Symantec Industrial Control System Protection Neural

Plug and play USB scanning station to protect against cyber warfare.

Secure cyber-physical systems with the world's most advanced Industrial Internet of Things (IIOT) solutions.

Request Consultation Read the Brief

Scan. Detect. Enforce.

Over a thousand engineers work to protect your critical environments.

Multidimensional security for industrial control systems and critical infrastructures.

  • Leverage expertise from over 175 million endpoints located in 157 countries and territories around the world to protect your critical IIOT systems.
  • Maintain an air-gapped state and enforce USB scanning on IIot devices.
  • Effectively block malware that has never been seen before.
  • Interoperable with various automations vendors', human machine interfaces (HMIs) and workstations.

Anti-malware Redefined.

Built by the same researchers that uncovered Stuxnet and Dragonfly.

Prevent accidental infections and targeted attacks with an all-in-one solution.

  • Maximize protection with Symantec’s advanced machine learning and neural network technologies.
  • Keep your operations running with no agent or internet connection requirements.
  • Minimize false positives and block malware through a plug and play solution.

Download the Data Sheet

Advanced Machine Learning in Action.

Through a fully new aluminum chassis unibody scanning station appliance, combined with real time visualization of Symantec's Machine Learning engine, Industrial Control System Protection (ICSP) Neural detects large classes of malware from USB devices traversing the air-gap.

 

Industry Recognition

Symantec wins Industrial IOT best practices award

LEARN MORE >

ICSP uses the world's most advanced threat detection engine which has won AV-Test's best protection.

LEARN MORE >

Discover Our Community

View the latest product discussions in our forums.

Learn More

Need help?

Technical support and more.

Learn More

Legal Information

Learn more about legal terms, policies and notices.

License and Service Terms & Repository

Enforcement Driver Requirements and Guide

To validate that a USB was indeed scanned, a small file is placed onto the USB. This is a cryptographically signed watermark designed to assist the enforcement driver in deciding whether or not to mount a USB.

Driver Specification:

The ICSP driver can be installed on a variety of operating systems to prevent unscanned USBs from being used. It is an MSI installer package for 32/64-bit OS platforms in the size range of 2Mb, which should be installed on all Windows-based critical systems. It can also be installed on stand-alone systems, and deployed in enterprises through standard deployment (group policy) processes as well. The Following registry entries are added:

a) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ndevsec
b) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\nspsvc
c) HKEY_LOCAL_MACHINE\Software\Symantec\ICS Protection (*)
d) HKEY_LOCAL_MACHINE\Software\Symantec\ICS Protection\nsptray (*)

Supported Operating Systems

  • Windows XP SP2 (x86 only)
  • Windows Vista
  • Windows 7
  • Windows 8 and 8.1
  • Windows Server 2003 SP1 (x86 only)
  • Windows 10
  • Windows Server 2008
  • Windows Server 2008R2
  • Windows Server 2012R2
  • Windows Server 2016