• Provides comprehensive understanding of security posture for inventory and management of both physical and virtual environments via in-depth assessment of vulnerabilities, patch status, security configurations, installed software, and hardware inventory.
• Discovers both managed and unmanaged devices and provides swift agent deployment to any unmanaged assets.

• Collects device, security and configuration information to provide consolidated visibility and lower TCO.
• Ensures visibility and control of both physical and virtual environments with effective management at a significantly reduced TCO.

• Vulnerability audits and remediations with wide support across major OS platforms (Windows, Linux, MacOS, Sun Solaris, HP, etc.), POSIX and infrastructure devices.
• Vulnerability audits include security configurations, OS and application vulnerabilities, null passwords, patch-level related vulnerabilities, known hacking tools, malware, common worms, and P2P software checks.

• Broad vulnerability assessment and remediation database optimizes IT operations and provides better security posture and lower TCO.
• Ensures that patches, configurations, remediations and other custom and repetitive tasks are continuously and automatically enforced.

• Ensures complete coverage for the largest worldwide networks with high-availability topologies and n-tier distribution architecture. Packages are cached locally, minimizing network traffic and optimizing bandwidth utilization.

• Leverages your current network infrastructure in order to lower TCO from day one of implementation through the life of the subscription.
• Adapts to various organizational setups, so you can always integrate the scanner into new business structures.
• Ensures inventory and management of both physical and virtual environments from one consolidated console.

• Automatically assesses endpoints as they attempt to gain access to the network and remediate to a compliant state before access is allowed.

• Assures that only compliant endpoints can gain access to the network and automatically remediates any non-compliant machines into an authorized state so network access can be granted.

• Resilient, lower overhead agent with scalable architecture to secure on- and offline systems. 
• Provides easy agent install and uninstall capabilities.

• Protects laptops, servers, and desktops that are often disconnected from the network and reduces network bandwidth usage.
• Resilient agent offers self-monitoring and recovery capabilities for increased security.

• Automated deployment of the Lumension remediation agent to unmanaged (rogue) computers.

• Ensure maximum coverage and protection, with minimal time and effort required by IT operations.

• Administrators can define specific days and intervals of time during which the agent can communicate with the server and perform operations, in granular half hour increments

• Minimize business disruptions and thus improve the productivity of the organization.

• Enables creation of a custom dash board for the most critical information in order to highlight the success of your organization's patch management process from a list of 8 key indicators.

• Provide an informative snap shot of current patch status in order to report to executive management.

• Automatic and secure identification and notification of the latest patch vulnerabilities across multiple platforms and applications.

• Eliminate the cost of manually monitoring, acquiring and staging patches for multiple platforms and applications throughout the enterprise.

• Stay patched and updated automatically
• Ensure no unauthorized packages enter your network.

Note: Lumension Endpoint Management and Security Suite must be installed on an English operating system using any English locale (en-US, en-UK, en-CA, and so on) in its default configuration.

Note: If not present, Microsoft .NET Framework 3.5 is installed with Lumension Endpoint Management and Security Suite.

Supported database servers can be installed in the following locations relative to the Lumension Endpoint Management and Security Suite server:

• Locally in named instances installed by Lumension Endpoint Management and Security Suite.
• Locally in named or default instances that are preexisting.
• Remotely in named or default instances that are preexisting.

Note: If an instance of SQL Server is not present on your target server, SQL Server 2008, Express Edition with SP1 is installed with Lumension Endpoint Management and Security Suite (if you are not using a remote instance of SQL Server)