eEye Blink Server Web Edition

eEye Blink Server Edition Overview:

Server Antivirus is Not Enough: Eight Layers of Protection for Solid Security

While signature-based anti-virus security solutions continue to be the primary for servers to meet regulatory compliance and business continuity requirements, a major shift is developing toward integrated threat management to enhance server security. Server administrators are constantly struggling to prevent attacks against server-based applications, mis-configurations, and zero-day threats. Successful exploits can leverage anything from network services to web applications and signature based anti-virus solutions are not enough on their own to repel these threats. Each time a new vulnerability, remote exploit, or other application threat is identified, organizations need to assess the risk to the critical server infrastructure and take appropriate mitigation steps. Ignoring the new threat or relying on outdated defenses only increases the risk of a successful breach.

Further complicating the server security equation is the breakdown of client-server network architectures. Mainstream adoption of virtualization, mobile, cloud, SaaS and remote access technologies force the traditional network perimeter to provide filtered access to critical servers. Application exploits for web servers, databases, and other vulnerabilities represent an easy opportunity for malware and data loss to propagate through trusted connections. In response, perimeter and network security capabilities are increasingly important on servers and endpoints to secure the connection.

Fast Facts:

Blink Server Edition 4.0 Provides Complete Server Protection Security by Combining:

• Application and system firewall
• Virus and spyware protection
• Protocol-based intrusion prevention
• Vulnerability assessment
• Patented system protection
• Zero-day attack protection
• Predefined server security policies
• Configuration Management Enforcement
• Enable Regulatory Compliance
  Initiatives

Integrated Threat Management: Complete Server Protection

To enhance server security and combat threats in real-time, organizations are migrating from a standalone server anti-virus software and adopting integrated threat solutions in its place. Blink Server Edition 4, from eEye Digital Security, combines multiple-layers of server security capabilities and leverages an intrusion prevention engine that dynamically protects against new threats, in real time, even when vendor patches are not available. Since Blink Professional 4 was launched in 2006, it has successfully thwarted 100% of remote intrusion attempts on endpoints. Blink Server Edition 4 builds on that technology and provides a complete server protection platform with full-featured integrated threat management capabilities. Blink Server Edition 4 delivers a host of positive business benefits:

• Layered security protection that optimizes defenses against viruses, spyware, worms, trojans, mis-configurations, and other malicious zero-day exploits
• Information Security Magazine, November 2007
• The ability to consolidate 7+ discrete server security agents into a single Blink Server 4 agent and reap significant administrative time savings in the process
• Reduce system resource requirements compared to the memory footprint of maintaining 7+ discrete security products for everything from anti-virus to vulnerability assessment
• Combine Blink 4 with REM, eEye’s Security Management Console, to obtain centralized attack, risk, vulnerability and overall security management
• Reduce server security costs more than 70% by eliminating the licensing and support costs associated with buying and maintaining multiple security solutions

Features and Benefits:

System, Application, and SecureIIS Web Application Firewall - Blink performs traditional firewall duties, allows or denies traffic based on a set of predetermined rules and it monitors the source of network traffic in real time allowing traffic only from authorized applications. Blink's Web Application Firewall featuring SecureIIS works as an ISAPI filter protecting against the latest threats from cross site scripting to SQL injection and meets the strict regulatory compliance of PCI DSS v1.2 Section 6.

Virus and Spyware Protection for Servers - Blink Server provides complete signature and heuristics-based attack protection. Using patented sandbox technology, Blink Server Edition can stop new attacks as they are released without the need for updates on the server. Signatures provide an additional layer of protection for known malware. Blink Server virus and spyware protection protects the asset by using policies that have been tuned for the dedicated roles of the device.

Intrusion Prevention and Zero-Day Protection - Blink Server provides protection where a vendor has not yet created signatures or patches to protect against vulnerabilities in their operating system or application. Blink Server blocks zero-day attacks that bypass traditional signature-based solutions, protecting critical servers and their data.

System Protection - Blink Server provides control over which applications are allowed to function by authorizing or denying program file execution. Registry Protection prevents specific registry settings from being modified, stopping malicious programs or errand users from infecting or modifying systems. Storage Protection prevents data leakage by regulating USB and Firewire storage devices.

REM Security Management Console - Combined with REM, the integrated solution provides event and state analysis capabilities along with security and compliance reporting. The REM Security Management Console integrates attack-related information with local and network vulnerability assessment data, providing a complete security picture of server and endpoint security.

Blink Version Comparison:

Feature	Blink Server	Blink Server Web Edition
Host Based Virus, Spyware, and Phishing Protection
System and Application Firewalls and Host Based Intrusion Prevention
Embedded Retina Vulnerability Assessment Engine
Centralized Management via the REM Security Management Console
Optimized for Server and High Volume Communications
Predefined Server Profiles and Policies
File System and Directory Monitoring
Microsoft IIS Web Application Firewall featuring SecureIIS

System Requirements:  

Documentation:

Download the eEye Blink Server Datasheet (PDF).