensive internal data security.

(back to top)

2) What is an "endpoint"?

"Endpoint" refers to all enterprise workstations, laptops, and kiosks. Safend protects endpoints by securing ports at end points, including:

• Local, physical communications port such as USB, Firewire, PCMCIA, printer, serial, and other laptop or desktop interfaces
• Wireless ports such as WiFi, Bluetooth and IrDA
• Removable and physical storage devices such as CD/DVD & Ipod’s

(back to top)

3) What kinds of devices are commonly connected at endpoints?

A myriad of devices are connected to endpoints, including:

• media players
• handhelds
• smartphones
• printers
• scanners
• multi-function peripherals (scan/fax/print)
• Disk on Keys
• CD/DVD-RWs
• removable hard-drives
• other portable storage devices

(back to top)

4) What risks are associated with these devices connected at endpoints?

Endpoints can present serious risks to the network and the organization as a whole:

• Data Leakage: Large amounts of sensitive information and Intellectual Property can be stolen through endpoints
• Infiltration: Malicious code including viruses, worms and Trojan horses can be infiltrated through endpoints
• Non-Compliance: Personal information may be exposed at endpoints, leading to non-compliance with data privacy laws such as HIPAA and the Sarbanes Oxley Act.

(back to top)

5) Is endpoint security a serious issue?

Endpoint security is a bona fide issue documented by analysts, the media, and organizations that have suffered losses because they did not have an endpoint security solution in place.

While most organizations adequately protect Internet connections via TCP/IP ports (for example, using a firewall), endpoints are often overlooked. An increasing amount of data points to the need to add endpoint protection to any proactive security policy:

• “Data theft accounted for over $50B in losses [in 2004] in America alone.” - The Economist (6/18/2005)
• “50% of security incidents originate from within an organization.” - 2005 FBI / CSI Survey
• “70% of security breaches that involve losses over $100,000 are perpetrated from inside the enterprise.” -Vista Research
• “[Endpoint security] is an important issue for the enterprise to address because so much information theft leaves through [peripheral] devices.” -Forrester Research

Further, devices continue to proliferate. There are over 26,000 different USB products available today. 700 million USB devices were shipped in 2004 alone. The total number of endpoint devices available (USB and otherwise) is over 2 billion.

(back to top)

6) What products does Safend offer and what do they do?

Leveraging patent-pending Digital Membrane technology, Safend products help customers identify vulnerabilities and protect their endpoints through four primary products:

• Auditor Allows fast, non-intrusive and clientless auditing of all devices that were, and currently are, connected to endpoints via USB, Firewire and PCMCIA.
• Protector Reliable, simple and tamper-proof endpoint monitoring, device identification, and blocking based on administrator-defined policies. Protects all local, physical communications ports including USB, Firewire, PCMCIA; wireless endpoints including WiFi, Bluetooth and IrDA, and removable and physical storage devices such CD/DVD-RWs & iPod’s.
• USB Auditor Allows fast, non-intrusive and clientless auditing of all devices that were, and currently are, connected to endpoints via USB ports only.
• USB Port Protector Reliable, simple and tamper-proof endpoint monitoring, device identification, and blocking based on administrator defined policies for USB ports only.

(back to top)

7) Why do I need additional endpoint protection if we have the latest versions of Microsoft Windows and a firewall deployed?

Operating systems such as Microsoft Windows XP have only limited endpoint security functionality built-in. Endpoint security is not included in domain controlling and management software, nor in network security solutions such as firewalls. A separate, incremental solution like Safend is required to gain full visibility and granular, flexible control of all endpoints.

(back to top)

8) How do Safend products compare to other endpoint solutions available today?

Safend products enjoy several advantages over other endpoint security products. Notably, Safend's products are easier to learn, provide faster visibility of connected devices (both current and past), and offer more granular, flexible control. Safend products also offer more advanced tamper-proofing, better integration with Microsoft Active Directory, and faster policy creation – from device identification to safe list creation in one click. Finally, Safend products are the most cost-effective on the market today.

(back to top)

9) Does Safend have any type of ‘software assurance’ or maintenance program?

Yes, Safend offers a free one-year maintenance program for all Safend products. This program assures customer access to all bug fixes, updates and version release for one full year. After the first year, customers can opt to extend coverage on an annual basis.

(back to top)

10) What new Safend products are on the horizon?

Safend has a very aggressive development cycle and strives for frequent product updates. Future versions will include even more granular control of an expanded number of endpoints, including mobile devices, and also include enhanced scalability and management features.

(back to top)

11) What are the system requirements for Safend products?

Prospects and customers are advised to please reference the complete requirements available within the product support documentation for each product. Below is a summary of requirements:

• Client OS: Windows 2000 Professional (Service Pack 3-4); Windows 2000 Server (Service Pack 3-4); Windows 2000 Advanced Server (Service Pack 3-4); Windows XP Professional (Service Pack 0-2); Windows 2003 Server
• Domain OS (optional): Windows 2000 Server (Service Pack 0-4); Windows 2000 Advanced Server (Service Pack 0-4); Windows 2003 Server
• Viewing requirements: Software Internet Explorer version 6.0 and up –or- Microsoft Excel version 2003 and up

(back to top)

12) Where can I get answers to questions not addressed here?

For additional product information and answers to questions not addressed here, please contact us at Info@PortProtector.com

(back to top)