DATA SHEET

Ivanti Endpoint Security for Endpoint Manager
Ivanti® Endpoint Security for Endpoint Manager,
powered by Landesk, prevents, detects, andremediates even the most sophisticated threats,
including ransomware. Powerful, multi-layered
protections automate discovery, inventory, and patch
management, and prevent malware from running or
spreading. When combined with Ivanti Unified
Endpoint Manager, the solution uniquely enables you
to isolate a device, remote control while it’s isolated,
and remediate or re-image the infected system. This
integration with Ivanti Unified Endpoint Managerincreases efficiency and control over your ITenvironment.

Protect Your Environment fromRansomware and Other Modern Threats
With Ivanti Endpoint Security for Endpoint Manager, you
can see everything necessary to find and remediatemalware, diagnose problems, and identify faulty or nonapproved processes. If ransomware invades your network,
Endpoint Security will catch it, kill it, notify other connected
machines, and block the malware from running on them.

devices behind firewalls. Automatic discovery also helps
you find all the software on those devices, including usage
details. And when used with the Ivanti Cloud Services
Appliance, Ivanti Endpoint Security for Endpoint Manager
can inventory, scan, isolate, and patch remote devices
without the need for virtual private network (VPN)
connections.

Automatically Patch to Ensure a Stable andSecure Environment
Ivanti Endpoint Security for Endpoint Manager simplifies
patch management, with no impact on users, through bestpractices, automated processes, and fast deployment. It

Powerful remote capabilities allow you to isolate,investigate, and remediate or re-image endpoints acrossthe network. Additionally, device blocking and connection
control let you monitor and restrict I/O device access.
Application control guards against zero-day exploits,
stealth attacks, and other sophisticated threats. And data

patches multiple operating systems and third-party
software across your network reliably—even those

protection features prevent malicious software from

Active and passive discovery technologies identify andDevice control and application firewall capabilities limit thetypes of external devices or connections that endpoints
can access. You can also block devices that may be
employed to introduce malware or steal data. Application
firewall helps block malware from “calling home,”
rendering most of it useless. The solution logs which files

inventory all IP-enabled devices in real time—even so-

are copied to external devices, so rest assured you’ll passcalled “rogue” devices like wireless hubs as well as those

your security audit.

encrypting your files.

Discover and Inventory All Your Networked
Devices and Software

ivanti.com

devices that are on the road, at a remote site, or asleep.

Harden Endpoints with Device andConnection Blocking

DATA SHEET: Ivanti Endpoint Security for Endpoint Manager

Configure and Patch

Detect and Prevent

What’sIncluded

Capabilities

DeviceDiscovery

Active, passive, and agentless
discovery and inventory—toknow what devices to patchand secure. Also detect andlocate wireless access points.
Automate patching for multiple
operating systems and thirdparty applications.

Patch

Patch
Intelligence

SecureConfig.
Management

FirewallWhat’sIncluded

Capabilities

Remediation and Visibility
What’s Included

Capabilities

Ransomware Detect malicious encryption, kill Network
Detection
it, and inform IT and other
Isolation
machines.

Isolate devices on the network toprevent transferring malware, but
leave the device accessible toremote control.

Ransomware Prevent files from being
Prevention
encrypted and prevent themfrom running elsewhere.

MalwareContainment

Quarantine malware when detected.

Remote control; kill processes
remotely; remote file management;
remote re-imaging; deploy otherforensic tools and scripts remotely.
Ivanti Xtraction dashboards—
powerful insight without aspreadsheet expert. Vulnerability,
patching, and security-activity
dashboards, plus alerts and detailed
security reports.
Send event logs to SIEM tools forfurther intelligence and forensics.

Schedule and roll out patches Malware
methodically through pilot
Detectiongroups and increasingly larger
deployment rings.
Prevent patches fromMalicious
interfering with users’
Websiteproductivity through reboot
Detection
management and maintenancewindows.

Signature, network, andbehavioral-based detection.

RemoteRemediation

Prevent users from visiting
suspicious sites.

Dashboardsand Reporting

Gather feedback from end
Fileless
users about patch performance Prevention
to better correlate incidents
created by patches that impact
users.
Out-of-the-box complianceApplication
content for PCI.
Control

Block fileless attacks initiatedfrom Microsoft macros.

SIEM
Integration

Ability to script additional
compliance content.

Prevent use of removablestorage and ports to introduce
malware or to copy sensitive
data and log all data copying
activities.

DeviceControl

Block malicious apps fromcalling home and transferringdata.

Dynamic whitelisting learns
what is in your environment andprevents unauthorized code
execution.

Top Unified IT
Solutions

Capabilities

Windows 10Migration andWindows as aService(Updates)
Onboarding &Offboarding

Automate how you deliver Windows
10 machines that are personalized
and ready for users—then maintainall the updates andchannels Microsoft throws at you.
Provide the right access, apps, andresources when a user starts ormoves positions—then remove theirrights and licenses when they leave.
Create a service catalog that ties
everything together in thebackground—services, deployment,
asset management—while the user
just pushes a button.

Self-service IT

Strengthen Security Through Unified IT

Protect Against Zero-Day Threats with
Advanced Application Control
Application control features protect against file-based andfileless attacks by preventing malicious software andscripts from executing, and by using memory protection
techniques. Learning capabilities minimize false positives
and allow legitimate apps to run uninterrupted. A cloudbased reputation database provides further insights about
which apps should be allowed to run in your environment.

See, Act, and Show Results
Ivanti Endpoint Security for Endpoint Manager also
provides an array of reports and dashboards to help you
monitor the effectiveness of your security efforts. The
dashboards let you take actions from within the visual
data. This visibility includes detailed reports on policy

As its name implies, this solution integrates with IvantiEndpoint Manager to unify endpoint security andmanagement. This enables fast automation of bothsecurity and IT management policies, optimizing IT
resources. Gain unequaled visibility across IT security andmanagement activities to reduce risk and improve
decision-making.
As an add-on, use Ivanti Antivirus to protect against
known malware as well as malware detected throughbehavioral analysis. However, if you have anotherantivirus solution, Ivanti Endpoint Security for Endpoint
Manager lets you manage third-party antivirus solutions ofyour choice.
Copyright © 2018, Ivanti, Inc. All rights reserved. IVI-1853 11/18 AS/BB/DL

enforcement, compliance levels, user behavior, patchstatus, real-time security outbreak alerts, and much more.

Learn Moreivanti.com

1 800 982 2130

sales@ivanti.com