IT

Security

We switched to Macs for better reliability, security and communication. We have gone from multiple virus and spyware issues per week to none. That's amazing. Bill Carroll, CTO, Quist Valuation

Simply secure.

The Mac offers your organization a simple way to protect critical data and systems company-wide, with out-of-the-box security that’s easy to maintain and customize. Built on a proven, fully-compliant UNIX foundation, Mac OS X Leopard and Mac OS X Leopard Server provide layers of protection that are built-in, not bolted-on. This means your organization gets in-depth security at all levels of operation—from hardware to operating system to applications.

The Mac is easy to keep secure with under-the-hood technologies that require minimal IT management—providing crucial security while easing the burden of managing systems across the enterprise. With built-in features such as automatic software updates, application-based firewall, strong encryption tools, and integrated Internet security, systems are secure right out of the box. For easy customization, the Mac delivers robust tools that help IT administrators control system and server safety in just a matter of clicks.

The best defense.

Mac OS X arms your organization with a multi-layered system of defenses against viruses and other malware intrusions. And because it’s shipped with advanced technologies to mind the fortress against malicious intrusions automatically, you’re insured that user systems and corporate assets are protected with minimal IT effort. The more end users can do on their own securely, the less strain on IT staff to keep your organization protected and productive. For example, the application-based firewall comes securely configured and offers easy customization for creating white- and black-lists, without requiring complex networking port or protocol configuration. Similarly, by sandboxing important network applications like Bonjour, Quick Look, and Spotlight, Mac OS X automatically restricts which actions a program can complete—preventing hackers from harming client programs without needing hands-on management from the IT department. Quarantine in Mac OS X tags downloaded applications and asks for permission before opening them, and digital signatures verify the source of applications to prevent them from being tampered with by hackers. With Library Randomization, Mac OS X randomly assigns the location of data in memory to prevent malicious commands from finding their targets. And even if malware manages to sneak onto a system, Mac OS X prevents it from executing with the Execute Disable feature.

Mac OS X also makes safeguarding critical data painless. Secure Empty Trash ensures deleted confidential files are permanently removed from the system, and built-in secure encryption tools like FileVault and Secure Virtual Memory keep files and personal data protected automatically. With do-it-yourself encryption capabilities using the Disk Utility tool, end users can easily password-protect any files they choose—on their own—using Advanced Encryption Standards, the cryptology standard that the federal government recommends to secure information. For strong authentication, Mac OS X uses MIT’s Kerberos KDC and supports digital certificates, smart cards, as well as USB-based, PC-based, and USB dongle-based smart card readers. Mac OS X also takes the risk, and hassle, out of sharing files and services between users by making it easy to see which users can access which files and services via the Sharing pane.

Online. On guard.

Mac OS X makes it easy to ensure systems remain safe when users are working online, whether they’re sending confidential email or sharing files with coworkers. The universal VPN (Virtual Private Network) client built into Mac OS X supports the most popular VPN servers without requiring additional software, and makes it simple to use PPTP or L2TP protocols to secure remote communications. Many Mac OS X applications support X.509 digital certificates, which can serve as electronic identity cards to enable secure email and chat communications—checking certificates, verifying identifies, and encrypting messages to protect them from Internet snoopers.

Features like Password Assistant help lock out identity thieves who might be after personal data, while built-in encryption technologies protect private information and communications. Keychain access lets users store all their logins securely without compromising your Lock organization’s security by storing them incorrectly or misplacing them. For web browsing, Safari supports SSL versions 2 and 3 protocols, advanced TLS encryption standards, and X.509 digital certificates to authenticate websites and shield confidential transactions.

Serve up security.

Built on the same foundation as Mac OS X, Mac OS X Server adds industrial-strength features required for business-critical server deployments. Mac OS X Server delivers security capabilities unmatched in their ease of use, and the ability to deploy in environments that demand additional conformance. The powerful remote administration tools in Mac OS X Server support secure service management from anywhere on your network or over the Internet, and use OpenSSH to provide secure access from the UNIX command line.

Kerberos

Mac OS X Server also integrates SSL and TLS transport layer mechanisms to provide a secure, 128-bit encrypted channel between systems, and can use X.509 digital certificates to ensure server integrity and to keep your communications safe and authenticated. For single sign-on in both Apple Open Directory and Microsoft Active Directory environments, Leopard NFS (Network File System) supports MIT’s Kerberos authentication as an alternative to UNIX user IDs, for determining who can gain access to a particular data.

Other security features are built on CDSA (Common Data Security Architecture), an open standard from Open Group that provides a layered set of security services and a cryptographic framework for creating security-enabled applications. Mac OS X Server also has a built-in firewall, and built-in support for native rich file permissions for both Mac OS X and Windows using ACLs (Access Control Lists) and traditional UNIX file permissions—offering your organization an unprecedented level of control over file and folder permissions.

IT Resources

White papers, Technical Overviews, Guides, and links to resources for the IT professional. Learn more

Snow Leopard Server Evaluation

Snow Leopard disc.

If you think it takes a dedicated IT department to deploy and use a server, think again. Register to receive your free, fully functional evaluation copy. Learn more

Third-Party Products

Looking for additional products that complement your Apple solution? Here are just a few of the many solutions designed for the Mac from third-party developers.

Encryption:

Anti-Virus:

Safe. Sound. Certified.

With its rock-solid UNIX core, Mac OS X offers peace of mind backed by the worldwide community of security researchers and security organizations like CERT/CC, FIRST, the FreeBSD security team, and the Department of Homeland Security—helping your organization maintain rock-solid security, straight from the box. Apple is also committed to supporting Common Criteria Certification.

Apple Security Resources

Apple tested. Government approved.

Get resources specific for state and federal government agencies, and about Mac and complementary security solutions that meet government and authentication regulations. Learn more