Protecting Our Customers

Products

• Symantec

Issue/Introduction

You'd like more information about specific steps taken to prioritize customer security.

Resolution

Prioritizing Customer Security

• Extensive efficacy, false positive, performance, and compatibility tests are run against Symantec endpoint products on all supported versions of the Windows operating system.
• Code updates delivered via the Internet operate within a sandbox environment where it is impossible for the code to create a system crash and guard rails prevent possible conflicts.
• Short-circuit mechanisms are in place that work like circuit breakers in your home: when an issue is detected, an automatic rollback to a working state is initiated.
• Updates delivered via the Internet are pushed incrementally over time, first to Broadcom employees, and then in moderated stages to our customers. Broadcom also carefully plans update releases to avoid weekends, holidays, and other critical time periods.
• Endpoint security products were rearchitected in recent years to eliminate code from the operating system kernel. The most critical AV scanning code now operates within user mode and cannot cause a system-level crash. 

In addition to these safeguards which Broadcom has in place to protect all customers, Broadcom products include features that allow customers to manage content updates independently and to test updates prior to release within their environment.

Additional Information

• Testing engine updates before they release via the Early Adopter Server
• Configuring clients to download content from an internal LiveUpdate Server
• Using a distribution schedule with LiveUpdate Administrator to deliver content
• Updating content using Intelligent Updater on Symantec Endpoint Protection
• Locking engine updates or reverting to an older version of a content update
• Controlling on-premise product updates with a Client Upgrade Policy
• Controlling cloud-managed product updates with the System Policy