Viettel IDC

Endpoint Security

Total protection against malicious threats to physical endpoints (Windows, Linux, Mac) or host virtualization machines (VMs).

Endpoint Security is a next-generation security solution designed to comprehensively protect endpoint devices against both known and unknown threats, featuring advanced technologies such as NextGen Anti-virus, Risk Analytics, Anti-exploit, Anti-malware, and Ransomware Mitigation.
 
Endpoint Security combines machine learning, application control, patch management and many other technologies to protect customer endpoint devices on both physical and virtual platforms.
 
The solution supports all virtualization environments such as VMware platform, Microsoft Hyper-V, Citrix XenServer, Nutanix AHV, KVM, RedHat Enterprise Virtualization or any other virtualization solution. Additionally, the solution is compatible with many cloud IaaS platforms, such as AWS and Microsoft Azure.


Connection Diagram

 

System Components::

- Centralized Management (Gravity Zone Cloud Control Center): Hosted on Bitdefender's Cloud, it is responsible for centralized management, configuration, and updating the latest protection definitions to endpoints.

- Centralized Scanning Server (Security Server - SVA): This component updates the latest database from the GravityZone Control Center, performs centralized scanning, and provides protection for all endpoints.

- Software Installed on Endpoints (Agent BEST - Bitdefender Endpoint Security Tool): Provides endpoint protection against malware and other security threats.

Endpoint Security Solution Model Combined with Bitdefender

Control and prevent threats

Control and prevent threats

Real-time protection to prevent and counter attacks from viruses and malicious code using machine learning, anti-malware, anti-exploit, and ransomware protection...

Strong malware detection ability

Strong malware detection ability

Detect known and unknown types of malware using analysis technology in a simulated environment (Endpoint Integrated Sandbox).

The ability to "anticipate" threats

The ability to "anticipate" threats

With the HyperDetect Tunable Machine Learning feature, Viettel Endpoint Security provides the ability to prevent threats before they are able to execute (pre-execution).

Process Inspector

Process Inspector

Operates in zero-trust mode, monitors background processes, detects suspicious activities and isolates as soon as risks are detected.

Anti-virus via Web, applications, memory

Anti-virus via Web, applications, memory

With Web threat protection, Anti-Phishing and Web Security Filtering features, it helps prevent network attacks in forms such as Brute Force attacks, Password Stealers, Network Exploits.

Advanced features

Advanced features

The NextGen Anti-Virus product provides real-time protection and guards against attacks from malware and ransomware with powerful, superior features.

Compatible with many devices

Compatible with many devices

Single installer for all endpoints and protection for all virtualization platforms. Leading in virus detection capabilities certified by AV-Test and AV Comparatives organizations.

Unlimited expandability

Unlimited expandability

GravityZone architecture is modular, flexible in system design and expansion. Deploy the system on Vcloudia's Cloud environment or on-premise at the enterprise.

High flexibility

High flexibility

Protection for applications running on Windows, Linux and Solaris operating systems, and supports all physical and virtual environments such as VMware, Microsoft Hyper-V, Citrix XenServer, Nutanix AHV, KVM, RedHat Enterprise Virtualization or any other virtualization solution.

Optimize server resources

Optimize server resources

Optimize and share the virtualization server load to the SVA server when scanning, thus reducing the load on servers as well as customer devices.

High availability & recovery

High availability & recovery

Designed with the GravityZone platform to support databases in multiple control centers to ensure self-healing capabilities, along with a load distribution mechanism based on SVA to ensure high availability and prevent service interruptions.

Endpoint Security is a solution that includes only one control software, a single agent that is compatible with many different operating systems such as Windows, Linux, Solaris and can protect both on-premise and on-cloud.

Customers when using Endpoint Security will be provided with only one software installed on the agent and this software will be compatible with many platforms, many different operating systems, customers only need to install and all devices will be centrally protected quickly.

The performance of your virtual machines is crucial. Endpoint Security's solution optimizes and shares the system load when scanning to the SVA server, thus reducing the load on both the servers and the customer's devices. (Endpoint Security occupies about 10-20 MB of memory and 110 MB of memory during operation, 1-2% of operation of 1 virtual CPU).

Endpoint Security service will automatically update the latest virus and malware samples as well as update configuration information automatically through the SVA server, customers' devices do not need to be updated but are still protected with the latest version.