Trend Micro’s Deep Security 8.0 Raises the Bar for Virtual Server Security

Trend Micro™ Deep Security Continues to Accelerate the Industry-wide Virtualization and Cloud Journey with Landmark Release

The journey to the cloud for enterprises and service providers -- aided by protection that works effectively, adaptively and efficiently in all its stages -- is secured by new versions of Trend Micro™ Deep Security in concert with Trend Micro™ SecureC

LAS VEGAS, Aug. 30, 2011 -- Today at VMworld® 2011, Trend Micro Incorporated, (TYO: 4704; TSE: 4704), the number one market leader in server and virtualization security, the first vendor to introduce agentless anti-malware for virtual environments, and the first to include intrusion prevention and web application protection as part of an all agentless solution, announced the next release of Deep Security that further cements its leadership as a leading server security platform in the industry – across physical, virtual and cloud computing environments. With an all-new agentless integrity monitoring capability purpose-built for VMware vSphere® 5 virtual environments, including hypervisor integrity checks and other cloud-sourced innovations, Deep Security 8 will lower the barrier to adoption of file integrity monitoring across the datacenter and help organizations achieve higher levels of data protection and compliance without added cost and complexity.

Deep Security 8

Trend Micro Deep Security has already established itself as a market leading server and virtualization security offering. A server security platform comprising anti-malware, firewall, IDS/IPS, web application protection, integrity monitoring and log inspection in one integrated solution, Trend Micro now extends its leadership and innovation even further with Deep Security 8 with the following new feature benefits: For physical servers:
• Automatic cloud-based event white-listing and configurable trusted events lower the operational complexity of integrity monitoring, further opening the technology to a much wider set of customers.
• Agent-based anti-malware allows organizations to extend the same Deep Security protections to physical servers for Windows and Linux operating systems.

For virtual servers:
• Agentless File Integrity Monitoring, through the same Deep Security Virtual Appliance that already provides agentless anti-malware and agentless intrusion prevention in a virtual environment, removes integrity scan storms and significantly lowers the operational complexity.
• Flexible deployment architecture allows select VMs to be set up with optional agents that coordinate with the virtual appliance for added defense in depth.
• Hypervisor integrity monitoring utilizing Intel TPM/TXT technology is one of the first market solutions available to monitor whether the hypervisor is compromised
• Support for VMware vSphere 5 and VMware vShield™ Manager 5, with VMware vShield Endpoint Security API 2, also permits backward compatibility with VMware vSphere 4.1 with VMware vShield 1.0.

For virtual desktops:

• Agent-based anti-malware for VDI local mode allows continuously optimized protection of virtual desktops as they move outside, and back, into the data center.
• Leverages web reputation capabilities to protect users from accessing compromised websites.
• For virtual desktop environments protected by Deep Security agentless anti-malware, Deep Security now provides an optional End-user Notifier that can provide malware notifications in lieu of a full-blown anti-malware agent.

For cloud servers:
• See below for Deep Security 8 integration with SecureCloud 2.

U.S. Deep Security 8 Pricing and Availability

Organizations need only license those security components they currently need on specific servers—adding a module is a simple license key switch. Deep Security is priced in the U.S. starting at $1000 per server, with volume discounts available. Deep Security 8 is expected to ship by the end of the year. Channel partners can gain a differentiated virtualization portfolio along with the prospect of increased deal sizes.

Total Cloud Protection with Deep Security 8 and Trend Micro™ SecureCloud 2

Trend Micro was the premier vendor to deliver security architected for private and public clouds, and pioneered the market with security architected for VMware virtualization and cloud infrastructure platforms. While Deep Security is a server security platform that provides a secure container for applications and servers in the cloud, SecureCloud augments Deep Security by encrypting and protecting the data that the servers and applications use. SecureCloud is a cloud data protection and policy-based encryption key management solution that makes it easy to encrypt and protect data in physical, virtualized and cloud computing environments. It simply enables faster cloud adoption, greater cost reduction, and better compliance. With this upcoming release, Deep Security customers and channel partners can choose to reap the benefits of integrated bundling with SecureCloud's encryption and policy-based key management features.

Deep Security and SecureCloud work together to create a context-aware framework that responds to the constantly evolving state of the dynamic datacenter. For instance, SecureCloud communicates with Deep Security, using the security status information from Deep Security to ensure that any server requesting access to encrypted data has up-to-date protection before encryption keys are released. If integrity checks by Deep Security determine that a VM with out-of-date or inadequate protection is trying to startup, or that a VM has been compromised by an attack, SecureCloud adaptively responds and the VM's data access is blocked via denial of encryption key and an action is flagged to the administrator for remedial action.

New and Enhanced

SecureCloud 2 also features significant new enhancements, including a new encryption agent complete with FIPS 140-2 certification. Government agencies, and companies held to the highest security standards, require FIPS (Federal Information Processing Standards) certification of encryption products. In addition, new Deep Security Manager (DSM) linking points allow SecureCloud to query the DSM and gather information about the servers it is protecting. SecureCloud administrators can build policies around this new information and enhance the rules that govern which servers are allowed access to encryption keys. This increases the overall security posture and provides additional validation criteria queried from the Deep Security operating environment.

U.S. SecureCloud 2 Pricing and Availability

SecureCloud is delivered as a convenient hosted SaaS solution under a free two-month trail or as an on-premise software application. Service provider delivery options that provide unified billing and rapid deployment are also available. Perpetual-based pricing aligns with traditional security pricing, but there is also subscription-based pricing. The current SecureCloud product version is available for purchase now through Trend Micro sales and channel partners, and through cloud brokers and service providers. SecureCloud 2 is projected to be available by the end of the year. It can be purchased separately or as part of a Total Cloud Protection pack with Deep Security 8.

Supporting quotes:

Todd Redfoot, Chief Information Security Officer, GoDaddy.com "Since Trend Micro Deep Security has a small footprint, it allows us to keep the same customer density on our servers. The Deep Security console is very easy to use, and anything you can do from the console can be carried out automatically to keep the cost of administration low." Andrew Hay, senior security analyst with The 451 Group's Enterprise Security Program.

"Organizations are leery of moving systems into cloud environments due to the perception of inadequate security controls. Products like Trend Micro's Deep Security 8.0 may help alleviate some of those concerns by providing a suite of security controls that are surreptitiously woven into the very fabric of customers cloud and virtualization infrastructure."

Dave Zylyk, (former) senior systems analyst, Information services/corporate services, City of Kelowna, Canada "When we researched security within a VMware environment, everything pointed us to Trend Micro. Trend Micro has become a security leader in virtualization and it is also important to us that they have been working very closely with VMware."

Paula Musich, Senior Analyst, Enterprise Networking and Security, Current Analysis "With Deep Security, Trend Micro led the charge in developing agent-less security tailored specifically for virtual servers – especially VMware virtual servers. With the addition of an agent for physical servers, Trend Micro can now provide common policy management across both environments, helping to reduce complexity for server administrators as they transition more applications to the virtual world. At the same time, the ability to monitor for potential hypervisor breaches gives customers greater assurance that they can virtualize more mission critical applications without exposing them to greater risks."

Rob Ayoub, CISSP - global program director for Frost & Sullivan's Information Security Practice "Trend Micro has done a great job with Deep Security in building out a security platform focused on servers – including physical, virtual and cloud-bases ones. They have been on the forefront of innovation in virtualization and cloud security, and Deep Security 8.0 will now do for file integrity monitoring what it has already done for anti-malware and IDS/IPS in terms of simplifying security operations and reducing barriers to adoption."

John Maddison, Executive GM of data center business unit

"Customers will not and sometimes cannot change out their entire server infrastructure overnight. They do expect their security systems to be optimized for Physical (Operating Systems), Virtual (Hypervisor Integration) and Cloud (Management Integration) environments. Further with today's threat environment focused on data stealing they expect a dynamic threat defense system combined with a policy driven data protection deployment. Trend Micro Deep security is the only Server Security Platform to provide all this via a single Policy Management console." Parag Patel, VMware Vice President of Global Strategic Alliances

"Trend Micro and VMware have continued to collaborate to extend our mutual efforts of delivering customers groundbreaking security offerings. Working together on the latest enhancements in VMware vSphere® and VMware vShield™, Trend Micro is able to provide broad protection to virtualized environments, increase operational efficiency, and ensure regulatory compliance, giving customers confidence to move forward in their journey to cloud computing."

About Trend Micro

Trend Micro Incorporated (TYO: 4704; TSE: 4704), a global cloud security leader, creates a world safe for exchanging digital information with its Internet content security and threat management solutions for businesses and consumers. A pioneer in server security with over 20 years' experience, we deliver top-ranked client, server and cloud-based security that fits our customers' and partners' needs, stops new threats faster, and protects data in physical, virtualized and cloud environments. Powered by the industry-leading Trend Micro™ Smart Protection Network™ cloud computing security infrastructure, our products and services stop threats where they emerge – from the Internet. They are supported by 1,000+ threat intelligence experts around the globe.

Additional information about Trend Micro Incorporated and the products and services are available at Trend Micro.com This Trend Micro news release and other announcements are available at http://trendmicro.mediaroom.com/ and as part of an RSS feed at www.trendmicro.com/rss Or follow our news on Twitter at @TrendMicro.

Trend Micro’s Deep Security 8.0 Raises the Bar for Virtual Server Security

Event Summary

Quick Take

Analytical Summary

Current Perspective

Competitive Strengths and Weaknesses

Response & Recommendations

Buyer Actions

Analytical Perspective