HP T5700 HP Sygate Security Agent and Symantec Embedded Security:Frequently As - Page 3

3

Q:

What is the free functionality?

A:

The HP Sygate Security Agent provides a customizable firewall that helps protect your computer from

intrusion and misuse, whether malicious or unintentional. It detects and identifies known Trojans, port

scans, and other common attacks, and in response selectively allows or blocks the use of various

networking services, applications, ports, and components.

HP Sygate Standalone Agent has the ability to allow or block any port or protocol, inbound or

outbound, by either application or traffic signature. The Agent not only blocks according to these

parameters, but can also link them with logical and/or conditional statements, increasing the scope

and flexibility of polices that you can apply. The Agent can also block and apply policy to custom

protocol adapters, enabling enterprises to use custom network-enabled applications and to block

applications that circumvent the TCP/IP stack with custom protocol adapters.

Q:

How can I get signature updates for the Sygate firewall to ensure protection from

the latest threats?

A:

Symantec Embedded Security (HP Part Number EL390AA) is available as a subscription service.

Symantec acquired Sygate and has integrated the Sygate firewall into Symantec Embedded Security.

Purchasing the Symantec Embedded Security subscription provides a full year of updates to the

firewall, and additionally provides integrated anti-virus technology, a requirement in many business IT

environments. HP offers leading firewall and antivirus technology from an industry leader: Symantec

Embedded Security.

Q:

How can I obtain antivirus support for my thin clients?

A:

Symantec Embedded Security (HP Part Number EL390AA) is available as a one year, renewable,

subscription service. With both antivirus and firewall protection, the Symantec Embedded Security

agent provides an industry-leading level of protection for thin clients with Microsoft’s XP embedded

operating system. Symantec acquired Sygate and has integrated the Sygate firewall into Symantec

Embedded Security. Purchasing the Symantec Embedded Security subscription provides a full year of

updates to the firewall, and additionally provides integrated anti-virus technology, a requirement in

many business IT environments. HP offers leading firewall and antivirus technology from an industry

leader: Symantec Embedded Security.

Q:

How do I buy Symantec Embedded Security?

A:

Symantec Embedded Security (HP Part Number EL390AA) is available direct from HP, or your local

and online resellers. Once purchased, HP will mail you a letter with information on how to download

the latest versions of the Symantec Embedded Security and updates for the antivirus and firewall

components.

Section	Page
HP Sygate Security Agent and Symantec Embedded Security: Frequently Asked Questions	1
Question and answers	2
Overview	2
Q: Are thin clients susceptible to viruses or worms?	2
1. With the HP thin client computing model, your exposure to virus attack on the thin client system is less than a standard Wind...	2
2. The HP thin client computing model utilizes PC blades and/or servers located in the data center. You can protect and monitor ...	2
3. Since no user data resides on the thin client, there is no risk of user data loss due to a virus or worm on the thin client.	2
4. If a thin client’s image is compromised or corrupted, the recovery time is typically measured in minutes instead of hours. You can often perform recovery with a simple reboot of the client.	2
Q: What does HP deliver in the factory image?	2
Q: What is the free functionality?	3
Q: How can I get signature updates for the Sygate firewall to ensure protection from the latest threats?	3
Q: How can I obtain antivirus support for my thin clients?	3
Q: How do I buy Symantec Embedded Security?	3
Firewall questions	4
Q: What approach has HP taken to secure my thin client?	4
Q: How is the HP Sygate Security Agent different than Microsoft Windows Firewall?	4
Q: What is the difference between a whitelist and a blacklist approach?	4
Q: What viruses, worms, or vulnerabilities will HP Sygate Security Agent block?	5
Q: How do I use the SOS scanner?	6
1. Double-click the Sygate icon to launch the HP Sygate Security Agent GUI.	6
2. Select Tools > Test Your System Security to automatically launch Internet Explorer and links to SOS at http://scan.sygate.com.	6
3. From the Sygate site, select the tests you want to perform.	6
Q: Which inbound and outbound ports has HP allowed?	6
Q: What is the HP Sygate Policy Editor and what does it do?	7
Q: Where do I obtain the HP Sygate Policy Editor?	8
Q: Is there a fee associated with the HP Sygate Policy Editor?	8
Q: Who do I contact for technical support on the HP Sygate Policy Editor?	8
Q: How do I modify the ports against the applications already specified by HP?	8
1. Log on as Administrator.	8
2. Right-click on the Sygate systray icon.	8
3. Select Advanced Rules.	8
Q: Is there a limitation to which ports and/or applications that I can add?	8
Q: What if my application uses a range of ports?	8
Q: Can I or do I need to specify whether my application uses UDP or TCP?	8
Q: Is there a risk to opening all ports for an application?	8
Q: Is there a limit to the number of rules I can add?	8
Q: Is there a list of well-known ports and their respective applications?	8
Log files	9
Q: How do I view the log files while at the thin client?	9
1. Log in as Administrator.	9
2. Right-click the Sygate icon in the system tray.	9
3. Select Logs.	9
Q: How do I retrieve the log files remotely?	9
Q: What does the log file reveal?	9
Q: How do I know that a port or application has been blocked?	9
Q: What should I do when an application is blocked?	9
Intrusion detection	10
Q: What is the functionality of an Intrusion Detection System (IDS)?	10
Q: How do I deploy modified policies with Altiris?	10
Q: Are there best practices for automating deployment?	10
Q: How do I make IDS files persistent?	10

HP T5700 HP Sygate Security Agent and Symantec Embedded Security:Frequently As - Page 3

How do I buy Symantec Embedded Security?

Page 3 highlights