Novell ZENworks Endpoint Security Management

Posture and Integrity

ZENworks Endpoint Security Management verifies that designated endpoint PC antivirus and/or anti-spyware software is running and is up-to-date, whether the endpoint connects to the corporate network or the Internet. ZENworks Endpoint Security Management takes immediate action if endpoints fall out of compliance by placing them into safe, customizable quarantine states, preventing the spread of viruses or other contamination to the network. Remediation actions can also be initiated, and once compliance is confirmed, endpoints are taken out of quarantine. Security policy settings are automatically enforced before, during, and after quarantine.

Advanced Scripting Tool
ZENworks Endpoint Security Management provides the sophisticated creation of flexible and complex integrity rules going beyond antivirus, spyware, and patching services. Advanced scripting enables remediation actions using both ZENworks and other third-party products suited to your remediation requirements and tailored to your specific needs. Using common scripting languages, such as VBScript and JavaScript, advanced scripting enables rule creation specifying both the triggers (when to execute the integrity rule) and the remediation actions.

Cisco NAC Integration
ZENworks Endpoint Security Management supports Cisco's Network Admission Control (NAC) initiative. The ZENworks Security Client evaluates the client posture, and communicates to the Cisco Trust Agent, which in turn communicates with the relevant Cisco infrastructure to allow access to the network. If the endpoint is out of compliance, for example an out-of-date virus signature file, the ZENworks Security Client will notify the Cisco Trust Agent to quarantine the endpoint and remediate the problem. Once back in compliance, the ZENworks Security Client will notify the Cisco Trust Agent, which in turn will allow the endpoint to have full network access.