in Cloud and Data Center Security for a Reason

Transcription

1 #1 in Cloud and Data Center Security for a Reason SMART SIMPLE SECURITY THAT FITS Contents 1. Datasheet - Deep Security 2. Solution Brief - Deep Security and VMware NSX 3. Customer Success Story - Telecom Italia 4. Datasheet - Deep Security for Web Apps

2 datasheet Trend Micro deep security 9.5 Comprehensive security platform for physical, virtual, and cloud servers Virtualization and cloud computing have transformed the data center. Yet many organizations continue to use legacy security as they move from traditional physical environments to the modern data center where virtualization and cloud are the norm. Legacy security can increase operational complexity in virtual environments while decreasing host performance and virtual machine (VM) density. It leaves gaps in protection that can undermine the confidence to move mission-critical workloads to agile, low-cost cloud environments. Ultimately, using legacy security in the modern data center hinders the return on investment (ROI) of virtualization and cloud computing. Protection from data breaches and business disruption Trend Micro Deep Security available as software or as-a-service is designed to protect your data center and cloud workloads from data breaches and business disruptions. Deep Security helps you achieve compliance by closing gaps in protection efficiently and economically across virtual and cloud environments. Multi-function security managed from a single dashboard Deep Security features integrated modules including anti-malware, web reputation, firewall, intrusion prevention, integrity monitoring, and log inspection to ensure server, application, and data security across physical, virtual, and cloud environments. Deep Security can be deployed as a single, multifunction agent across all environments and simplifies security operations with a single management dashboard for all capabilities. Key Business Issues Virtual Desktop Security Preserve performance and consolidation ratios with comprehensive agentless security built specifically to maximize protection for VDI environments Virtual Patching Shield vulnerabilities before they can be exploited, eliminating the operational pains of emergency patching, frequent patch cycles, and costly system downtime Compliance Demonstrate compliance with a number of regulatory requirements including PCI dss 3.0, HIPAA, hitech, FISMA/nist, NERC, SAS 70, and more Seamless integration extends policies across cloud environments Deep Security seamlessly integrates with cloud platforms including Amazon Web Services (AWS), Microsoft Azure, and VMware vcloud Hybrid Service enabling you to extend data center security policies to cloud-based workloads. With a wide range of capabilities optimized across environments, Deep Security empowers enterprises and service providers to offer a differentiated and secure multi-tenant cloud environment to their users. Accelerate the ROI of cloud and virtualization with security for the modern data center Virtualization Security Deep Security protects virtual desktops and servers against zero-day malware and network-based attacks while minimizing operational impact from resource inefficiencies and emergency patching. Cloud Security Deep Security enables service providers and modern data centers to offer a secure multi-tenant cloud environment with security policies that can be extended to cloud workloads and managed centrally with consistent, context-aware policies. Integrated Server Security Deep Security consolidates all server security functions into one comprehensive, integrated, and flexible platform that optimizes protection across physical, virtual, and cloud servers. Page 1 of 4 datasheet deep security 9.5

3 Control Security Across Physical, Virtual, and Cloud Instances Cloud Instances Data Center physical virtual virtual desktop Deep Security Agent Deep Security Agentless Virtual Appliacne Deep Security Manager Alerts IT Infrastructure Integration Deep Security (Software or Service) Reports Administrator key advantages Accelerate Virtualization and Cloud ROI Yields more efficient resource utilization and management with higher VM densities than traditional anti-malware solutions that are not agentless Adds flexibility and defense-in-depth capabilities as a single, easy-to-manage multi-function security agent Delivers unparalleled performance via hypervisor-level scanning deduplication Integrates with cloud platforms including AWS, Microsoft Azure, and VMware vcloud Hybrid Service, enabling organizations to manage their physical, virtual, and cloud servers with consistent and context-aware security policies Enables service providers to offer customers a secure public cloud, isolated from other tenants via multi-tenant architecture Provides auto-scaling, utility computing, and self-service to support agile organizations running a software-defined data center Leverages Deep Security s tight integration with VMware to automatically detect new VMs and apply context-based policies for consistent security across the data center and cloud Integrates with VMware NSX. Deep Security extends the benefits of micro-segmentation in the software-defined data center with security policies and capabilities that automatically follow VMs no matter where they go Prevent Data Breaches and Business Disruptions Detects and removes malware from virtual servers in real time with minimal performance impact Blocks malware that attempts to evade detection by uninstalling or otherwise disrupting the security program Shields known and unknown vulnerabilities in web and enterprise applications and operating systems Sends alerts and triggers proactive, prevention upon detection of suspicious or malicious activity Tracks website credibility and protects users from infected sites with web reputation threat intelligence from Trend Micro s global domain-reputation database Identifies and blocks botnet and targeted attack command and control (C&C) communications using unified threat intelligence from Trend Micro s global domain-reputation database Maximize Operational Cost Reductions Eliminates the cost of deploying multiple software clients with a centrally managed, multi-purpose software agent or virtual appliance Reduces complexity with tight integrations with management consoles from Trend Micro, VMware, and enterprise directories Provides vulnerability shielding to allow secure coding and cost-effective implementation of unscheduled patches Reduces management costs by automating repetitive and resource-intensive security tasks, reducing false-positive security alerts, and enabling workflow of security incident response Significantly reduces the complexity of managing file-integrity monitoring with cloud-based event whitelisting and trusted events Detects vulnerabilities and software via Recommendation Scanning to detect changes and provide protection from vulnerabilities Ensures improved operational efficiency with a lighter, more dynamic smart agent that eases deployment to maximize resource allocation across the data center and cloud Matches security to your policy needs so fewer resources need to be dedicated to specific security controls Simplifies administration with centralized management across Trend Micro security products. Centralized reporting of multiple security controls reduces the challenge of creating reports for individual products Achieve Cost-effective Compliance Addresses major compliance requirements for PCI DSS 3.0, as well as HIPAA, HITECH, NIST, and SAS 70 with one integrated and cost-effective solution Provides audit reports that document attacks prevented and compliance policy status Reduces the preparation time and effort required to support audits Supports internal compliance initiatives to increase visibility of internal network activity Leverages proven technology certified to Common Criteria EAL 4+ Page 2 of 4 datasheet deep security 9.5

4 DEEP SECURITY PLATFORM MODULES Anti-malware with Web Reputation Integrates VMware vshield Endpoint APIs to protect VMware virtual machines against viruses, spyware, Trojans, and other malware with zero in-guest footprint Delivers an anti-malware agent to extend protection to physical, virtual, and cloud servers, including AWS, Microsoft, and VMware environments Includes improved performance through VMware ESX-level caching and deduplication Optimizes security operations to avoid antivirus storms commonly seen in full system scans and pattern updates from traditional security capabilities Protects from sophisticated attacks in virtual environments by isolating malware from critical operating system and security components Integrates with the Trend Micro Smart Protection Network global threat intelligence for web reputation capabilities that strengthen protection for servers and virtual desktops Intrusion Prevention Examines all incoming and outgoing traffic for protocol deviations, policy violations, or content that signals an attack Automatically protects against known but unpatched vulnerabilities by virtually patching (shielding) them from an unlimited number of exploits, pushing protection to thousands of servers in minutes without a system reboot Assists with compliance (PCI DSS section 6.6) to protect web applications and the data they process Defends against SQL injection, cross-site scripting, and other web application vulnerabilities Includes out-of-the-box vulnerability protection for all major operating systems and over 100 applications, including database, web, , and FTP servers Provides increased visibility and control over applications accessing the network Bidirectional Host-based Firewall Decreases the attack surface of physical, cloud, and virtual servers with fine-grained filtering, policies per network, and location awareness for all IP-based protocols and frame types Centrally manages server firewall policy, including templates for common server types Prevents denial-of-service attacks and detects reconnaissance scans Provides logging of firewall events at the host, enabling compliance and audit reporting that is especially critical for public cloud deployments Integrity Monitoring Monitors critical operating system and application files, such as directories, registry keys, and values, to detect and report malicious and unexpected changes in real time Uses Intel TPM/TXT technology to perform hypervisor integrity monitoring for any unauthorized changes to the hypervisor, thereby extending security and compliance to the hypervisor layer Reduces administrative overhead with trusted event tagging that automatically replicates actions for similar events across the entire data center Simplifies administration by greatly reducing the number of known good events through automatic cloud-based whitelisting from Trend Micro Certified Safe Software Service Log Inspection Collects and analyzes operating system and application logs in over 100 log file formats, identifying suspicious behavior, security events, and administrative events across your data center Assists with compliance (PCI DSS section 10.6) to optimize the identification of important security events buried in multiple log entries Forwards events to SIEM system or centralized logging server for correlation, reporting, and archiving Deep Security also allowed us to eliminate another antivirus solution on our servers It had consumed a large amount of memory, and generated a lot of CPU churning due to the scans. We haven t had any of those problems with Deep Security. Systems Administrator Information Services Technology University of California at Berkeley Blaine Isbelle Deployment and Integration Rapid Deployment: Leverage Existing IT and Security Investments Integration with vshield Endpoint and VMsafe APIs, as well as VMware vcenter enables rapid deployment on ESX servers as a virtual appliance to immediately and transparently protect vsphere virtual machines Detailed, server-level security events are provided to a SIEM system, including ArcSight, Intellitactics, NetIQ, RSA Envision, Q1Labs, Loglogic, and other systems through multiple integration options Directory integration with enterprise directories, including Microsoft Active Directory Agent software can be deployed easily through standard software distribution mechanisms such as Chef, Puppet, AWS OpsWorks, Microsoft System Center Configuration Manager (SCCM), Novell ZENworks, and Symantec Deployment Solution Certification for CSPs Trend Ready for Cloud Service Providers is a global testing program designed for Cloud Service Providers (CSPs) to prove interoperability with industry-leading cloud security solutions from Trend Micro. Page 3 of 4 datasheet deep security 9.5

5 PLATFORM Architecture Deep Security Virtual Appliance. Transparently enforces security policies on VMware vsphere virtual machines for agentless anti-malware, web reputation, intrusion prevention, integrity monitoring, and firewall protection coordinating with Deep Security Agent, if desired, for log inspection and defense in depth. Deep Security Agent. Enforces the data center s security policy (anti-malware, intrusion prevention, firewall, integrity monitoring, and log inspection) via small software component deployed on the server or virtual machine being protected (can be automatically deployed with leading operational management tools like Chef, Puppet, and AWS OpsWorks). Deep Security Manager. Powerful, centralized management console: role-based administration and multi-level policy inheritance allows for granular control. Task-automating features such as Recommendation Scan and Event Tagging simplify ongoing security administration. Multi-tenant architecture enables isolation of individual tenant policies and delegation of security management to tenant admins. Global Threat Intelligence. Deep Security integrates with Trend Micro Smart Protection Network to deliver real-time protection from emerging threats by continuously evaluating and correlating global threat and reputation intelligence for websites, sources, and files. Key Certifications and Alliances Amazon Advanced Technology Partner Certified Red Hat Ready Cisco UCS validated Common Criteria EAL 4+ EMC VSPEX validated HP Business Partnership Microsoft Application Protection Program Microsoft Certified Partnership NetApp FlexPod validated Oracle Partnership PCI Suitability Testing for HIPS (NSS Labs) VCE Vblock validated Virtualization by VMware PLATFORM ARCHitecture Microsoft Windows Windows XP, Vista, 7, 8, 8.1 (32-bit/64-bit) Windows Server 2003 (32-bit/64-bit) Windows Server 2008, 2008 R2, 2012, 2012 R2 (64-bit) XP Embedded Linux Red Hat Enterprise 5, 6 (32-bit/64-bit) 1 SUSE Enterprise 10, 11 (32-bit/64-bit) 1 CentOS 5, 6 (32-bit/64-bit) 1 Amazon Linux 1 Ubuntu 10, 12, (64-bit) 1 Oracle Linux 5, 6 (32-bit/64-bit) 1 CloudLinux 5, 6 (32-bit/64-bit) 1 Oracle Solaris OS: 9, 10, 11 (64-bit SPARC), 10, 11 (64-bit x86) 2 Oracle Exadata Database Machine, Oracle Exalogic Elastic Cloud and SPARC Super Cluster via the supported Solaris operating systems UNIX AIX 5.3, 6.1 on IBM Power Systems 3 HP-UX 11i v3 (11.31) 3 VIRTUAL VMware : 5.1/5.5/vCloud Networking and Security 5.1, View 4.5/5.0/5.1, ESX 5.5 Citrix : XenServer 4 Microsoft : HyperV 4 1 Anti-malware support for on-demand scan only 2 Anti-malware not available 3 Anti-malware not available, Firewall and Intrusion Prevention on AIX only 4 Protection via Deep Security Agent only Securing Your Journey to the Cloud 2014 by Trend Micro Incorporated. All rights reserved. Trend Micro, the Trend Micro t-ball logo, and Smart Protection Network are trademarks or registered trademarks of Trend Micro Incorporated. All other company and/or product names may be trademarks or registered trademarks of their owners. Information contained in this document is subject to change without notice. [DS03_DeepSecurity9-5_140812US] Page 4 of 4 datasheet deep security 9.5

6 solution brief Trend Micro Deep Security and VMware NSX Defining a Security Framework for the Software-Defined Data Center Securing the Software-Defined Data Center The Software-Defined Data Center is an evolution and extension to server virtualization. While server virtualization provides dramatic efficiencies in the deployment of computing power, the SoftwareDefined Data Center does the same for all of the resources needed to host an application including: storage, networking, and security. The VMware NSX networking and security platform is a key element of VMware s vision for the Software-Defined Data Center. Trend Micro and VMware are working closely together to develop joint solutions that extend NSX s core networking and security services with best-of-breed security deployed with enterprise-class scaling and manageability. Deep Security is Trend Micro s flagship server security solution for virtualized and cloud environments. Since 2009, Deep Security has been protecting thousands of customers worldwide with best-inclass agentless security for VMware vsphere. Trend Micro Deep Security is a comprehensive security platform designed to provide server, application, and data security across physical, virtual, and cloud servers. The platform includes antimalware, firewall, IDS/IPS, web application protection, integrity monitoring, and log inspection technologies in a single solution. This enables the prevention of data breaches and business disruptions while helping achieve regulatory compliance. It does this without sacrificing performance and it simplifies operations. Building on the tight partnership between Trend Micro and VMware, the combination of NSX and Deep Security will increase protection and further automate security deployments for dynamic data center environments. Page 1 of 2 solution brief Deep Security and VMware NSX A notable history of joint development and innovation 2009 Trend Micro Deep Security 7.0 was the first solution supporting introspection of network traffic through the hypervisor 2009 Trend Micro released the first anti-malware introspection using VDDK. Trend Micro and VMware joined forces to develop a next-generation Endpoint Security API allowing for full agentless introspection of file systems 2010 VMware vshield launched with Deep Security 7.5, the first and only partner solution to support VMware vshield establishing the first fully agent-less anti-malware 2011 Trend Micro announced Deep Security 8.0, supporting the latest vshield security ecosystem, and offered the only fully agentless security platform to include anti-malware, intrusion prevention, and integrity monitoring 2012 Trend Micro announced Deep Security 9.0 supporting the latest vsphere 5.1 platform, and providing security for hybrid clouds and vcloud-based service providers via vcloud Director integration 2013 Trend Micro demonstrated prototype of Deep Security with NSX integration at VMworld. Trend Micro supports the VMware Hybrid Cloud Service

7 Trend Micro is working with VMware to enhance security integration with NSX in several key areas: Simplifying deployment and provisioning Deep Security has long offered network and endpoint introspection through vsphere with the ability to easily provision existing and new virtual machines (VMs). New integration capabilities delivered through NSX Service Composer will further streamline the provisioning and deployment processes, making it even easier to deploy security across your data center. Automating workflow across protection layers Through the use of a new common NSX tagging and orchestration framework, administrators will be able to trigger vendordefined or ad-hoc workflows based on security or administrative events. This could be used to automate real-time remediation and incident response during attacks, as well as, enable direct coordination between Trend Micro and VMware security layers. Providing elastic protection and scalability Businesses are deploying more elastic workloads in the cloud that scale with traffic. New abilities within the NSX Service Composer allow protection to be defined at an abstract container level using Security Groups. These enhancements further optimize the process of deploying and securing elastic workloads. Security Optimized for Virtual and Cloud Environments With thousands of successful agentless customer deployments worldwide, Trend Micro Deep Security has proven it improves security, manageability, and VM density. Trend Micro has received numerous accolades and recognition for virtualization security, including IDC s #1 ranking 1 in market share for server security (which includes virtualization and cloud security) for the past three years. Trend Micro was also awarded Best Secure Virtualization Solution in 2013 by SC Magazine. Trend Micro has led the market with several significant firsts : First and only agentless security suite for the VMware hypervisor First and only security solution to integrate with cloud platforms including Amazon EC2, VMware vcloud, and Microsoft Azure First and only security architecture designed for service providers and enterprises with software-defined datacenters; with support for multi-tenancy, auto-scaling, utility computing, and self-service The VMware NSX platform represents the latest step forward, demonstrating VMware and Trend Micro s commitment to design the ideal next-gen security framework for today s virtualized and cloud environments. Joint Trend Micro and VMware Technology Benefits with NSX: Simplifies security deployment and provisioning with new integration capabilities within NSX Composer Automates workflow across protection layers using new NSX tagging capabilities Provides elastic protection and scalability with new NSX abilities that define protection at the container level Contact and Availability If you are a VMware vsphere customer interested in participating in early access trials and providing feedback on Trend Micro integrated solutions with NSX, or would like to be notified of upcoming product news, please contact Justin Foster in our Product Management group: justin_foster@trendmicro.com. Learn more at trendmicro.com/virtualization Securing Your Journey to the Cloud 2014 by Trend Micro Incorporated. All rights reserved. Trend Micro, the Trend Micro t-ball logo, are trademarks or registered trademarks of Trend Micro Incorporated. All other company and/or product names may be trademarks or registered trademarks of their owners. Information contained in this document is subject to change without notice. [SB01_DS_VMware_NSX_140605US] 1 Source: IDC, 2012 Worldwide Corporate Endpoint Server Security Revenue Share by Vendor, August 2013 Page 2 of 2 solution brief Deep Security and VMware NSX

8 Customer SUCCESS STORY Telecom Italia Telecom Italia chooses Trend Micro to Secure its Virtualized Data Center Thanks to Trend Micro Deep Security, Italy s leading telecommunications and ICT operator has improved the protection of its servers that provide cloud services to Nuvola Italiana clients. Overview Telecom Italia is a leader in the Italian ICT (Information and Communications Technology) market and is active in the following sectors: fixed and mobile telecommunications, Internet, business systems and solutions, research and development. Nuvola Italiana is Telecom Italia s cloud computing service which transforms the corporate IT infrastructure into an on demand service that can be adapted to meet customer needs. >> Telecom Italia Region EMEA, Italy Sector Telecom and ICT Trend Solutions Deep Security IT Environment VMware Business Benefits Increases security with comprehensive set of capabilities Simplifies administration with a single console to manage security processes across entire security posture Protects virtual machines in VMware environment with agentless architecture and virtual patching Saves investment and management costs with single solution that automates security tasks It is a complete solution that can easily be integrated with the technology we use. We were able to easily set up a protection system that is effective and easy to manage for all our machines operating in our virtualized data center. Fabio Civita, Market Security Operation Center Manager, Telecom Italia Challenges With malware and other attacks rapidly increasing in number and complexity, it s critical for anyone offering advanced computing services to adopt an easy-to-manage, cost-effective solution that can protect its systems from serious threats. For Nuvola Italiana, its cloud services division operating a virtualized data center, Telecom Italia has chosen Trend Micro Deep Security, a comprehensive and flexible server security platform to protect applications and data from breaches and business disruptions while simplifying management. Computer security software is constantly evolving, says Fabio Civita, Market Security Operation Center Manager for Telecom Italia. For us, it was important to take action on possible vulnerabilities in our IT infrastructures. The increasing quality of the threats to which our systems are subjected led us to opt for one complete solution that could protect both physical and virtual servers. We were looking for total protection in our VMware environmentwith agentless security and virtual patching. Why Trend Micro Telecom Italia s objective was to secure Nuvola Italiana s virtual infrastructure that provides cloud computing services to tens of thousands of companies ranging from large enterprises to small businesses Collaboration with Trend Micro began years ago when we adopted their anti-virus systems for our employees computers, which led to our adoption of Deep Security throughout our virtual environments. Trend Micro s solution for modern data centers was selected from a shortlist of eight candidates because it was the most suitable tool for our needs and also the most evolved, especially in terms of interaction with the hardware and software platform that was the base of the entire system, says Civita. Solution At the beginning of 2012, Deep Security was installed on 80 VDI (Virtualized Desktop Infrastructure) servers and 150 additional virtual servers.in the middle of 2013, Deep Security was deployed on the rest of Nuvola Italia s servers 800 virtual and 1,200 physical. The decision to choose Trend Micro has also improved manageability of security in the VMware environments that Telecom Italia uses, reducing the need for continuous configuration and updating operations. In particular, virtual patching makes it possible to shield vulnerabilities before any intrusion actually occurs. Deep Securityis a comprehensive solution because it provides not only antivirus services, but also anti-malware and IDS/IPS, as well as host firewalls. In the event of an attack, we now have a range of effective methods that can be put immediately into place until the problem can be solved, says Civita. Page 1 of 2 Customer Sucess Story Telecom Italia

9 Customer SUCCESS STORY Telecom Italia The increasing quality of the threats to which our systems are subjected led us to opt for one complete solution that could protect both physical and virtual servers. We were looking for total protection in our VMware environment with agentless security and virtual patching. Fabio Civita, Market Security Operation Center Manager, Telecom Italia Results Trend Micro Deep Security has provided Telecom Italia with a server protection platform that is flexible and scalable. It protects virtualized Nuvola Italiana systems from data breaches and business disruptions, ensuring a high degree of operational continuity. Deep Security has also made it possible to reduce operating costs and resource use, while improving performance. The Trend Micro solutionhas allowed Telecom Italia to simplify the work of IT administrators who no longer have to worry about emergency patching.. The Nuvola Italiana administrators can manage the entire IT infrastructure via a single console, promoting better delivery of anti-malware and virtual patching. As a provider of cloud services, we must guarantee monitoring and basic security for all clients, even those who do not purchase services from us, but are collocated in our data centers., Civita says. In some cases, these clients may inadvertently be carriers of malware which can put our entire system at risk. Thanks to Trend Micro, we don t just have a simple antivirus, but a comprehensive security suite, which allows us to control the Nuvola Italiana environment and the whole overall network thus protecting all of our clients. For More Information For more information, please contact: by Trend Micro Incorporated. All rights reserved. Trend Micro, and the Trend Micro t-ball logo, OfficeScan and Trend Micro Control Manager are trademarks or registered trademarks of Trend Micro Incorporated. All other company and/or product names may be trademarks or registered trademarks of their owners. Information contained in this document is subject to change without notice. [CS-SuccessStory-TelecomItalia US] Page 2 of 2 Customer Sucess Story Telecom Italia

10 datasheet Trend Micro DEEP SECURITY for WEB APPS Intelligent Detection and Protection for Web Applications As organizations rely more and more on web applications to deliver services to their employees, partners and customers, the threat landscape broadens and the security challenges they face become increasingly complex. Further compounding the security challenge is that web applications are accessed in the data center and in the cloud via a variety of traditional and new mobile devices. Traditional approaches to vulnerability scanning are based on detecting basic low-level network attacks whereas today s threats are sophisticated and varied. And testing at the application level, if it is done, is performed infrequently, allowing vulnerabilities to accumulate and risk to increase. The reality is that most organizations face threats that are difficult to detect and protect against, and it becomes costly and time consuming to deal with false positives and to continuously guard against security threats. Deep Security for Web Apps was developed to address today s complex threat environment, providing a complete suite of security capabilities to detect threats and vulnerabilities, and protect web applications in a single integrated solution. Addressing Key Business Needs Application Vulnerability Scanning Detect vulnerabilities in web applications, without the distraction of false positives. Expert Business Logic Testing Discover application logic flaws with Trend Micro security experts, including comprehensive proof of exploitation. Platform Scanning Identify key security vulnerabilities at the platform layer, including scanning of the operating system, web server, and application server. Automatic Protection Shield vulnerabilities before they can be exploited, eliminating emergency patching, application updates, and costly system downtime. Cost-Effective SSL Security Unlimited SSL certificates, including Extended Validation, to secure transactions and instill trust. Compliance Continuously scan applications to ease compliance with PCI DSS, HIPAA, etc. Intelligent security for web APPLICATIons Complete Intelligent Application Scanning...for today s complex threat environment. Using both automatic scanning and expert, hands-on business logic testing, web applications can be protected continuously against the most complex attacks while avoiding the false positives that bog down the security team. Integrated Detection and Protection...to minimize the time to respond to security threats. Quickly block new attacks without the delays of patching the current infrastructure or updating the application. Unlimited SSL Certificates...to protect and secure all web applications for one low, flat fee and increase customer trust without additional cost. Find out more at webappsecurity.trendmicro.com Page 1 of 4 datasheet DEEP SECURITY for Web Apps

11 Key Features Complete Intelligent Application Scanning Application vulnerability scanning that looks for OWASP top 10 vulnerabilities and WASC testing criteria Comprehensive vulnerability platform scanning (operating system and server) with over 50,000 checks DEEP SECURITY for WEB APPS logic testing by security experts to detect vulnerabilities that automatic testing alone can t catch Expert vetting of scanning results to eliminate false positives, and prioritization of issues to focus mitigation resources Leveraging Trend Micro s Smart Protection Network and proven security engines, comprehensive malware scanning of web applications and linked external URLs to alert on malware presence Monitoring of web application reputation to ensure reputation and categorization issues are identified and dealt with Comprehensive Platform and Application Scanning with False Positive Removal Malware Detection backed by Trend Micro s Smart Protection Network Integrated Detection and Protection Intrusion Prevention Native Web App Firewall Rule Export Protection against known and zero-day attacks by shielding discovered platform vulnerabilities from exploits before code and configuration fixes can be completed Out-of-the-box vulnerability platform protection for all major operating systems Based on discovered application vulnerabilities, deliver Web App Firewall (WAF) rules to defend against application exploits before code and configuration fixes can be completed Support for rule export in native format for WAF leaders like Citrix, Imperva, AlertLogic, and ModSecurity Find out more at webappsecurity.trendmicro.com Page 2 of 4 datasheet DEEP SECURITY for Web Apps

12 Key Features (continued) Unlimited SSL Deploy unlimited SSL certificates at dramatic savings versus traditional SSL suppliers. This includes Extended Validation (EV) certificates, indicated by a green bar in the browser that generates higher levels of trust. Ubiquitous customer reach with coverage across more than 99+% of browsers and support for key certificate capabilities such as SAN and Universal Communication Certificates (UCC) Integrated SSL health check to uncover potential configuration vulnerabilities and any certificate-expiry risks Direct delivery of SSL certificates not through third-party Local Registration Authorities like traditional vendors Unlimited SSL Certificates including Extended Validation (EV) Single Integrated Management Console All detection and protection functions managed through a single cloud-based console with role-based administration to ease management of web app security Scanning can be done on-demand or can be run continuously to fit security needs Dashboard delivers information from both automatic and manual scanning, giving organizations a single view of their web application security posture Unlike other solutions, platform and application testing is performed with a single centralized configuration including logging and reporting to substantially simplify operation Integrated Console for all Configuration and Reporting Find out more at webappsecurity.trendmicro.com Page 3 of 4 datasheet DEEP SECURITY for Web Apps

13 DEEP SECURITY for WEB APPS CLoud-BASED and secure One cloud-based account provides detection and protection for all web applications, making it fast and easy to get up and running in minutes. Cloud-based scanners compatible with web applications on physical, virtualized, and cloud-based servers. Threat and scanning data protected with Trend Micro s industry-leading security, hosted in Trend Micro secure data centers. Native Integration with leading Web Application Firewalls About Trend Micro As a global leader in cloud security, Trend Micro develops security solutions that make the world safe for businesses and consumers to exchange digital information. With more than 25 years of experience, we deliver top-ranked security that fits our customers needs, stops new threats faster, and protects data in physical, virtualized, and cloud environments. Corporate member of: OWASP The Open Web Application Security Project Get STARTED! See how easy it is to detect and protect your web applications with a free trial of Deep Security for Web Apps. Visit: WEBAPPSECURITY.trendmicro.com Securing Your Journey to the Cloud 2013 by Trend Micro Incorporated. All rights reserved. Trend Micro, and the Trend Micro t-ball logo are trademarks or registered trademarks of Trend Micro Incorporated. All other company and/or product names may be trademarks or registered trademarks of their owners. Information contained in this document is subject to change without notice. [DS02_DSforWebApps_131227US] Find out more at webappsecurity.trendmicro.com Page 4 of 4 datasheet DEEP SECURITY for Web Apps

14 About Trend Micro As a global leader in cloud security, Trend Micro develops security solutions that make the world safe for businesses and consumers to exchange digital information. With more than 25 years of experience, we deliver top-ranked security that fits our customers needs, stops new threats faster, and protects data in physical, virtualized, and cloud environments by Trend Micro Incorporated. All rights reserved. Trend Micro, and the Trend Micro t-ball logo are trademarks or registered trademarks of Trend Micro Incorporated. All other company and/or product names may be trademarks or registered trademarks of their owners. Information contained in this document is subject to change without notice.