YALE-MSS-5.2.1: Utilize a Next Generation Anti-Virus solution

Standard:
YALE-MSS-5.2: Utilize endpoint protection

YALE-MSS-5.2.1: Utilize a Next Generation Anti-Virus solution

Low Risk Endpoint Required Moderate Risk Endpoint Required High Risk Endpoint Required Low Risk Server Required Moderate Risk Server Required High Risk Server Required Low Risk Mobile Device Not Required Moderate Risk Mobile Device Not Required High Risk Mobile Device Not Required Low Risk Network Printer Not Required Moderate Risk Network Printer Not Required High Risk Network Printer Not Required

Details

Next Generation Anti-Virus is defined by having all of the following capabilities:

  1. Behavior analysis
  2. Exploit technique mitigation
  3. No signatures are used when run on the endpoint
  4. New malware can be detected by the same model.
  5. No internet connection is required

Yale currently employs the Crowdstrike Falcon software.  Crowdstrike Falcon is an Endpoint Detection Response (EDR) tool that provides the capabilities of a Next-Generation Antivirus (AV) solution.

For more information on how Yale employs Crowdstrike, visit our Endpoint Protection page.

For more information on AV solutions, please see our Protect Your Device from Malware page. 

This standard is only required for servers if the server is being used in an interactive fashion (i.e. web browsing, individual use). 

Has CrowdStrike Falcon (or another Next-Gen Anti-Virus solution) been installed on the servers running your system?