Symantec announced a new approach to advanced threat protection (ATP) that correlate alerts and intelligence across a range of security technologies to deliver more comprehensive attack prevention. The company said this holistic approach transforms the complex fight against advanced threats into a manageable function that delivers stronger protection and more value to businesses. The company’s new ATP efforts will be informed by what Symantec has learned about advanced threats though its existing endpoint solutions that protect a base of 200 million endpoints, and from its current email and web security solutions that review over 8.4 billion email messages and 1.7 billion web requests a day.
“There is a significant need in the market for greater advanced threat protection, and many vendors do not have the holistic coverage or full-functionality needed to adequately detect and respond to targeted attacks,” said Jon Oltsik, senior principal analyst, Enterprise Security Group (ESG). “Symantec is well positioned to deliver an end-to-end advanced threat solution by building on the technologies it offers today, integrating across its portfolio, and delivering it as a service enhanced by an evolving partner ecosystem. By leveraging its global intelligence and building-in completely new incident response capabilities, Symantec can really address a multitude of enterprise cybersecurity requirements.”
The next piece in Symantec’s ATP approach is Symantec Managed Security Services – Advanced Threat Protection (MSS-ATP), a managed service that significantly reduces the time it takes to detect, prioritize and respond to security incidents by producing integration between its endpoint security and third-party network security vendors’ products. The service launches next month.
Symantec also highlighted an Advanced Threat Protection Alliance that currently includes Check Point Software Technologies, Palo Alto Networks and Sourcefire (now part of Cisco). Through this ecosystem, the detection and correlation of malicious network and endpoint activity helps substantially reduce false alerts by pinpointing the important incidents, empowering customers to respond faster to the most critical incidents.
