Broadcom (Symantec)

Official Websitewww.broadcom.com/products/cyber-security

Primary DomainEnterprise Endpoint & Information Security

HeadquartersPalo Alto, California, USA

Founded1982

DeploymentSymantec Endpoint Security (SES Complete), Cloud SWG, On-Premises SEPM

Vendor & Platform Overview

Broadcom's Symantec Enterprise Security division represents one of the longest-standing brands in enterprise defense. Protecting the world's largest financial institutions and government organizations, Symantec provides comprehensive endpoint protection, data loss prevention (DLP), network security, and identity solutions powered by its Global Intelligence Network (GIN).

Architecture & Detection Telemetry

Symantec Endpoint Security (SES Complete) operates via a single consolidated agent incorporating traditional signature engines, SONAR behavioral analysis, Attack Surface Reduction, and Endpoint Detection and Response (EDR). Symantec integrates targeted memory exploitation protection, stopping buffer overflows and heap sprays before malicious shellcode can execute.

Mitigated Threat Types & Incident Playbooks

Targeted malware classifications and primary attack vectors defended by Broadcom (Symantec)'s security stack:

Memory Injection & Heap Exploits →Banking Trojans & Financial Fraud →Drive-by Web Exploits & Malvertising →Multi-Stage Ransomware Intrusions →

SOC Incident Response & Containment Workflow

Recommended operational sequence for security operations teams triaging alerts generated by Broadcom (Symantec):

Upon an alert notification in the Symantec Integrated Cyber Defense console, analysts trigger an automated full-memory dump and isolate the affected workstation from the corporate LAN. Responders review SONAR behavioral lineages to identify hijacked parent processes, invalidate compromised user certificates, and black-list offending hashes across all enterprise proxies instantly.

Enterprise Security Products

Symantec Endpoint Security
Symantec Web Protection
Symantec DLP
Carbon Black EDR

Other Products & Solutions

Non-catalog offerings, enterprise IT platforms, and consumer productivity solutions provided by Broadcom (Symantec):

VMware vSphere & VMware Cloud Foundation (Enterprise server virtualization and private cloud)
VMware Workstation Pro & VMware Fusion (Desktop virtualization hypervisors for Windows and macOS)
Brocade Storage Area Networking (High-density Fibre Channel SAN director switches)
CA Technologies Mainframe Software (Mission-critical core banking and mainframe automation)
Rally Software (Enterprise agile portfolio planning and tracking)
Broadcom Semiconductor & Networking ASIC Hardware (Ethernet PHYs, PCIe switches, and fiber optics)

Frequently Asked Questions

What is Symantec SONAR technology?

SONAR (Symantec Online Network for Advanced Response) is a real-time behavioral heuristic engine that inspects running processes for suspicious actions (like unauthorized registry writing or code injection) to block zero-day threats without signatures.

How does Symantec Data Loss Prevention (DLP) prevent data exfiltration?

Symantec DLP monitors endpoint file copy actions, clipboard operations, cloud uploads, and print jobs, utilizing exact data matching (EDM) and optical character recognition (OCR) to block the exfiltration of sensitive records.

Is Symantec still supported for on-premise environments?

Yes. Symantec Endpoint Protection Manager (SEPM) continues to support air-gapped and highly regulated on-premise environments while offering hybrid cloud management through SES Complete.