Sygate introduces next phase of endpoint security solution for Windows XP embedded devices.

Sygate Technologies has introduced version 4.0 of Sygate Security Agent for Windows XP Embedded, expanding its market leadership position by offering the most advanced security solution for Microsoft Windows XP Embedded devices. In addition to enhanced virus protection and anti-application hijacking, other key enhancements increase performance and manageability of the solution. These include a dramatically reduced, single-agent footprint, seamless integration with Microsoft's Target Designer and the availability of a run-time version of the agent. Sygate Security Agent 4.0 for Windows XP Embedded is the second in a series of releases that began in May. Sygate will continue to roll out new releases in an aggressive strategy to protect solutions built on Windows XP Embedded.

Sygate Security Agent 4.0 for Windows XP Embedded will be available to OEM vendors, financial institutions, major retailers and other end-user customers deploying Windows XP Embedded devices, by September 30, 2004. "Sygate's Security Agent 4.0 for Windows XP Embedded offers our joint customers enhanced security for their devices running Windows XP Embedded," said Jane Gilson, group product manager, mobile and embedded devices division at Microsoft Corp. "Sygate's latest release is a componentized version of Sygate's Security Agent running on other Windows platforms, and will be integrated with Windows XP Embedded solutions to protect a spectrum of devices such as Retail Point-of-Sale Terminals, ATMs, Thin Clients and other network-connected systems from malicious network behavior."

The release of Sygate Security Agent 4.0 for Windows XP Embedded expands Sygate's ability to ensure the integrity of Windows XP Embedded devices and prevent viruses from disabling mission critical and life critical applications and networks that run on Windows XP Embedded. Virus protection is increased with the addition of anti-application hijacking technology to the host-based Intrusion Prevention Engine and behavior-based heuristics found in versions of the Sygate Security Agent for the rest of the Microsoft Windows family. Anti-application hijacking technology detects and blocks process execution chains. It is able to detect when a malicious application tries to execute a trusted application, and then use the trust privileges of that application to access the network.

Sygate Security Agent 4.0 for Windows XP Embedded has been specially optimized for Windows XP Embedded environments where Cost of Goods Sold (COGS) and Total Cost of Ownership (TCO) play an even greater role in deployment decisions.

"We are pleased to announce the second release of Sygate Security Agent for Windows XP Embedded, which builds on our leadership position in the fast-growing embedded devices market," said John De Santis, CEO, Sygate. "Sygate is committed to maintaining its leadership position by providing the most advanced defense against viruses and worms for embedded systems at the lowest cost of ownership."

Sygate Security Agent for Windows XP Embedded extends Sygate's award-winning endpoint security technology to Windows XP Embedded devices, and includes the following functionality:

Sygate Security Agent for Windows XP Embedded (the "embedded Agent") incorporates an application-centric firewall that stealths host systems, provides stateful firewalling, applies rule-based security policy, and controls application usage.

The embedded Agent's intrusion prevention engine applies behavior patterns of known intrusions to all incoming and outgoing traffic as a second layer of defense. Sygate's unique application-based approach to intrusion prevention uses application layer information and deep packet inspection to more effectively identify and block known intrusions.

The embedded Agent dynamically adapts security policies based on the device, the hostility of the network environment, and the access method.

The embedded Agent can check the security status of the embedded device including: the status of executables (antivirus, host firewall, host IDS, sandbox), files (antivirus signatures, host firewall policies, host IPS signatures, MD5 checksum, file version), registry values, versions, patches, and operating system configurations.

Universal Enforcement ensures that embedded devices are 100 percent compliant with security policies before permitting network access. Enforcement can be accomplished in several different ways: Endpoint Enforcement, Gateway Enforcer, and enforcement in conjunction with third-party products such as VPNs or wireless access points.

Sygate automates the process of bringing embedded devices into compliance with security policy. When the devices are non-compliant with security policies, the embedded Agent can automatically initiate a remediation action, such as to download and install a software patch or update, execute command-line instructions, turn applications or OS features on or off, thereby returning the device to policy compliance.

Sygate Management Server enables administrators to define, provision, and enforce security policies across all connected systems and devices. In addition, the Management Server can monitor and report on the overall security posture and incidents.