EOL of Advanced Threat Protection - Network and Symantec Risk Insight

Products

• Advanced Threat Protection Platform
• Endpoint Detection and Response

Issue/Introduction

As of April 29, 2020, Symantec assigns end-of-life (EOL) status to Symantec Advanced Threat Protection (ATP) - Network; Endpoint Detection & Response (EDR) Network Sensor; ATP 8840; ATP-8880-30; and Risk Insight. These products no longer will be actively marketed. 

Resolution

Specific information about the products now considered EOL:

• Software (ATP-Network):
  • For customers who purchased a bundle that includes ATP-Network, the bundle is discontinued on the same schedule as detailed below, but other products that were part of the bundle can be purchased separately.
  • Symantec’s standard End of Support Life (EOSL) is a max of 4 years after EOL. For this software, EOSL will be extended to 5 years to align with the maximum hardware support contract life. See details below.
  • Existing customers may obtain additional licenses or renew subscription licenses where the expiration is no later than the EOSL date shown in the table below.
  • Detailed information on the EOL Policy for Symantec Products is available here.
• Hardware (ATP-8880-30; ATP 8840):
  • 8840 has a 3-year maintenance agreement, and 8880-30 has a 5-year maintenance agreement, both of which will be honored as part of this EOL effort (For additional details on the maintenance agreements, see KB article 197484).
  • Further details about the expiration timeline are provided below.
• The product, Risk Insight, also is being assigned EOL status. Some highlights:
  • Use of Risk Insight can continue until the current subscription expires.
  • No updates to software functionality or new features will be added after the EOL date.
  • Support will end when the subscription ends.
  • Symantec is not replacing this SaaS, but some of the endpoint analytics data and dashboards in Risk Insight are available via Symantec’s SESC product. Over time, Risk Insight dashboards may be made available via SES Complete. 
  • Customer data will be securely destroyed after the subscription expiration date.

Next steps:

• Continue using ATP Network/EDR Network Sensor software and associated appliances, ATP-8840 and ATP 8880-30, until the license subscription and support expire.
• Review security use cases addressed by the software, and weigh the impact resulting from discontinuation of these software and associated appliances.
• Plan to migrate to alternative solutions before the End of Standard Support (EOSS) or End of Support Life / Extended Support (EOSL) dates – whichever you have purchased.
  • If your appliance ATP-8880-30 is being used as a management platform, plan to migrate to its replacement, EDR S550.
  • If your appliance ATP-8840 is being used as a management platform, plan to migrate to a virtual management platform or to EDR S550.
  • Consider Symantec Proxy SG solution as an alternative to ATP-Network/EDR Network Sensor, depending on your security use case. It is a powerful tool for inspecting network traffic and can be consumed as SaaS or can run on dedicated or virtual appliances.
  • Likewise, Symantec Security Analytics (SA) combined with Symantec Content Analysis (CA)/Symantec Malware Analysis (MA) may provide another option to replace ATP Network/EDR Network Sensor. The combined SA/CA/MA solution provides critical forensic investigation of network communications as well as sandboxing.
• Risk Insight customers do not need to do anything after their software subscription ends. Symantec has no replacement for this solution
  
  

Licensing and Support Service Timeline for End of Life Products

Products	End of Life (EOL*)	End of Access (EOA*)	End of Support Life (EOSL*)	End of Standard Support (EOSS*)
ATP Network**	4/29/2020	12/30/2022	12/30/2023	12/30/2023
ATP-8840	4/29/2020	4/29/2022	4/29/2023	4/29/2023
ATP-8880-30	4/29/2020	4/29/2024	4/29/2025	4/29/2025
Risk Insight	4/29/2020	4/29/2020	Subscription end date	Subscription end date

 

*For definitions of key terms and further information, see Symantec Policy for End of Life Products; Support for Software and Appliances

** Including bundles in which ATP-Network is included:  Symantec Endpoint Detection and Response with Network Sensor; Symantec Endpoint Detection and Response with Network Sensor and Email; Advanced Threat Protection Endpoint and Network; Advanced Threat Protection Endpoint, Network and Email; Advanced Threat Protection Network and Email

Additional Information

Potential Replacements and Related SKUS for EOL Products

Current Product	Replacement	SKU Description for Direct/ Related Capabilities
ATP Network/EDR Network Sensor (all versions)	No Direct Replacement Sandbox Functionality Available in Malware Analysis	·  Symantec Security Analytics (SA-S500-20-FA) ·  Symantec Content Analysis/Malware Analysis (SA-S500-10-CM)
ATP-8840	No Direct Replacement	·  Virtual Appliance running on VMware ·  Symantec EDR-S550
ATP-8880-30	EDR S550 Appliance	·  Symantec EDR-S550
Risk Insight	No Replacement Symantec Endpoint Security Complete offers endpoint analytics data and dashboards and will continue to evolve to ultimately become a viable alternative solution.	·  No Replacement ·  SESC-XX-XXX