It creates an isolated virtual desktop, invisible to any possible attacker, where you can do your online shopping and banking securely. Also if you wish to customize your security, this is the recommended software.avast! Internet Security provides complete antivirus, anti-spyware, antispam, and firewall protection, complemented now by new avast! SafeZone technology. Better than our free antivirus, especially for web surfing, but without the firewall and antispam included in avast! Internet Security. avast! Pro Antivirus – better protection during web surfing. To protect you from identity theft as well as viruses. The new avast! Free Antivirus includes a spyware detection engine. Top user ratings among free antivirus software.

Automatic updates for greater user convenience and safety. Antivirus engine is complemented by anti-spyware, firewall and antispam modules to protect you against phishing schemes, identity theft and internet-distributed web viruses. Require password-protected screen savers, with a recommended 15-minute timer for inactivity.Avast! Antivirus software provides complete virus protection for your computer. Set an account lockout policy (recommended: after five unsuccessful attempts followed by a five-minute lockout). Manage group passwords with 1Password.Ĭonfigure workstations and laptops to prohibit anonymous access. Use separate administrative and personal accounts. Use a lock to prevent laptop theft.Īll Duke-owned machines must go through Duke Surplus before disposal. Keep laptops with you at all times or stored in a secured location. Locate workstations in an access-controlled environment. Implement PCI DSS, HIPAA, or export controls as applicable.

Files should be maintained on Duke-managed network shares provided by departmental IT groups.Įnroll Duke-owned systems in one of Duke's endpoint management services ( ). Install CrowdStrike Falcon endpoint detection software.ĭo not store institutional data on endpoints.

Departments should require key escrow for Duke-owned devices. Enable encryption on all tablets and smartphones. Also recommended for desktops in publicly accessible areas. Use a supported OS version and application software.Įnable whole-disk encryption (FileVault2 for Mac, BitLocker for Windows) for all laptops that have access to sensitive or restricted data. Use of one of Duke's endpoint management services (HCL BigFix, Jamf Pro, Microsoft ConfigMgr) is recommended review. Apply security patches within 14 days of publication.

Duke endpoint protection software