Endpoint Management Software Resources

If no good/bad determination can be made on a given file, the agent monitors it extremely closely and records (“journals”) its actions. If that file tries to modify the system in such a way that could not be reverted automatically, the administrator receives a notification and the change is blocked. This behavior monitoring engine also ensures that threats that bypass local offline protection cannot do lasting damage. If the file in question is eventually determined to be malicious, then the agent will alert the administrator and/or user, then automatically quarantine and address the threat. It will then revert any journaled file and system changes as part of the remediation process.

Webroot solutions incorporate an Identity Shield to protect user information and transactional data that could be exposed during online transactions. By locking down the operating system and browser at the kernel level, the protection helps to neutralize phishing, DNS poisoning, keystroke logging, screen grabbing, cookie scraping, clipboard grabbing, man-in-the-middle and browser, and session hijacking by malicious software. In addition to a large number of browser and IP defenses, the Identity Shield also prevents programs from accessing users’ protected credentials, such as usernames and passwords and website requests to remember credentials. Additionally, it automatically blocks untrusted programs from accessing protected data.

Very little, compared to the bandwidth consumed by traditional signature or definition updates. The endpoint agent only needs to communicate with the Webroot Threat Intelligence Platform when it finds a changed or new file, or to poll the management console for any policy changes. All exchanges are compressed and encrypted, and a typical endpoint will consume under 1 MB of network traffic per working day. During installation, a Webroot agent requires approximately 500 KB of network traffic bandwidth.