WIXLIB

Symantec CompleteWebsite SecurityA comprehensive solution for all your website security needs,with features ranging from Extended Validation SSL/TLScertificates and malware scanning, to DDoS mitigation andperformance optimization.

Shifting threats, shifting defensesA brave new worlddanger. As a function, we’re no longer facing the singleThere’s only one constant in website security: that thethreat of lone hackers working out of their bedrooms.threats we face will continue to grow in both scale andRather, this danger now comes from criminal networks,sophistication. The reality of this situation can be seen ingovernment-sponsored threats, and hacktivists. Ensuringthe on-going battle between those seeking illegal accessthe right resources are deployed at the right place and theto online information, and those attempting to protect it.right time is no longer just important, it’s essential.It’s been a sobering experience, and one that’s forced usto wave goodbye to the notion that a secure boundary canGenerating a responsebe built to keep out all unwanted intruders. The reality isBuilding and maintaining a secure corporate infrastructure,that criminals have tunneled under, made holes where noalongside customer trust, is a continuous exercise thatone was looking, or simply donned a disguise and walkedcan be undone in seconds, and this rapidly changingthrough the front door.threat landscape has meant that constant innovation isrequired to evolve website security solutions at the sameUnderstanding the threatpace. Although we know that sitting still is simply notUntil now, the role of website security has beenan option, it’s also impractical to expect a response topredominantly reactive – rapid firefighting whenever aeach new emerging threat given the twin constraints ofnew threat arises to build up defenses and mitigate thetime and money. Instead, you should be looking to yourpotential impact. A solution is needed that proactivelysecurity partner for support, and for education in spottingand effectively protects your website from increasingvulnerabilities and mitigating any risks.Enter Symantec Complete Website Security.The threat landscape in numbers(from Symantec’s Website Security Threat Report 2015)2 I Symantec Corporation29,927317,256,956New unique malicious webNew malware variants emergeddomains in 2014in 2014496,657183%Web attacks blockedIncrease in DNS amplification attackseach daybetween January and August 2014

A focus on securityThe challenge of resourcing your securityExtended Validation SSL/TLS CertificatesAs we all know, website security is ultimately aboutInstilling confidence and trust in your website is vital;confidence – and building a sense of trust with eachvisitors need to feel assured that your business’s site isvisitor. Generating this trust requires a realisticsafe to transact on. Research from Econsultancy showedunderstanding of the dangers faced by your organizationthat 50% of customers who abandon an online purchaseand an accurate assessment of the capabilities needed todo so because of a lack of trust. A recent YouGov onlinecounter them. It could be argued that the biggest threat issurvey in the UK, US, France and Germany gave clear andactually the limited resources typically dedicated toencouraging results: the majority of people know what towebsite security – and a reliance on manual processeslook for when deciding whether or not to put their trustthat, combined with time pressures, make even thein a website. Not displaying clear visual signs of a securesimplest security task difficult to achieve.website can damage your end consumers’ trust in yourbusiness, and might lose you valuable conversions.Finding your right level of SSL/TLS certificateLevel 1: Domain validation (DV)The lowest level of authentication – for situations where trust and credibility are less importantLevel 2: Organization Validation (OV)A more secure step – for public-facing websites dealing with less sensitive transactionsLevel 3: Extended Validation (EV)The gold standard in SSL/TLS certificates – for websites handling credit card and other sensitive edin nd/or a green padlock or green treatment within the address bar3 I Symantec Corporation

A denial of serviceIt’s also an established fact that many organizations fallvictim to hacks and malware infections because theydon’t carry out basic website health checks. In 2014 forSymantec CompleteWebsite Securityexample, 75% of scanned websites had vulnerabilities– a fifth of which were critical. These infections can becrippling – Google blacklists 10,000 websites every singleSecurity features spotlight:day, and it takes an average of 6 weeks before they’rerestored. Then there are the high profile breaches and, inVulnerability Assessmentparticular, Distributed Denial of Service (DDoS) attacksthat range from simple HTTP404 error pages to completeblackout, and are constantly increasing in intensity.Malware ScanningSymantec Complete Website Security now includesImperva Incapsula DDoS Protection - capable of mitigatingall types of DDoS attacks targeting any type of onlinekeep your website at full health.Extended Validation SSL/TLSCertificatesMalicious bots at the application layerImperva Incapsula DDoS Protectionservice - alongside our established armory of tools to helpIn addition to the above, there are application level DDoSattacks, which target vulnerabilities in your OS or webapplications, and are immune to generic filtering. TheseImperva Incapsula Web ApplicationFirewallare attacks performed by malicious bots designed toimpersonate legitimate human visitors and hijackbrowsers in a bid to take down an organization’s servers.In 2014 we identified a 240% increase in Bot traffic,Secure App Servicenumbers that confirm what many security experts alreadyknow: hacker tools are now being designed first andforemost for stealth. Our response has been to furtherenhance the protection our solution offers, with theaddition of Imperva Incapsula Website ApplicationAt Symantec we thrive on providing solutions to theFirewall (WAF) – redefining and extending the WAFchallenges you face, to support you today and forbeyond traditional concepts.the future.4 I Symantec Corporation

A focus on managementThe quest for greater simplicityThere’s a growing appreciation that managing websitesecurity has become far harder than it should be. This isparticularly the case when it comes to licensing SSL/TLSSymantec CompleteWebsite Securitycertificates, and many PKI administrators and websitesecurity managers still face the daunting task of searchingout hidden certificates to avoid unexpected expiration dates.Management features spotlight:The problem of tracking certificatesAt Symantec we understand that tracking SSL/TLSDiscoverycertificates isn’t easy, especially if multiple people in yourorganization have the ability to implement them in isolation.Expired certificates can hurt you even more – ourAutomationresearch found that over 75% of consumers would abandontheir transaction if they encountered an expired SSL/TLScertificate. On top of that, 45% of surveyed businessesexperienced security breaches that were due to SSL/TLSPrivate CAcertificate issues. That’s why you need tools that simplifyand centralise this process, which is exactly what’s onoffer with Symantec Complete Website Security.SSL/TLS certificate management made easyOf course there’s more to life – or at least website security –than just focusing on the buying and renewing ofcertificates. There is also the need to search out roguecertificates, monitor expiration dates, and maintainstandards – all of which can prove difficult in large,geographically dispersed organizations. In a recentSymantec survey, four out of five companies with 2,000 certificates found rogue certificates in their systems.However, with Symantec’s discovery and automation toolsyou can centralize SSL/TLS management – and discoverall certificates across the enterprise regardless of whichcertificate authority issued them.5 I Symantec Corporation24 Hour Support

A focus on performanceWebsite managementBuilding on trustLet’s face it, the key metric when measuring websiteWe’ve already demonstrated how important it is forperformance is traffic – which also involves considerationsconsumers to feel confident when providing data orsuch as conversion levels, alongside more technicalmaking an online purchase, and trust marks are aaspects including latency, availability, and bandwidth.well-recognized indicator of website security. Of these,Symantec Complete Website Security solution canthe Norton Secured Seal is one of the most trusted on thesupport your website in each of these areas.internet, and is viewed over a billion times a day in 170countries. It makes a big difference: 90% of respondentsOptimised content deliveryin an international consumer study said they are moreAccording to Forrester, 40% of shoppers will wait nolikely to continue online transactions if they see thelonger than three seconds for a web page to load beforeNorton Secured Seal.2 Displaying the seal beside yourabandoning a retail site. Today there are number oflink in search engine results is also proven to significantlysophisticated tools available to help your website loadincrease traffic to your website.1and run faster. For example, a Content Delivery Network(CDN) is a global system of strategically positionedservers that brings your web content closer to yourconsumers. Symantec Complete Website Security nowincludes Imperva Incapsula CDN that offers caching,content and network optimization tools, and research hasSymantec CompleteWebsite Securityshown that websites using it are typically 50% faster andconsume up to 70% less bandwidth. In addition, CDNsupports load balancing; ensuring workloads are efficientlyPerformance features spotlight:distributed to help maintain high website availability.Strength and speed through encryptionAs we know, SSL/TLS certificates enable encryption allImperva Incapsula CDN &Optimizationthe data that passes between a user’s browser whenthey consult a protected website and the company serverhosting this website. So, obviously, stronger encryption isElliptic Curve Cryptographymore desirable. Elliptic Curve Cryptography (ECC) 256-bitis a more advanced encryption algorithm that is 64,000times more secure than RSA 2048-bit. What makes itNorton Secured Sealeven better is that it requires much less server capacity toencrypt information, reducing costs and improving yourwebsite’s performance. Just for example, Directorz Co.Seal in SearchLtd., a Japanese firm, saw a 46% lower CPU burden and a7% improvement in response time when they implementedECC. Today, you can also combine the ubiquitous RSA rootwith the stronger security and server performance offeredby ECC in our hybrid SSL/TLS certificates.1Forrester Consulting Online Consumer Study, September 20096 I Symantec Corporation2International Online Consumer Study: US, Germany, UK, July 2013