Endpoint Management Software Resources

• SEP’s record of consistently providing the best protection (based on 3rd-party tests). o Gartner MQ for EPP 2018 – highest in execution and furthest to the right for vision o AV-Test – awarded “Best Protection” 3 years running • Our Advanced Machine Learning, powered by the global intelligence network (175 million endpoints strong), provides a training data set unmatched by any other vendor. • Intensive Protection enables IT security teams to tune advanced machine learning and behavior analysis to optimize detection and blocking of suspicious files. • Deception delivers proactive defense at scale to delay and expose attackers to help IT security teams improve their security posture by better understanding attacker intent. No other Endpoint Protection Platform vendor offers deception. • Hardening isolates suspicious applications and shields commonly used applications. It allows known good behavior and blocks bad behavior. • In SEP 14, our combination of core and next generation technology in a single agent protects across all points in the attack chain to stop both known and unknown threats; going far beyond the capabilities of competitors with standalone technologies that only address limited points in the attack chain.

• Intensive Protection - Provides customers the ability to dial up and down the intensity of the protection engines to gain enhanced visibility into suspicious activity and use this knowledge to optimize security for different environments including low network bandwidth ones. • Gray Activity Detection - Identifies and auto-classifies suspicious files by risk and prioritize remediation. • Low Bandwidth Mode - Optimizes delivery of content updates over low bandwidth network conditions by reducing update frequency from 3x daily to 1x weekly while maintaining efficacy. • Deception - SEP deception capabilities enables customers to easily deploy customizable baits across the SEP installation to expose hidden adversaries. The decoys which include fake credentials, files and other enticing assets are very specific and granular in nature. As a result, when they are tripped by the attacker, a high fidelity alert is sent by the SEP Manager to either the customer’s SOC or to Symantec Managed Security Services who can then respond by strengthening the environment.

Application Isolation is an add-on to SEP 14 and uses the same agent to provide comprehensive application defense: • Analyze and auto-classify risk levels of all applications on the endpoints. • Prevent vulnerability exploits including zero-day attacks and mitigate damage from attacks by isolating suspicious applications and malicious activity as well as shielding commonly used applications.