VirusBarrier X6 Protecting Macs from Malware and Network Threats

With the increasing threat of viruses and malware affecting Macintosh computers, endpoint security protection for Macs in businesses is essential. In addition to protecting from Mac viruses and malware, IT administrators need to ensure that Macs are not conduits for malware that can infect other operating systems.

But cyber-criminals are turning to new techniques to infect and control Macs. These new threats come silently, with little warning, over the Internet: in some cases, simply visiting a booby-trapped web page can compromise an unprotected Mac. Focusing on malware or network at- tacks alone is no longer sufficient to protect Macs from the dangers of the Internet.

Using a strong, reliable endpoint security solution for Mac is the ideal means of protection: it can keep Macs safe from viruses and malware, and it can block network attacks, whether they originate outside the local network or from an infected computer on the network. In addition, it can guarantee that Macs will not pass viruses on to computers running Windows. VirusBarrier X6 is the only antivirus program for Mac that includes full anti-malware protection together with two-way firewall, network protection, anti-phishing, anti-spyware features and more.

This white paper will examine the importance of protecting Macs from viruses, malware and network threats, and explain how to benefit from using Intego VirusBarrier X6 in environments with large numbers of Macs.

Working with Macs in the Enterprise ing infected or compromised by malware, Mac users may share documents with others, which, while not dangerous Macintosh computers are increasingly popular in enterprise to Macs, could compromise Windows systems. environments because of their ease-of-use, their reliability, and the software they offer. Especially popular in the pub- It is therefore necessary to have a strong, reliable solution lishing and design industries, Macs are making inroads into to protect Macs from viruses and malware, to ensure that other sectors. Mac laptops—the MacBook and MacBook files that transit through Macs do not contain potentially Pro—offer compelling feature sets that make them among dangerous payloads that could affect Windows comput- the more popular choices for portable computers. ers, and to keep Macs safe from network threats and attacks. Macs have always had a strong presence in the education market, partly because of their ease-of-use, but also be- The Macintosh Malware Threat cause they require much less support than Windows PCs. Apple’s all-in-one iMacs are especially practical for schools Macs have been historically less vulnerable to viruses, and universities that want powerful personal computers though history shows us that the first computer virus that with the smallest possible footprints, and are powerful appeared in the wild was one that affected an Apple com- enough to perform the most demanding tasks. puter. Called “Elk Cloner,” this 1982 virus, intended to be nothing more than a joke, and causing no serious damage, But Mac OS, like all operating systems, is at risk from virus- affected computers running Apple’s DOS 3.3 operating es, malware, hackers and vandals. Macs, like other comput- system and spread via floppy disks. ers, require reliable protection from the many threats they face. IT administrators need to consider the most effective and efficient ways to protect not only the Macs in their companies or institutions, but also to ensure that Macs do not become vectors for malware that can harm other computers. In addition to the possibility of Macs becom-

Intego VirusBarrier X6: Protecting Macs from Malware and Network Threats 1 A Mac Security Solution Should Be Easy to install on large numbers of Macs Easy to update and manage from a central workstation Non-intrusive and transparent, so users don’t have to change the way they work Efficient, powerful and reliable, able to intercept both Mac and Windows viruses and malware Provide security from network attacks originating both without and within a local network Frequently updated to ensure protection from the latest viruses and malware Provided by a Mac specialist with a proven track record for large deployments

While Windows computers now claim the majority of In addition to viruses, Trojan horses and worms, another viruses, the threat to Macs is growing. As Apple’s market threat to Macs is Word and Excel macro viruses. Since share increases, hackers are augmenting the amount of many employees work with these programs, and exchange malware they disseminate that targets Macs. files regularly, macro viruses commonly affect Macs. Many macro viruses can damage both Mac and Windows ver- Recent events have shown that hackers are working hard sions of Microsoft Office and their files. It is therefore to develop Mac viruses and malware, with consequences important to have dependable antivirus protection on Macs that can range from simply infecting and damaging ap- to protect those computers, but also to protect other users plications to deleting a user’s files. Recent malware opens who may receive Office documents from Mac users. backdoors on Macs (the iServices Trojan horse1 or the Hell RTS backdoor2) or hijacks a user’s DNS settings (the VirusBarrier X6 detects all types of malware, including vi- RSPlug Trojan3). ruses, Trojan horses, worms, scareware (software that tries to trick users into thinking their Mac is infected, in order to In addition, exploits affecting Apple’s Safari web browser, get them to pay for software), spyware (including com- its QuickTime media software, and other parts of Mac mercial software used as keyloggers or monitoring tools), OS X, are regularly published. Some of these exploits can hacking tools, dialers (software that initiates phone calls to lead to file damage, and others may provide access to premiumrate phone numbers), proof-of-concept malware remote users who can then copy or alter files on infected (software designed to show how to exploit a vulnerability, computers, or take control of them completely. which is not circulating “in the wild”), and more.

Intego VirusBarrier X6: Protecting Macs from Malware and Network Threats 2 Key Benefits of VirusBarrier X6 Scans can be scheduled at regular intervals Protects Macs from all known viruses and malware Scans can be run from the command line, or from shell scripts Intercepts files infected with Windows viruses, so Mac users don’t unknowingly pass them on E-mail alerts can be sent to administrators when infected files are found Protects against Word and Excel macro viruses Regular updates to threat filters ensure the Uses heuristic and behavioral analysis to identify program’s efficacy new malware Updates can be downloaded over the Internet, or from a Easy to install, and transparent to end users, with low local update directory on a network CPU usage Compatible with Intel- and Power PC-based Macs Real-time scanner runs in the background, checking files as they are opened, written or saved VirusBarrier also available in versions compatible with older versions of Mac OS X On-demand scanner runs when carrying out manual or scheduled scans

Protecting Macs From Malware in an Protection from Network Threats Enterprise Environment Intego VirusBarrier X6 is much more than just an an- Viruses and malware can infect Macs in many ways. The tivirus. Its powerful two-way firewall, together with its most common vectors are e-mail and web sites. Users Antivandal, provide thorough protection from all types receive e-mail messages with attachments, save them of intrusions and web threats. VirusBarrier X6 also offers and open them Or they visit malicious websites, and their powerful anti-phishing, anti-spyware and web threat pro- Macs become infected with malware via exploits that can tection, as well as many other features to ensure that the affect a web browser. Or they may install applications program protects Macs from all types of network threats. downloaded from the web, unaware that this software may in fact be a Trojan horse. It is important to protect VirusBarrier X6’s two-way firewall offers basic settings Macs with an endpoint anti-malware solution, even if a that cover common uses, but also provides an advanced company or institution has antivirus software on its file mode where IT administrators can set granular rules to servers and mail server. cover precise types of network traffic. Customizable con- figurations allow these settings to automatically change Even if the corporate network is protected, Macs can still according to a user’s network location settings, enabling get infected. Many users have portable storage devices, different types of protection when in the office or on the such as USB key drives, iPods or cellphones that they use road. Full, detailed logging also allows administrators to to carry files between their home and the office. They may audit any security issues that arise. bring CDs or DVDs to work with files they have modified at home; if their home computers are not protected, these Managing VirusBarrier X6 in the Enterprise files may be infected. And users of laptops are constantly connecting to unprotected networks in hotels, airports, VirusBarrier X6 is designed for ease-of-use in enterprise coffee shops and more when on the road. When working environments. First, network administrators can eas- on these networks, they may become prey to malicious ily install VirusBarrier X6 on multiple Macs using Apple users who sniff IP traffic in search of computers they can Remote Desktop4. This allows a centralized administrator attempt to plunder or control. to quickly protect all the Macs they are responsible for. Intego can provide preserialized versions of VirusBarrier It is therefore essential that a desktop antimalware pro- X6 (and all its other software) for licenses of 100 seats gram, such as VirusBarrier X6, be installed on all Macs in or more, streamlining the installation process even more. enterprise environments to protect against these many means of contagion. Since many IT managers and network Managing VirusBarrier X6 is also easy, using Intego administrators have little familiarity with Macs, a solution Remote Management Console. Once VirusBarrier X6 is is required that is easy to deploy and simple to manage. installed on client computers, the network administrator

Intego VirusBarrier X6: Protecting Macs from Malware and Network Threats 3 determines the desired security policy using Remote Man- VirusBarrier X6 is the ideal choice for businesses, schools agement Console, then applies this policy to all their Macs. and institutions of all sizes that need to protect Macintosh Different presets can be used for different types of comput- computers and ensure that Macs don’t serve as conduits for ers; for example, one policy can be set for desktop comput- Windows viruses as well. Easy to use, reliable, and offering ers and another for laptops. simple maintenance and management, VirusBarrier X6 is the antivirus program of choice for Macs. Recognized by custom- Remote Management Console allows administrators to man- ers and the Mac press, VirusBarrier X6 is the answer to the age Intego software on any network: on a LAN within a single problem of Mac malware and network security. building; over a WAN on a campus or spread across multiple sites; or over the Internet, for computers anywhere in the Intego is the only Mac security specialist. With more than 12 world. A single network administrator can manage all copies years of experience protecting only Macs, no other vendor of VirusBarrier X6 software, on all of a company’s Macs, from knows the Mac like Intego. Not only does Intego design soft- one workstation. ware for the Mac, but its Virus Monitoring Center is generally the first to discover new Mac malware. Updating the VirusBarrier X6 application and its threat filters is also simple and automatic. With Intego NetUpdate, For more information about VirusBarrier X6, and other provided with all Intego software, administrators can choose Intego Mac security software, visit the Intego web site, whether to have client computers download and install www.intego.com. updates directly, or whether they want to download a single copy of the update packages and have client computers ac- See also Intego’s white papers about other enterprise soft- cess them from a directory on a local server. ware solutions: ContentBarrier, the company’s solution for content filtering in schools and businesses, Remote Man- Intego has broad experience with deployments of all sizes. agement Console, a tool for managing Intego software on From individual schools, with a few dozen Macs, to 1,000 multiple Macs, and VirusBarrier Server, a server-side antivi- seats for the BBC in the United Kingdom, to 90,000 seats for rus solution. schools all across the province of Ontario, Canada, Intego has met the needs of companies, universities and school districts around the world. Intego can also customize its 1 www.intego.com/wp/iservices 2 www.intego.com/wp/hellrts software, if customers wish to change certain functions or 3 www.intego.com/wp/rsplug remove access to certain features. 4 www.apple.com/remotedesktop/

Intego VirusBarrier X6: The Ideal Solution for Mac Security

As we have seen above, the virus, malware and network threats to Macs demand appropriate solutions to protect both Macs and other computers in any company, institution or school. Faced with this increasing danger, one solution exists that can ensure total protection from all known Mac viruses, protection from Windows malware, and network protection. It also offers ease-of-use, transparency for end users, and trouble-free management and maintenance for network administrators and IT managers.

Intego Intego 10900 NE 8th Street, Suite 1000 41 rue Condorcet Bellevue, WA 98004 USA 75009 Paris France Tel: (512) 637.0700 Tel: +33 (1) 55 07 27 27 Fax: (512) 637.0701 Fax: +33 (1) 55 07 27 28 [email protected] [email protected] www.intego.com

Intego VirusBarrier X6: Protecting Macs from Malware and Network Threats 4