IBM Endpoint Manager for Security and Compliance

Helps support continuous security and compliance

• Provides accurate and near real-time visibility into and continuous enforcement of security configurations and patches.
• Helps effectively manage the compliance lifecycle with an ongoing, closed loop process.
• Provides security and compliance analytics which identify, manage and report on policy exceptions and deviations. Also shows trending and analysis of security configuration changes.
• Is faster and more efficient. The intelligent agent provides continuous compliance with automated audit cycles measured in minutes rather than weeks.

Manages hundreds of thousands of endpoints

• Supports a large variety of endpoints. These include servers, desktop PCs, “roaming” Internet-connected notebooks, smartphones, tablets and other mobile devices, as well as specialized equipment such as point-of-sale (POS) devices, ATMs and self-service kiosks.
• Provides endpoint management for major operating systems, third-party applications and policy-based patches.
• Helps discover endpoints that you might not have known were in your environment.

Simplifies operations

• Uses a unified management infrastructure to coordinate among IT, security desktop and server operations.
• Enables automated, highly targeted processes that provide control, visibility, and speed to effect change and report on compliance.
• Centralizes the management of functions that provide advanced anti-malware and firewall protection.
• Provides greater visibility into network resources in dynamic and complex environments.

Delivers a broad range of security functions

• Patch management includes delivering patches to endpoints for Microsoft Windows, UNIX, Linux and Mac OS; and for application vendors including Adobe, Mozilla, Apple and Java.
• Security configuration management provides a library of technical controls. They can help you achieve security compliance by detecting and enforcing security configurations.
• Vulnerability management helps you discover, assess and remediate vulnerabilities before endpoints are affected. If the endpoint is found to be out of compliance, the software can place it in network quarantine until compliance is achieved.
• Asset discovery frequently scans the entire network to identify IP-addressable devices and computer endpoints with minimal network impact.
• Multivendor endpoint protection management gives administrators a single point of control for managing third-party endpoint security clients from vendors such as Computer Associates, McAfee, Sophos, Symatec and Trend Micro. Endpoints can be migrated from one solution to another with “one-click” software removal and reinstall.

Makes the most of Bigfix technology

• Places an intelligent agent on each endpoint. This single agent performs multiple functions including continuous self-assessment and policy enforcement with minimal impact on system performance.
• Includes near real-time and continuous reporting and analysis from the intelligent agent on your organization’s endpoints.
• Allows agents to be configured as a relay between other agents and the console. This relay function allows the use of existing servers or workstations to transfer packages throughout the network, reducing the need for servers.
• Supports the Fixlet Relevance Language. This published command language enables customers, IBM Business Partners and developers to create custom policies and services for endpoints managed by IBM Endpoint Manager software.