Kaspersky Enterprise Cybersecurity

Superior, flexible and resource-efficient
protection for virtual servers and VDI
With more businesses exploiting the benefits of software-defined data centers, the needfor outstanding protection without compromising on productivity has never been greater.
This is exactly what Kaspersky Security for Virtualization delivers – outstanding multi-layered,granular and powerful protection for VDI and virtual servers and environments – enhancedby tight integration with the most popular virtualization platforms and technologies, including
VMware vSphere with NSX, Microsoft Hyper-V, Citrix XenServer and KVM, as well as VMware
Horizon and Citrix XenDesktop.
With Kaspersky Security for Virtualization featuring agentless and lightweight security options,
we redefine how your software-defined data center and its security solution interact, empowering one another to become even smarter, faster and more efficient.
How You Benefit From Natively
Integrated Agentless Security:

Agentless security for VMware NSX• Fully automated deployment of SVM,
a specialized security appliance, basedon the security polices applied to eachprotected VM on the hypervisor host.

Kaspersky Security for Virtualization Agentless natively integrates with VMware NSX.
With no additional agent required on each VM, thrimpact on virtual platform
performance is near-zero, administrative tasks consume fewer resources,
and all VMs across your entire infrastructure are protected instantaneously.

• Integration with NSX Security Policies
allows each protected VM to receive
precise, granular security capabilities tolet you scale corporate software-defined
data center with no borders.
• Integration with NSX Security Tags
allows your software-defined data centerdetect and react to most advanced threats
in real-time fashion, and even reconfigure
the entire infrastructure if necessary.
• Full infrastructure scanning protects allVMs, whether they are on- or offline, foreven better cybersecurity coverage rightacross your entire virtual infrastructure.

Security Virtual Machine (SVM)

Network Attack Blocker (NAB)• Natively integrates with VMware• Supports NSX and vShield Endpoint• No impact on platform performance• Anti-malware for Windows & Linux• Scans powered ON and OFF machines• Powerful protection for networks• Web-traffic control with URL scanning• Heuristic analyzer to protect applications• Instant protection for entire infrastructure

VMVM

VMVMNAB• Proactive defense against cyberthreats
through use of the cloud-based
Kaspersky Security Network.

Kaspersky Security for Virtualization Agentless not only delivers anti-malware
protection, but also shields your entire infrastructure from network based attacks
by leveraging a dedicated virtual network IDS/IPS (Network Attack Blocker, NAB).

Supported Platforms and OS:
VMware virtualization:• VMware NSX 6.3, 6.2• VMware vSphere 6.5, 6.0, 5.5, 5.1• VMware Horizon View 7
Microsoft virtualization:• MS Windows Server 2016 Hyper-V• MS Windows Server 2012 R2 Hyper-V• Deployment via SCVMM 2016, 2012 R2Citrix virtualization:• Citrix XenServer 7.0, 6.5 SP1• Citrix XenDesktop 7.12, 7.11, 7.9• Citrix PVS 7.12, 7.11, 7.9

More security layers with Light Agent
Kaspersky Security for Virtualization Light Agent provides a single solution to secureboth virtual servers and VDI. Because it supports most popular platforms – including
VMware vSphere, Citrix XenServer, Microsoft Hyper-V and KVM – the solution is ideal
for hybrid software-defined data centers. A powerful but lightweight security agent
supports industry-leading VDI platforms such as Citrix XenDesktop and VMware
Horizon and significantly boosts protection while preserving the performanceof each VM.
Light AgentSecurity Virtual Machine (SVM)• Enhanced security for servers and VDI• Memory and Processes protection• Apps, Device, Web and Mail control• Exploit Prevention & Anti-ransomware• For Windows and Linux servers• Full scanning enqine• Complete full-sizes AV databases• Scan task orchestration• Redundancy and fault-tolerance

KVM (Kernel-based Virtual Machine):• RHEL Server 7 patch 1• Ubuntu Server 14.04 LTS• CentOS 7

VMVMVM

VM

VM

MS Windows OS:• Windows 10 (incl. RS1), 8.1, 7• Windows Server 2016, 2012 R2,2012, 2008 R2, 2008
(Full or Server Core modes)

Linux OS:•••••

Debian GNU / Linux 8.5
Ubuntu Server 16.04 LTS, 14.04 LTS
CentOS 7.2, 6.8
RHEL 7.2, 6.7
SUSE LES 12 SP1A Security Virtual Machine (SVM) on each host scans all VMs centrally, while a powerful but
lightweight agent deployed onto each VM allows advanced security features, including
application, device and web controls, anti-malware protection for mail and web traffic,
plus advanced heuristics, to be activated. Peaks in resource consumption are reduced viaIntelligent Scan Task Orchestration, automating queues by grouping and prioritizing scantasks on multiple protected VMs.
• System Watcher technology leverages
behavior stream signatures to preserve
the consistency of every VDI and protectfrom crypto-lockers and ransomware.

• URL protection shields every VM
from malware and malicious Internet
resources that might do harm or don’t
meet corporate security policies.

• Application Startup and Privilege Control,
including Default Deny, controls user
activity so only trusted applications
can launch on a protected VM.

• Mail and Web-traffic protection
ensures that all communication withinyour corporate environment flows safely,
rather than acting as a conduit for malware.

• Network Attack Blocker empowered with
Host-Based Intrusion Prevention System,
protects the virtualized environment fromnetwork-based attacks.

• Device Control guarantees secureaccess to virtualized devices thatare connected to a virtual desktop.

Whatever virtualized platform or platforms you use, Kaspersky Security for Virtualization,with its perfectly engineered technologies and unique architecture, provides greater
security capabilities. VMware vSphere with NSX, Microsoft Hyper-V, Citrix XenServer,
and KVM are all supported in a single security solution. Regardless of your platform
configuration and hybridization, on-premise or off-premise, all security management
is through one unified console, and full systems efficiency is retained.
Kaspersky Security for Virtualization Light Agent and Agentless. Two security approaches
in one solution, both delivering outstanding protection powered by Kaspersky Lab’sunique HuMachine Intelligence.

ExpertAnalysis

HuMachine™

Kaspersky Lab
Enterprise Cybersecurity: www.kaspersky.com/enterprise
Cyber Threats News: www.securelist.com
IT Security News: business.kaspersky.com/#truecybersecurity#HuMachinewww.kaspersky.com
MachineLearning

Big Data /Threat Intelligence© 2017 AO Kaspersky Lab. All rights reserved. Registered trademarks and service marks are the property of
their respective owners.