Blink Professional Edition Features

Blink Professional 3.0 is the first unified client security agent to combine and extend the best elements of anti-virus, anti-spyware, malware detection and removal, anti-phishing and identity theft protection, system and application firewall protection, host and protocol based intrusion prevention, internal and dynamic policy enforcement, and local vulnerability scanning into a single, low-footprint, comprehensive endpoint security product. Blink delivers maximum host-level protection for laptops, desktops, and servers via continuous, non-intrusive multi-layer monitoring and remediation.

Industry-Leading Integrated Client Security Technology

Through its innovative approach to protocol analysis, Blink is able to detect and block zero-day attacks that bypass standard signature-checking solutions. Much more than just standard Internet security software or a network firewall, Blink can thwart previously undefined zero-day attacks, significantly reducing the need for panic patching, enabling a more planned approach to change management.

For organizations with large mobile workforces, laptop and wireless security are significant operational challenges. These dynamic platforms require aggressive protection, which must be capable of being centrally managed. Blink provides a new level of network security like no other product available today by allowing administrators to define comprehensive security policies that dynamically change as devices change from being connected to the corporate LAN to connecting to public wireless networks, wireless WAN cards or even home networks. This dynamic policy support allows you to control and ensure that corporate assets are always protected by the appropriate level of control, even when they leave the corporate network.

Blink Professional Edition includes the following features:

• Anti-Virus & Anti-Spyware Protection: Blink provides complete attack protection though proven signature and heuristics-based technologies. Using patented Sandbox technology, Blink actively blocks malicious activity from being loaded into memory. While they provide an additional layer of protection, Blink is not dependent on signatures and can stop new attacks as they are released into the environment without the need for continuous content or product updates.



• Local Vulnerability and Patch Assessment: Blink will identify and report on local system vulnerabilities, including missing or inappropriate operating system and application patches, enabling administrators to mitigate the resulting business. Each Blink agent includes the award-winning Retina scanning technology. Security administrators can utilize REM™ Security Management Console to obtain an enterprise-wide “Health Report”.



• Host Intrusion Prevention: Blink provides protection where a vendor has not yet created signatures or patches to protect against vulnerabilities in their operating system or application. Blink blocks ‘zero-day’ attacks that bypass traditional signature-based solutions, eliminating the need or use of specific attack signatures. Dynamic System and Removable Storage Policy Management : Blink provides control over which applications are allowed to function on systems by authorizing or denying the execution of approved program files. Registry Protection prevents specified registry settings from being modified, stopping malicious programs from infecting or modifying systems. Storage Protection regulates the use of USB and Firewire storage devices, preventing data leakage. These policy settings can be dynamically applied based on the clients’ location on the network.



• System and Application Firewall Protection: Blink performs traditional firewall duties; allowing or denying traffic based on a set of predetermined firewall rules. Blink also monitors the source of network traffic in real time and will only allow traffic from authorized applications, preventing unauthorized programs from making illegal outbound connections and further compromising the environment.



• Integration with eEye’s REM™ Security Management Console: Together, the integrated solution provides enterprise-class event and state analysis capabilities along with security and compliance reporting and executive dashboard capabilities. REM Security Management Console integrates attack-related information with local and network vulnerability assessment data, providing organizations with a complete view of their enterprise security posture.



• Generic Buffer Overflow Protection: Protection against known and unknown buffer overflow attacks against network applications.
  
  Designed for Small Businesses and Large Enterprises alike, Blink Professional integrates seamlessly with eEye’s REM Security Management Console, which provides enterprise-class event and state analysis capabilities along with security and compliance reporting and executive dashboard capabilities. REM Security Management Console integrates attack-related information, local and network vulnerability assessment data, and malware statistics, providing organizations with a complete view of their enterprise security posture.



• Comprehensive Risk and Event Management: Through the integration of eEye’s Retina and Blink Professional vulnerability and security solutions, REM provides immediate views into enterprise-wide policy, vulnerability, attack data, enabling administrators to quickly identify and effectively respond to situations that put their critical business systems and data at risk. System administrators can discover network assets via various methods (Active Directory, ARP, NetBIOS) and create logical machine groupings according to such categories as operating system, machine type or business group.



• Role-Based Security Policy Management: REM provides user and asset-oriented management capabilities enabling administrators to define asset attributes, user groups, and centrally manage a dynamic set of policies in support of protecting their critical business systems and data per internal company standards and external regulations. Policies can be defined to control the state of clients as they move from network to network, dynamically changing policies on the fly.



• Integrated Remediation and Automation: Through its own built-in workflow system and integration with leading patch management and network management systems such as BMC® Atrium™, BMC® Remedy®, and Tivoli® TEC, REM provides administrators with the ability to efficiently remediate situations that put their critical business systems at risk while providing the security organization with the evidence required to prove that the desired security and compliance posture is being met.