Security Cloud

A cloud-based threat analysis system which utilizes large amounts of data, Machine Learning and other inputs, to continuously add to the knowledge base of digital threats. The Security Cloud is constantly in touch with client systems, identifying new threats as they emerge and providing protection within minutes.

This type of service affords many benefits over traditional approaches. In gathering threat intelligence from hundreds of thousands of client nodes, a real-time picture of the global threat situation can be established. Within minutes, that knowledge is deployed in to all WithSecure Elements EPP clients.

Multi-engine anti-malware

Detects and prevents malware and offers superior protection to traditional signature-based technologies.

• Flags a broad range of malicious features, patterns and trends, enabling more reliable and accurate detections, even for previously unseen malware variants
• By using real-time look-ups from the WithSecure Security Cloud, reaction times to emerging threats are much faster whilst ensuring a smaller footprint
• Emulation enables detection of malware that utilize obfuscation techniques, and offers another layer of security before a file is run

Browsing Protection

A key security layer that proactively prevents end-users from visiting malicious sites. This is particularly effective, as early intervention greatly reduces overall exposure to malicious content, and thus attacks.

• Prevents end-users from being tricked into accessing seemingly legitimate phishing sites, accessing malicious sites through an email link, or getting infected through malicious 3rd party advertisements on otherwise legitimate sites.
• Fetches the latest reputation check of the websites and their files from WithSecure's Security Cloud, based on various data points such as IP addresses, URL keywords and site behaviour.
• Fully browser agnostic, as it works at the network level, ensuring that it still provides protection even if the end-user is not using a company sanctioned browser.

Software Updater

An automated patch management feature is a critical security component that's fully integrated with WithSecure Elements EPP for Computers clients. There's no need to install separate agents, management servers or consoles.

It's the first layer of protection when malicious content reaches end-points and can prevent up to 80% of attacks simply by installing software security updates as soon as they become available.

Software Updater works by scanning for missing updates, creating a vulnerability report based on missing patches, and then downloading and deploying them automatically or manually if needed. Security patches include 2500+ 3rd party applications and others that commonly serve as attack vectors due to their popularity and larger number of vulnerabilities.

Device Control

A security layer that greatly increases protection for business-critical web activity like the use of intranets or sensitive cloud services like CRMs.

As soon as an employee accesses a website that requires additional security, Connection Control automatically elevates the security level for that session. During this period, Connection Control closes network connections to all unknown sites from the endpoint. Users can continue to use sites that are verified safe by WithSecure™ so as not to reduce employee productivity.

By blocking untrusted connections, banking trojans and other malware cannot send criminals confidential business information such as user credentials and cloud-based information. Security returns to normal when the specified browser process finishes or the user ends the session.

Connection Control

Device Control prevents threats from entering your system via hardware devices such as USB sticks, CD-ROM drives, and web cameras. This also prevents data leakage, by allowing read-only access, for example.

When a prohibited device is plugged in, Device Control turns it off to prevent user access. You can block access to devices by setting predefined rules, and set rules to allow specific devices while all other devices of the same class are blocked. You can for example:

• Disallow running programs from USB/CD/other drives: disable auto run, accidental execution or loading modules from removable drives.
• Block device classes completely.
• Define read-only access to USB/CD/other drives.
• Block device classes with exception of specified devices.