DATA SHEET

Endpoint compliance
Overview
Highlights
Enhanced endpoint security verifies devices for:■ Anti-virus, anti-spyware software.
■ Personal firewall software.
■ Specific OS versions.
■ Patch levels.
■ Browser types.

Maintains security state of endpoint devices.
Use pre-defined or custom policies to protect
your network.
Quarantine, remediate, deny or grant access tonon-compliant devices.
Supports Windows, Mac, Linux, iOS, Android and
Google Chrome.
Leverages Trusted Computing Group’s endpoint
security specifications.

ivanti.com

In the Everywhere Workplace, demand hasHow it works■ Endpoint devices are checked prior to and during

skyrocketed for access to applications in the clouda remote access session based on pre-defined orand data center via personally-owned devices (BYOD).

custom policies that administrators define.

This access is great for productivity but presents
security challenges. It’s Even with the best intentions,employees, contractors and third parties may be using
devices infected with malware or spyware. Of course,
there’s also the risk of threat actors using stolen
devices or credentials.

■ Enhanced endpoint security performs endpoint

health and security checks to ensure a device
meets corporate security requirements.
■ Administrators can choose from a variety of pre-defined and custom policies.
■ Pre-defined policies check for third-party

Ivanti’s enhanced endpoint security feature queries

applications such as the presence of antivirus andevery device before – and during – a connection

antispyware, OS versions, hard disk encryption

to the network to ensure that it meets corporate

status, patch levels and browser types.

security policies. Enhanced endpoint security makes■ Custom rules can include inspection checks

sure that jailbroken or rooted devices, or devices

such as absence or presence of specific files,

with unpatched operating systems, don’t connect tocertificate checks, TCP ports, processes, registry

your hybrid IT resources. Even better, non-compliant

key settings, NetBIOS name, MAC addresses ordevices can be quarantined or remediated, reducing

certificate of the client machine and third-party

the chance of malware propagation.

inspection methods (custom DLLs).

Policies at-a-glancePre-defined policies

Policies can be deployed individually orcombined for advanced host checking.

Anti-virus software installed

Wildcards and environment variables canbe used. Host Checker policy results can be
stored and reused at a later time to validate
one or more devices.
Remediation based on a policy can beautomatic (where changes are made on
the remote device) or manual (where theuser is notified that their device is outof compliance). Devices can be also bequarantined, limiting access until the device
is corrected. Reports can be generated
that show which devices are compliant,non-compliant, remediated or not assessed
during specified intervals.

Operating System (OS) version

ivanti.com

Firewall software installed

sales@ivanti.com

Anti-spyware software installed
Hard disk encryption
Patch management
CVE checks
Custom policies
Remote integrity verifiers.
Check for third-party or custom DLLs.
Verify open/closed ports
Confirm running/stopped processes
Check for file presence on remote device
Confirm registry keys are set
Check NetBIOS name, MAC addresses and machine
certificate validity.

Copyright © 2021, Ivanti. All rights reserved. IVI-2514 4/21 SP

1 800 982 2130