Viddler

We review endpoint security product StormShield from SkyRecon. There are two parts to the product: The server components (including the relational database and server) and the various agents that run on each endpoint. Among other...

More

We review endpoint security product StormShield from SkyRecon. There are two parts to the product: The server components (including the relational database and server) and the various agents that run on each endpoint. Among other things, the agent contains a host-based firewall and policy engine that can be customized to control applications and particular endpoint device features such as USB peripherals and registry entries. We tested version 4.801 on a simple network in July 2008.
Unlike anti-virus software, it doesn't rely on signatures but on behavioral patterns of malware and exploits, to block them. It replaces the weak Windows personal firewall with a powerful host IPS engine and applications control features.
SkyRecon Systems Inc., 1440 Broadway, 23rd floor, New York, NY 10018
Tel: (877) 239 3057 | Fax: (646) 512 5167 | www.skyrecon.com
Product category: Endpoint security software
Pricing: $39-$132 per seat, depending on quantity and features purchased.
Information: http://skyrecon.com/stormshield
Summary: Application control and host IPS make for some powerful endpoint security features.
Pros:
Variety of ways to lockdown particular endpoint components
Runs in Windows kernel so can be used to block keyloggers without the need for signatures
Cons:
Windows XP and 2000/SP4 only, somewhat cumbersome policy creation process
Somewhat verbose logging can be difficult to parse

Less