What is Anti-tampering?

“What’s the point of endpoint of endpoint security if anyone can turn it off?
Endpoint security is the one area of network security where the interests of theIT department differ from the interests of end users. Everyone wants the latest anti-virus software, and no one wants spyware to flood their system, but not everyone might be excited if their local ports are restricted. Some might go quite far to continue to listen to their iPod at work, use flash drives, or to access your confidential corporate data. That’s not to mention hackers and 3rd parties with access to the computer with possible malicious intentions.

For true endpoint security, a solution needs to be impossible to circumvent, disable, or uninstall. The solution needs to enforce the security policies set by administrators, without fail.

Welcome to the world of anti-tamepring: “Secure Security”

Safend Protector includes redundant, multi-tiered anti-tampering features to guarantee permanent control over enterprise endpoints.

Anti-tampering features include:
Encryption

• Local polices, logs stored at the client, the central log repository, and all Protector-related communications are encrypted by multiple advanced encryption algorithms.
• Local policies are “signed” with unique ID which, if altered, highlights any tampering attempt

Hashed uninstall password

• Even users with local administrator rights need a hashed password to remove the local agent

Lock Down

• Safend Protector locks down the local client, prevents further action and sends an alert if it detects unauthorized attempts to erase, alter, or change the filename of security files

Regenerating drivers

• If the local driver is erased or altered, the Safend Protector agent automatically creates and loads a fresh, correct copy

Always-On

• The last known security policy is always enforced, until Protector is uninstalled, even if Protector is somehow disabled, or the endpoint is disconnected from the network

Full Safe Mode Operation

Safend Protector is fully functional even when the operating system is running in Safe Mode

<<back