The client is an energy company based in Germany. The Symantec Endpoint Protection (SEP) on their systems and servers were reporting to different management environments. They wanted to have a single environment for all the SEP solutions.
Infosys implemented a consolidated SEP environment consisting of client systems and servers for enhanced management and monitoring.
Key Challenges
- Difficulty in monitoring and managing security policies on workstations and servers
- Implementation of the SEP infrastructure and policy configuration not aligned with best practices
- Old version of SEP solution in the client environment leading to increased vulnerabilities
The Solution
Better remediation of vulnerabilities
- Built a new SEP environment consisting of all workstations and servers
- Added additional management servers to ensure proper load-balancing and failover
- Upgraded SEP clients to the latest version in order to fix critical vulnerabilities
- Revised and configured the security policies as per client’s best practices
Benefits
Improved security posture by blocking security threats
Detected and blocked 8000+ intrusion prevention events with sophisticated attack analytics within 6 months
Improved management and monitoring of 20,000 end user systems and servers
Enhanced security by using protection features available in the newer SEP client versions
Shifted 99% SEP clients to the latest version
Ensured high and stable virus definition compliance
Reduced response time to critical vulnerabilities
