Endpoint Secure Function

Hello everyone. Does anyone here can gave me a link or something that can support the following functionality of Endpoint Secure below? More details aside from the brochure.

- Monitor the patches for software applications (other than the endpoint manager, i.e. the adobe programs installed, client programs, etc.)
- Monitor the patches for the OS.
- Remote desktop control

HiHi,

You can access the Resources - Knowledge Base of Endpoint Secure, which provides a wide range of related documents for easy reference,

including the Best Practices_Endpoint Secure Security Guide or the Security Policy Implementation Guide, among others.

https://community.sangfor.com/plugin.php?id=sangfor_databases:index#?Product=Endpoint%20Secure&Language=English

I hope it can provide you with comprehensive assistance.

Sangfor Endpoint Secure does offer the functionalities you mentioned, with more details beyond the brochure available in various resources. Here's a breakdown:

Patch Management:

    Application Patching: Sangfor Endpoint Secure can monitor and manage patches for various software applications beyond the endpoint manager, including Adobe programs, client programs, and more. It achieves this through:
        Pre-defined vulnerability database: It includes an extensive database of vulnerabilities for a wide range of applications, constantly updated to reflect the latest threats.
        Customizable patch detection: You can define custom rules to monitor specific applications and versions for available patches.
        Third-party patch integration: It integrates with popular third-party patching tools to manage patches from a centralized console.

    OS Patching: Sangfor Endpoint Secure also manages patches for operating systems like Windows, macOS, and Linux. It features:
        Automatic OS patch detection: It automatically detects available OS patches and displays them for review and deployment.
        Flexible deployment options: You can choose to deploy patches immediately, schedule them for later, or create staged rollouts for testing and controlled deployment.
        Vulnerability assessment: It assesses the severity of vulnerabilities associated with available patches to prioritize patching efforts.

Remote Desktop Control:

    Sangfor Endpoint Secure offers a built-in remote desktop control module that allows you to:
        Remotely access endpoints: You can connect to any managed endpoint from a central console to troubleshoot issues, provide support, or perform administrative tasks.
        File transfer: You can securely transfer files between the console and the endpoint.
        Chat and screen recording: You can chat with users on the endpoint and record their screens for training or troubleshooting purposes.

Resources:

For more details beyond the brochure, you can refer to the following resources:

    Sangfor Endpoint Secure product page: https://endpoint.sangfor.com/
    Sangfor Endpoint Secure datasheet: https://www.sangfor.com/sites/de ... e_20220708_v1.1.pdf
    Sangfor Endpoint Secure user manual: https://www.sangfor.com/downloads/sangfor-hci-user-manual
    Sangfor Endpoint Secure blog posts: https://endpoint.sangfor.com/

These resources provide comprehensive information about Sangfor Endpoint Secure's functionalities, including patch management, remote desktop control, and more.

Hi, on following link on knowledgebase, you can see some useful information: https://knowledgebase.sangfor.co ... 2articleType%22%3A1,%22articleId%22%3A%223ee3e1b94aae4595bb045b3c874b2fc4%22,%22keyword%22%3A%22sangfor%20endpoint%20secure%20associate%22%7D

here is the knowledge base link for details:
https://community.sangfor.com/pl ... mp;Language=English

Sangfor Endpoint Secure features:
1. Lightweight Sangfor Engine Zero
File detection rates reach 99.7% based on high-dimensional signatures, and the detection rate of multi-class classification reaches 90.3%.

2. Threat Tracking
Once a threat is found on one endpoint, identical virus files will search on all endpoints across the network and removed, protecting every endpoint within the network.

3. Correlation across Endpoint and Network
Upon discovering threats on endpoints, the network device will automatically coordinate with Sangfor Endpoint Secure to handle the endpoint.

4. Ransomware Hunting with Bait
By placing bait files in key directories and random system directories, emergency response is initiated while the bait files are being encrypted, halting the encryption process, and locating and removing virus source files.

5. Visualization and Discovery for Endpoint Security
Efficient multidimensional management on network-wide endpoints is carried out through the Sangfor Endpoint Secure manager, making risks to each endpoint visible, assets controllable, and asset owners traceable.

6. Self-developed Behavior Monitoring Sandbox
Based on user mode and kernel mode behavior monitoring technology and abnormal behavior identification engine, ZSand sandbox developed by Sangfor can provide dynamic file detection, IoC extraction and malicious behavior recording capabilities.

7. Multidimensional Funnel-Shaped Detection Framework
By using the multidimensional funnel-shaped detection framework, the detection efficiency is effectively improved and the consumption of endpoint resources is reduced. All files are subject to effective virus searching and killing via Sangfor Antivirus Engine, Sangfor Neural-X security engine and other multidimensional engines .

8. Closed-loop Endpoint Security
In accordance with Gartner's four-stage model, 12 key functions are defined at prevention, organization, detection and response stages, to effectively protect endpoints. Sangfor Endpoint Secure puts forward a fully-dimensional endpoint security solution.

9. Micro-segmentation and Lower Threat Impacts
The micro-segmentation function provides access control configuration based on different types such as IP group, business system, and tags to achieve granular control, increasing efficiency in security management.

10. Endpoint Security & Integrity Check
The endpoint security & integrity check is designed according to the host security requirements. Identity authentication, access control, security audit, intrusion prevention, malicious code prevention, and other policies are carried out to meet the host security requirements and allow an enterprise to build a multi-class protection system.

11. Security Perimeter with Decoupled Underlying Virtualization Platform
Innovative micro-segmentation is to prevent lateral movement and virus spreading in LAN. A system solution is provided based on traffic access control between application roles in the security domain, providing comprehensive access control between host application roles, and efficient visibility of the security access policy configuration. The access control policy of servers is managed in a centralized and unified way, and it is not affected by virtualization platforms, physical machines, or virtual machines, based on the access control of the Agent software installed on the lightweight host.

based on the functionalities you mentioned, please see below:

1. monitoring patches for software applications
   - this feature is often part of the security platform if you want to look for details on how certain solution monitors and manages third party application patches including other client applications
2. Monitoring of patches for the OS
   - this is common feature in endpoint security and management solutions responsible for handling operating system patches and updates
3. Remote desktop control
   - this could refer to the remote administration or support capabilities and often includes features for remote access and control of endpoints for troubleshooting and management purposes

Heres the KB Link:
community.sangfor.com/plugin.php?id=sangfor_databases:index#?Product=Endpoint%20Secure&Language=English

Application Patching: Sangfor Endpoint Secure is capable of keeping an eye on and overseeing patches for a wide range of software applications, including client programs, Adobe apps, and more, in addition to the endpoint manager. It accomplishes this by:
Pre-defined vulnerability database: It has a large database of known vulnerabilities for many different applications, which is updated often to take into account new threats.
Personalized patch detection: You may create personalized criteria to keep an eye out for patches that are available for certain versions and apps.
Integration with major third-party patching solutions allows for the management of patches from a centralized console.

There are details in this link:
endpoint.sangfor.com
community.csangfor.com/ES