Download FY05 Plan

Empowering the Enterprise with
Information Integrity
José María Fernández
[email protected]
Software Distribution Strategic Positioning
Software Distribution
Gartner August 2004
Symantec LiveState™ Client Management Suite
Helping ensure clients are secure, available, & compliant with corporate standards
2
Leadership Position in Windows Software Distribution Market
Software Distribution Market Share
by Revenue
Other (Windows)
41%
In software distribution,
Symantec owns 31% of
the Windows market.*
Total SYMC
revenue for SD
31%
MSFT revenue
for SD
28%
TAM for Windows market = $431M
SYMC Software Distribution Revenue
by Product Line
$21,292
Ghost
iCommand
$29,700
DeployCenter Library
$82,108
*Source: IDC Worldwide Software Distribution 2004-2008 Forecast and 2003 Vendor Shares, Doc#32172
Symantec LiveState™ Client Management Suite
Helping ensure clients are secure, available, & compliant with corporate standards
3
The Responsibility of Desktop Managers & Staff
Symantec LiveState™ Client Management Suite
Helping ensure clients are secure, available, & compliant with corporate standards
4
Today’s Client Management Challenges
Ongoing security threats
 Blended threats (Code Red, Blaster, etc.)
 Spyware/adware
 Missing patches
Ongoing business & technological change
 New platforms, devices & applications
 Infrastructure evolution (Active Directory, wireless
networks, etc.)
 Regulatory compliance, mergers & acquisitions, …
Hardware & software failure
End-user related issues
 Installation of unauthorized applications
 Downloading of inappropriate content
 End-user errors
Symantec LiveState™ Client Management Suite
Helping ensure clients are secure, available, & compliant with corporate standards
5
Managing the infrastructure
Symantec LiveState™ Client Management Suite
Helping ensure clients are secure, available, & compliant with corporate standards
6
Symantec Discovery
Technical Details
Click the return button to return to main
Symantec Discovery slide
Symantec Discovery
Discovery of all networked devices
LANProbe Technology
 Locates every IP device
on the network, incl.
PCs, printers, servers,
routers, switches,
firewalls, etc.
 Discovers 100% of all IP
addresses
 Returns outline details,
incl. any available SMTP
data, to the central
repository.
 Identifies the physical
location of devices
Symantec LiveState™ Client Management Suite
Helping ensure clients are secure, available, & compliant with corporate standards
8
Symantec Discovery
Hardware Discovery
Hardware Discovery—
Automatically discovers
existing assets, and identifies
and tracks their physical
location and configuration
Provides automatic agent
deployment over the network,
via email or installation via
the Web
Automatically alerts IT
administrators to movements,
additions and removals via
report, console, email or any
other form of alert using SQL
triggers
Symantec LiveState™ Client Management Suite
Helping ensure clients are secure, available, & compliant with corporate standards
9
Symantec Discovery
Software Discovery
Software Discovery—
Identifies applications,
reducing the time and cost
of managing software on
the network
Identifies software license
usage (incl. locally installed
software, network-accessed
software, Citrix-accessed
software and serial
numbers)
Provides IT administrators
with the information to
reassign unused software
licenses, maintain license
compliance and secure
company assets
Symantec LiveState™ Client Management Suite
Helping ensure clients are secure, available, & compliant with corporate standards
10
Symantec Discovery
File Types
File Type Discovery
Identifies unauthorized
and potentially harmful
files on the network
(i.e. mp3, mpg, jpg)
to aid compliance,
security and network
planning
Symantec LiveState™ Client Management Suite
Helping ensure clients are secure, available, & compliant with corporate standards
11
Symantec Discovery
Reporting
Web-based Management Reporting
 Allow CIO or other senior management to view graphical reports & key asset data
 Displays snapshot views of information regarding license compliance, upgrade analysis and
hardware/software asset deployment
Symantec LiveState™ Client Management Suite
Helping ensure clients are secure, available, & compliant with corporate standards
12
Symantec Discovery
Additional Features & Benefits
IT Auditing
 Performs local or remote auditing across LANs, WANs, dial-up connections and
the Internet via log-in scripts, Windows services, email, floppy disk or distribution
tool (e.g. Symantec LiveState Delivery)
 Maintains an audit history of managed devices
Scheduling
 Allows IT administrators to schedule audits to occur regularly and automatically
(i.e. weekly, daily, etc.)
Data Analysis
 Provides easy data analysis using standard and customized reports accessible
over the Web
Delta Differencing
 Agents only report changes, reducing network traffic
Symantec LiveState™ Client Management Suite
Helping ensure clients are secure, available, & compliant with corporate standards
13
Symantec Discovery
Additional Features & Benefits
Extensive Queries, Reporting & Export Options
 Enables IT administrators to link Symantec Discovery’s database to reporting
tools such as Crystal reports or Business Objects
 Facilitates easy exporting of Symantec Discovery’s audit data to populate other
tools and solutions, such as help desk and asset management tools, based on
SQL database standards
Secure Communications
 Provides secure deployment of client agents and encrypted communications
between agents and Symantec Discovery control center
Multi-Platform Support
 Single, unified solution supports heterogeneous environments and operating
systems, incl. DOS, Windows 3.1, Windows 95, Windows 98, Windows ME,
Windows NT 4.0, Windows 2000, Windows XP, Windows 2003 Server, Red Hat
Linux, SuSE Linyux, UNIX (Intel), Sun Solaris on SPARC, HP-UX on PA-RISC,
AIX, Mac OS/X, Citrix Metaframe, Terminal Services
Symantec LiveState™ Client Management Suite
Helping ensure clients are secure, available, & compliant with corporate standards
14
Symantec Discovery
Key Features & Benefits (Continued)
Integration with Symantec LiveState Delivery
 Allows IT administrators to create target deployment groups
from inventory queries, i.e.:
• Discover all Dell PCs with the ATI display adapter, and
deploy the video driver update package to them.
• Show me all PCs with Windows 98 and greater than
256 MB of memory, and create a Windows XP
deployment group.
 Enables IT administrators to monitor machines for
unauthorized software installed by end-users (e.g. games)
and to trigger Symantec LiveState Delivery to automatically
uninstall specified applications
Symantec LiveState™ Client Management Suite
Helping ensure clients are secure, available, & compliant with corporate standards
15
Symantec Discovery Components
Symantec Discovery Control
Center
Symantec Discovery Server
Components
Symantec
Discovery
Database
(SQL)
Client Agents
Windows
Hardware audit
Unix
Software audit
Linux
Software usage
Mac
Audit Schedules
Symantec LiveState™ Client Management Suite
Helping ensure clients are secure, available, & compliant with corporate standards
16
Symantec Discovery Deployment Options
Login scripts or profiles

Ideal for network PCs
Windows NT / 2000/XP Services

Client Agent deployed without requiring a user or administrator logon
E-mail

Reliable, simple solution for remote users
Floppy disk

Stand alone PCs
Electronic software distribution tools
Symantec LiveState™ Client Management Suite
Helping ensure clients are secure, available, & compliant with corporate standards
17
Symantec LiveState™ Designer
Technical Details
Click the return button to return to main
Symantec LiveState Designer slide
Symantec LiveState Designer
Delivery Tools Options
Flexible tools to choose
from to create:
• Ghost/DeployCenter
images using AutoInstall
Builder
• Delta snapshot
installations using AutoInstal
Snapshot
• MSI-compliant Installation
packages
• Scripted tasks using the
Transcript Recorder
Symantec LiveState™ Client Management Suite
Helping ensure clients are secure, available, & compliant with corporate standards
19
Symantec LiveState Delivery Package Manager
Comprehensive package management
Package Management
• Create, edit, customize,
and publish packages for
use across a large
organization
Symantec LiveState™ Client Management Suite
Helping ensure clients are secure, available, & compliant with corporate standards
20
Symantec LiveState Delivery Package Manager
Comprehensive package management
Publishing packages
• Publish packages to one
ore more Symantec
LiveState servers
simultaneously
Symantec LiveState™ Client Management Suite
Helping ensure clients are secure, available, & compliant with corporate standards
21
Symantec Client Migration 3.0 – PC Personality Migration
What is a PC personality?
 User Settings
• Desktop settings, including shortcuts and wallpapers
• Network printers and mapped network drives
• Brower bookmarks
 User Data
• User-created data, including “My Documents”
• User-defined inclusion and/or exclusion lists (ie. All *.xls, but no *.mpg)
 Application Settings
• Settings not part of the user makeup and not stored as traditional data
Examples:
– Microsoft Office XP: Use paperclip assistant or Einstein
– Microsoft Outlook: Email server settings as well as folders and email
Symantec LiveState™ Client Management Suite
Helping ensure clients are secure, available, & compliant with corporate standards
22
Symantec Client Migration
Components
Easily manage system
migrations
Use templates to keep
migration processes
streamlined and controlled
Symantec LiveState™ Client Management Suite
Helping ensure clients are secure, available, & compliant with corporate standards
23
Symantec Client Migration
Components
Facilitates creation &
restoration of user
packages in two ways:
Interactively by the enduser through a Web-based
interface
Using a script developed
by the IT administrator in
connection with the
Symantec AutoMigrate
feature
Symantec LiveState™ Client Management Suite
Helping ensure clients are secure, available, & compliant with corporate standards
24
Symantec Client Migration
Components
Symantec AutoMigrate
 Utility that lets IT administrators automate the migration process
to create, restore and delete packages on the client computer
 Executed with no interface and no input from the user
 Runs from the command line or in a scripting environment
Package
 Collection of user data, operating and application settings from a
source computer
 Created using the Symantec Migration Client
 Stored on the Symantec Migration Server or in the Client Staging
Area if used with Symantec Ghost 8.0
Symantec LiveState™ Client Management Suite
Helping ensure clients are secure, available, & compliant with corporate standards
25
Symantec LiveState™ Delivery
Technical Details
Click the return button to return to main
Symantec LiveState Delivery slide
Symantec LiveState Delivery
Manage Computers
Automate repetitive
IT tasks such as:
• configuration
management
• system/applicati
on deployments
& migrations
• software update
distribution
• software/applica
tion removal
Symantec LiveState™ Client Management Suite
Helping ensure clients are secure, available, & compliant with corporate standards
27
Deliver OS
DHCP
Server
CCM Site Server
2 - Obtain
CCM Boot agent
CCM Locator Service
3 – Obtain IP for
CCM configuration server
CCM Configuration Server
4 – obtain Pre-OS agent
5- obtain Desktop agent
1 – Obtain IP address
from DHCP server
?
Symantec LiveState™ Client Management Suite
Helping ensure clients are secure, available, & compliant with corporate standards
28
Deliver OS
Scenarios
Bare Metal
Bare metal installs


Via network boot
In build factory or at the desk
Migration / Re-Provisioning



Via network boot
Via local boot
Zero touch
NT4
Re-image / disaster recovery



XP
From local recovery partition
Rapid
Off-line
Damaged
system
Clean
build
Symantec LiveState™ Client Management Suite
Helping ensure clients are secure, available, & compliant with corporate standards
29
Advanced Technology for Mobile & Remote Users
Feature
Dynamic Bandwidth
Throttling
File & Byte-Level
Differencing
Checkpoint Restart
Description & Benefit
Dynamically detects network load & adjusts usage on
both clients & servers to limit bandwidth consumption
Only files or bytes that have changed are deployed to
target devices
If connection interrupted during transmission, only
copies remaining bytes
Compression
Minimizes file size & bandwidth usage
HTTP & SSL
Secure communication inside & outside firewall, via
industry-standard protocols
Manage any device from anywhere
Web Admin Portal
Web Self-Service
Portal
Symantec LiveState™ Client Management Suite
End-users get what they need instantly, using
corporate-approved procedures and without
increasing IT load
Helping ensure clients are secure, available, & compliant with corporate standards
30
Web Admin
Symantec LiveState™ Client Management Suite
Helping ensure clients are secure, available, & compliant with corporate standards
31
Security Configuration Library
Pre-built, pre-tested configuration packages
are available for deploying & configuring:
Symantec Client Security





Anti-virus
Client firewall
Anti-spyware/adware
Intrusion prevention
SCS also provides VPN end-point policy
compliance
Windows XP Firewall configuration


File/Print sharing on/off
Remote Desktop on/off, …
Windows XP SP2
Plus: packages for SAV 9.0, LiveState
Recovery, pcAnywhere, IE6 SP1, W2K SP4,
Office XP, Office 2003, Adobe Acrobat, …
Symantec LiveState™ Client Management Suite
Helping ensure clients are secure, available, & compliant with corporate standards
32
Symantec LiveState™ Patch
Manager Technical Details
Click the return button to return to main
Symantec LiveState Patch Manager slide
Symantec LiveState Patch Manager
Overview
• Easily automates patch scanning,
download and deployment
• Identifies vulnerabilities and installs
missing patches - allowing your
computers to be compliant and
secure throughout your organization
• Flexible grouping capabilities to
target patches to specific groups of
users
• Scheduling capabilities allow
patching activities to occur during
optimal timeframes
• Persistent delivery assures patches
are consistently delivered and
applied, while detailed reports help
validate compliance
• A scalable solution for growing
organizations
Symantec LiveState™ Client Management Suite
Helping ensure clients are secure, available, & compliant with corporate standards
34
Symantec LiveState Patch Manager
Downloading Patches
Patch downloads
and repository
• Explicit control of
patch downloads to
server for all
supported languages
Symantec LiveState™ Client Management Suite
Helping ensure clients are secure, available, & compliant with corporate standards
35
Symantec LiveState Patch Manager
Vulnerability Detection
Scanning accuracy
•
Ensures that all
vulnerabilities due to
missing patches are
revealed
•
Can schedule
scanning and patching
to occur during optimal
timeframes
•
Minimizes disruption
and retains
productivity throughout
your organization
Symantec LiveState™ Client Management Suite
Helping ensure clients are secure, available, & compliant with corporate standards
36
Symantec LiveState Patch Manager
Patch Information
Comprehensive
patch information
• After scanning, view
the list of available
patches
• View details of each
patch e.g.. severity,
reboot required, etc.
Symantec LiveState™ Client Management Suite
Helping ensure clients are secure, available, & compliant with corporate standards
37
Symantec LiveState Patch Manager
Creating patch deployment targets
Flexible sorting and
grouping capabilities
•
Target patches to specific
groups of users, at the right
time, to the right computers
• Computers can be grouped
by department, network
location, physical location, or
anything else - for example:
 Create groups according to
functional departments
 Create groups that are similar
in function or purpose (such as
all XP Professional Edition)
•
Then simply select one or
more computers in each
group and assign a
scan/patch job
Symantec LiveState™ Client Management Suite
Helping ensure clients are secure, available, & compliant with corporate standards
38
Symantec LiveState Patch Manager
Deployment Scheduling
Patch Deployment
Scheduling
•
Schedule a date
and/or time for
deployment of a single
patch or groups of
patches
 Immediately”
 “Finish before”
 “Start After”
•
Persistent Delivery
Symantec LiveState™ Client Management Suite
Helping ensure clients are secure, available, & compliant with corporate standards
39
Symantec LiveState Patch Manager
Persistent Delivery
Persistent Delivery
•
Provides secure and
reliable deployment of
patches over any type of
connection - over high
speed, wired, or wireless
networks
•
•
•
•
•
HTTPS is used for
communication
Dynamic Bandwidth
Throttling
File and Byte Level
Differencing
Checkpoint Restart
Wake-On-LAN
Symantec LiveState™ Client Management Suite
Helping ensure clients are secure, available, & compliant with corporate standards
40
Symantec LiveState Patch Manager
Persistent Delivery
Monitoring & Reporting
• Computer Status
Summary & Detail
reports
• Patch Status Summary
& Detail reports
• Status Executive
Report
• Computer Status
Overview Report
• Last Scan Date Report
• Supported Patch
Language Report
Symantec LiveState™ Client Management Suite
Helping ensure clients are secure, available, & compliant with corporate standards
41
Symantec pcAnywhere™ for Symantec
LiveState™ Technical Details
Click the return button to return to main Symantec
pcAnywhere for Symantec LiveState slide
Symantec pcAnywhere for Symantec LiveState
Quick Deploy & Connect
Deploy a thin host &
immediately connect
Configure and deploy a
thin host over a network and
start a remote control
session.
Administrator rights
required
No system restart
required
Windows & Linux
Symantec LiveState™ Client Management Suite
Helping ensure clients are secure, available, & compliant with corporate standards
43
Symantec pcAnywhere for Symantec LiveState
Host Logon
Caller accounts
The host user must set
up a caller account and
provide logon credentials
Symantec LiveState™ Client Management Suite
Helping ensure clients are secure, available, & compliant with corporate standards
44
Symantec pcAnywhere for Symantec LiveState
Encryption
Using encryption in
pcAnywhere
AES encryption
Set data encryption
levels, including
algorithm, key length,
and public-key encryption
settings
FIPS 140-2 validated*
*Symantec Cryptographic Module,
Certificate No. 483
Symantec LiveState™ Client Management Suite
Helping ensure clients are secure, available, & compliant with corporate standards
45
Symantec pcAnywhere for Symantec LiveState
Remote control session
Remote Control
Sessions
Only transmit
input/output information
across computers
 Fast performance
 Minimize risk of
losing data
Symantec LiveState™ Client Management Suite
Helping ensure clients are secure, available, & compliant with corporate standards
46
Thank you