IBM Security Server Protection for Windows V2.2 helps shield critical systems and data from malicious attackers and data security threatsIBM United States Software Announcement 211-116
June 7, 2011
|Table of contents|
|At a glance|
IBM® Security Server Protection for Windows® V2.2 can help reduce the complexity of IT security management, manage business security risk, and improve IT resource efficiency and administrator productivity.
Security Server Protection for Windows V2.2 can help enable organizations to:
- Protect their IT environment with award-winning firewall and intrusion prevention system backed by cutting-edge IBM X-Force® Security Research and IBM protocol analysis module
- Enforce security policy across the IT environment through centralized lifecycle management for network access control and data integrity management
- Reveal security vulnerabilities and active threats to the system using advanced security event analytics
- Reduce the cost and complexity of compliance activities through robust event auditing capabilities
- Protect against known and unknown attacks using IBM Virtual Patch® technology that helps shield vulnerabilities from exploitation, independent of a software patch
- Reduce unauthorized applications that can expose critical systems to malicious attacks using application black and white listing (available on Windows 2003 supported platforms)
- Provide full support for Windows Server 2008 R2 systems
For ordering, contact Your IBM representative or an IBM Business Partner. For more information contact the Americas Call Centers at 800-IBM-CALL (426-2255). Reference: YE001
Back to top
IBM Security Server Protection for Windows V2.2 (formerly IBM Proventia® Server for Windows) helps organizations address compliance requirements and helps protect against malicious threats which may compromise servers and sensitive data. With Security Server Protection for Windows, enterprises can protect against data breaches and benefit from capabilities that simplify and support compliance requirements.
Security Server Protection for Windows benefits extend beyond helping protection and compliance support by serving as a critical component in an organization's data loss prevention (DLP) strategy. With trends in measuring the cost of server breaches based on cost per compromised record vs. server downtime, a comprehensive DLP strategy with Security Server Protection for Windows helps:
- Enable real-time reporting on data security and application protection
- Contribute to data loss prevention strategies and preemptive protection while enforcing corporate security policies for servers
- Inspect traffic entering the server to block malicious code that attempts to infiltrate and extract sensitive data
Security Server Protection for Windows is designed to integrate seamlessly into your IT infrastructure and is managed centrally by the IBM SiteProtector system.
IBM Security Server Protection for Windows V2.2 enhancements
IBM Security Server Protection for Windows V2.2 now supports Windows Server 2008 R2 operating system, a critical requirement for many deployments. This updated platform support allows you to maintain a robust server security posture as you upgrade your Windows Server environments to the most current release and patch levels. Security Server Protection for Windows provides a smooth migration path and uninterrupted security capabilities.
Back to top
Refer to the Technical information section.
Back to top
|Planned availability date|
June 10, 2011 for electronic availability
July 1, 2011 for media availability
Back to top
IBM Security Server Protection for Windows V2.2 delivers a wide array of capabilities that support the demands of compliance requirements and the security technology to support a comprehensive data loss prevention (DLP) strategy.
Security Server Protection for Windows helps protect your servers from malicious attacks while supporting your compliance activities. The system provides real-time file integrity monitoring to help alert security teams to changes in specified files and folders. Benefits enable enterprises to maintain control of data access points and monitor changes to confidential data. Additionally, application controls can lock down user access to programs that can be used to take control of a server.
Security Server Protection for Windows provides an additional layer of defense inside the network firewall to help stop internal and external server attacks before the threat can breach a system and result in data loss or theft, and before the system and its critical data can be compromised.
Security Server Protection for Windows helps:
- Maintain compliance with tracking and reporting tools. Receive alerts for activity regarding privilege escalations, confidential file access and modifications, and unauthorized configuration changes.
- Protect servers against known and unknown attacks without requiring patches. Security Server Protection for Windows offers vulnerability-centric intrusion prevention designed to block network worms and other exploits to known vulnerabilities. Buffer overflow exploit prevention (available on Windows 2003 supported platforms only) blocks unknown buffer overflow exploits.
- Audit server applications. Quickly audit applications that are running and accessing the network before establishing an application or network lockdown policy.
- Detect and respond to application-level attacks and unauthorized activity. Employs log monitoring of operating system and application activity to help maintain system integrity and compliance.
- Enforce service and application policy. Verifies that only authorized services and applications are running on servers. (Available on Windows 2003 supported platforms only.)
- Enforce network access policy. Verifies that only authorized applications are accessing the network. (Available on Windows 2003 supported platforms only.)
- Verify the integrity of key files. Combines real-time file integrity monitoring with file system baselining to verify the integrity of sensitive files as well as critical system binaries and configuration files to track alterations by unauthorized users.
- Stop unauthorized users from making security changes. Helps prevent anything or anyone from stopping or disabling Security Server Protection for Windows regardless of local or remote administrative privileges.
- Enforce antivirus compliance. Verifies that servers are receiving the latest antivirus updates and reports non-compliant servers.
Security Server Protection for Windows also:
- Provides a local user interface. Local interface provides access to security policy configuration. Policy priority can be central control, local control, or shared control (with central priority).
- Integrates with Active Directory. Use Active Directory grouping structure to manage policies, monitor events, and create reports.
Some host protection solutions provide intrusion prevention signatures in addition to a local firewall. Much like antivirus signatures, signature-based intrusion prevention works well against known threats, but can be useless against unknown exploits. Preemptive protection, based on a combination of vulnerability-centric intrusion prevention coupled with other protection technologies, is designed to keep valuable servers ahead of the threat.
Preemptive threat prevention
IBM security solutions provide preemptive protection with network and server security offerings, including IBM Security Server Protection for Windows V2.2. Vulnerability-centric intrusion prevention from IBM has helped protect clients from network-borne threats such as worms, viruses, spyware, and hacker attacks for many years.
Accessibility by people with disabilities
A U.S. Section 508 Voluntary Product Accessibility Template (VPAT) containing details on accessibility compliance can be requested at
Back to top
IBM Security Server Protection for Windows V2.2 provides a scalable, high-performance, advanced intrusion defense and server security solution. It is flexible enough to provide significant value for both small and large organizations. Security Server Protection for Windows' preemptive protection approach to server security allows Security Server Protection to detect both known and unknown threats. In the evolving IT security threat landscape, attackers continuously search for new ways not only to disrupt system operation, but also to gain unauthorized access to sensitive, valuable data for personal gain. Security Server Protection for Windows's proactive defense against unknown and emerging threats constitutes a significant advantage and differentiates it from a reactive, signature-based approach.
Back to top
Program Program number VRM name 5725-C25 2.2.0 IBM Security Server Protection for Windows
Back to top
Comprehensive education for IBM Tivoli® products is offered through Worldwide Tivoli Education Delivery Services. A wide range of training options are available, including classes led by instructors, learning on demand, on-site training, and blended learning solutions.
For additional information, visit
Back to top
Product information is available via the Offering Information website
Also, visit the Passport Advantage® website
Back to top
No publications are shipped with this program.
Product documentation is available at the following website. Click IBM Security Server Protection.
The Publications Center is a worldwide central repository for IBM product publications and marketing material with a catalog of 70,000 items. Extensive search facilities are provided. Payment options for orders are via credit card (in the U.S.) or customer number for 20 countries. A large number of publications are available online in various file formats, and they can all be downloaded by all countries, free of charge.
Back to top
Specified operating environment
- Minimum processor: Pentium® III 600 Mhz or better
- Minimum memory: 256 MB in addition to memory required by other applications
- Disk space: 100 MB
- Network connection: TCP/IP network connection over 10/100/1000 Mbps Ethernet
Security Server Protection for Windows V2.2 supports:
- Windows Server 2008 SP2 Standard Edition x86-64
- Windows Server 2003 SP2 Web Edition x86-32
- Windows Server 2003 SP2 Enterprise Edition x86-32
- Windows Server 2003 R2 SP2 Enterprise Edition x86-64
- Windows Server 2008 R2 Service Pack 1 Datacenter Edition x86-64
- Windows Server 2008 SP2 Web Edition x86-64
- Windows Server 2003 R2 SP2 Standard Edition x86-32
- Windows Server 2003 SP2 Standard Edition x86-64
- Windows Server 2008 R2 Service Pack Web Edition x86-64
- Windows Server 2008 SP2 Standard Edition x86-32
- Windows Server 2003 SP2 Web Edition x86-64
- Windows Server 2003 SP2 Standard Edition x86-32
- Windows Server 2003 R2 SP2 Standard Edition x86-64
- Windows Server 2003 SP2 Enterprise Edition x86-64
- Windows Server 2008 R2 Service Pack 1 Enterprise Edition x86-64
- Windows Server 2008 R2 Datacenter Edition x86-64
- Windows Server 2003 R2 SP2 Web Edition x86-64
- Windows Server 2008 SP2 Enterprise Edition x86-64
- Windows Server 2008 R2 Enterprise Edition x86-64
- Windows Server 2008 R2 Standard Edition x86-64
- Windows Server 2003 R2 SP2 Enterprise Edition x86-32
- Windows Server 2008 R2 Web Edition x86-64
- Windows Server 2008 SP2 Enterprise Edition x86-32
- Windows Server 2008 SP2 Web Edition x86-32
- Windows Server 2008 R2 Service Pack 1 Standard Edition x86-64
- Windows Server 2003 R2 SP2 Web Edition x86-32
The following product is included with IBM Security Server Protection for Windows V2.2 for use restricted to Security Server Protection for Windows:
- IBM Security Site Protector System V2.0 Service Pack 8.1
The program's specifications and specified operating environment information may be found in documentation accompanying the program, if available, such as a readme file, or other information published by IBM, such as an announcement letter. Documentation and other program content may be supplied only in the English language.
Software Subscription and Support (also referred to as Software Maintenance) is included with licenses purchased through Passport Advantage and Passport Advantage Express®. Product upgrades and technical support are provided by the Software Subscription and Support (Software Maintenance) offering as described in the Agreements. Product upgrades provide the latest versions and releases to entitled software, and technical support provides voice and electronic access to IBM support organizations, worldwide.
IBM includes one year of Software Subscription and Support (also referred to as Software Maintenance) with each program license acquired. The initial period of Software Subscription and Support (Software Maintenance) can be extended by the purchase of a renewal option, if available.
IBM Security Server Protection for Windows V2.2 is distributed with:
- International Program License Agreement (Z125-3301)
- License Information document
- Publications (refer to the Publications section)
This program, when downloaded from a Web site, contains the applicable IBM license agreement and License Information, which will be stored in a directory called LICENSE.
Security, auditability, and control
Security Server Protection for Windows V2.2 uses the security and auditability features of the operating system software. The customer is responsible for evaluation, selection, and implementation of security features, administrative procedures, and appropriate controls in application systems and communication facilities.
Back to top
IBM Software Services has the breadth, depth, and reach to manage your services needs. You can leverage the deep technical skills of our lab-based, software services team and the business consulting, project management, and infrastructure expertise of our IBM Global Services team. Also, we extend our IBM Software Services reach through IBM Business Partners to provide an extensive portfolio of capabilities. Together, we provide the global reach, intellectual capital, industry insight, and technology leadership to support a wide range of critical business needs.
To learn more about IBM Software Services or to contact a Software Services sales specialist, visit
Back to top
|Licensing metric definitions and pricing examples|
Licensing metric definitions
Install is a unit of measure by which the program can be licensed. An Install is an installed copy of the program on a physical or virtual disk made available to be executed on a computer. Licensee must obtain an entitlement for each Install of the program.
The pricing for IBM Security Server Protection for Windows is priced by number of server installations. One server installation requires one entitlement of Security Server Protection for Windows.
Assume customer ABC plans to install Security Server Protection for Windows on 50 servers in their enterprise environment.
Customer ABC would need to order 50 Security Server Protection for Windows entitlements to entitle their current environment.
Customer ABC is looking to expand their enterprise server environment from 50 server installations to 150 server installations. The customer now requires entitlements for 150 Security Server Protection for Windows installations.
Customer already has entitlements for 50 Security Server Protection for Windows installations. Customer ABC would need to order an additional 100 IBM Security Server Protection for Windows entitlements to entitle their new environment with a total of 150 Security Server Protection for Windows entitlements.
Back to top
This product is only available via Passport Advantage. It is not available as shrinkwrap.
These products may only be sold directly by IBM or by authorized IBM Business Partners for Software ValueNet®.
For more information about IBM Software ValueNet, visit
To locate IBM Business Partners for Software ValueNet in your geography for a specific Software ValueNet portfolio, contact your IBM representative.
Product group: Security Product Identifier Description PID IBM Security Server Protection for Windows V2.2 5725-C25 Product category: Security Server Protection
Orders for new licenses will be accepted now.
Shipment will begin on the planned availability date.
Ordering information for Passport Advantage
Passport Advantage allows you to have a common anniversary date Software Subscription and Support (SW S&S) renewals, which can simplify management and budgeting for eligible new versions and releases (and related technical support) for your covered products. The anniversary date, established at the start of your Passport Advantage Agreement, will remain unchanged while your Passport Advantage Agreement remains in effect. New software purchases will initially include twelve full months of Software Subscription and Support (also referred to as Software Maintenance). Software Subscription and Support in the second year (the first year of renewal) can be prorated to be coterminous with your common anniversary date. Thereafter, all Software Subscription and Support (Software Maintenance) will renew at the common anniversary date for twelve full months of Software Subscription and Support (Software Maintenance).
Refer to the IBM International Passport Advantage Agreement and to the IBM Software Support Handbook for specific terms relating to, and a more complete description of, technical support provided through Software Subscription and Support (Software Maintenance).
The quantity to be specified for the Passport Advantage part numbers in the following table is per required number of Installs. To order for Passport Advantage, specify the desired part number and quantity.
Description Part number IBM Security Server Protection for Windows D0JWTLL per Install Lic + SW S&S 12 Mo IBM Security Server Protection for Windows E0C9CLL per Install Annual SW S&S Rnwl IBM Security Server Protection for Windows D0JWULL per Install SW S&S Reinstate 12 Mo
To order a media pack for Passport Advantage, specify the part number in the desired quantity from the following table:
Description Part number IBM SEC SERV PRO FOR WIN V2.2 MP BJ0YZEN
IBM Security Server Protection for Windows is also available, via web download, from Passport Advantage.
Subscription and Support
Subscription and Support must be ordered to receive voice technical support via telephone during normal business hours, and future releases and versions, at no additional charge. The capacity of Subscription and Support (for example, Processor Value Units or terabytes) must be the same as the capacity ordered for the product licenses.
To order, specify the Subscription and Support program product number and the appropriate license or charge option.
IBM is also providing Subscription and Support for these products, via a separately purchased offering, under the terms of the IBM International Agreement for Acquisition of Support Maintenance. This offering:
- Includes and extends the support services provided in the base support to include technical support via telephone during normal business hours.
- Entitles you to future releases and versions, at no additional charge. Note that you are not entitled to new products.
When Subscription and Support is ordered, the charges will automatically renew annually unless cancelled by you.
Back to top
|Terms and conditions|
The information provided in this announcement letter is for reference and convenience purposes only. The terms and conditions that govern any transaction with IBM are contained in the applicable contract documents such as the IBM International Program License Agreement, IBM International Passport Advantage Agreement, and the IBM Agreement for Acquisition of Software Maintenance.
This product is only available via Passport Advantage. It is not available as shrinkwrap.
IBM International Program License Agreement including the License Information document and Proof of Entitlement (PoE) govern your use of the program. PoEs are required for all authorized use. Part number products only, offered outside of Passport Advantage, where applicable, are license only and do not include Software Maintenance.
This software license includes Software Subscription and Support (also referred to as Software Maintenance).
These programs are licensed under the IBM Program License Agreement (IPLA) and the associated Agreement for Acquisition of Software Maintenance, which provide for support with ongoing access to releases and versions of the program. IBM includes one year of Software Subscription and Support (also referred to as Software Maintenance) with the initial license acquisition of each program acquired. The initial period of Software Subscription and Support (also referred to as Software Maintenance) can be extended by the purchase of a renewal option, if available. These programs have a one-time license charge for use of the program and an annual renewable charge for the enhanced support that includes telephone assistance (voice support for defects during normal business hours), as well as access to updates, releases, and versions of the program as long as support is in effect.
License Information form number
The program's License Information will be available for review on the IBM Software License Agreement website
Limited warranty applies
IBM warrants that when the program is used in the specified operating environment, it will conform to its specifications. The warranty applies only to the unmodified portion of the program. IBM does not warrant uninterrupted or error-free operation of the program or that IBM will correct all program defects. You are responsible for the results obtained from the use of the program.
IBM provides you with access to IBM databases containing information on known program defects, defect corrections, restrictions, and bypasses at no additional charge. For further information, consult the IBM Software Support Handbook found at
IBM will maintain this information for at least one year after the original licensee acquires the program (warranty period).
Program technical support
Technical support of a program product version or release will be available for a minimum of three years from the general availability date, as long as your Software Subscription and Support (also referred to as Software Maintenance) is in effect. This technical support allows you to obtain assistance (via telephone or electronic means) from IBM for product-specific, task-oriented questions regarding the installation and operation of the program product. Software Subscription and Support (Software Maintenance) also provides you with access to updates (modifications or fixes), releases, and versions of the program. You will be notified, via announcement letter, of discontinuance of support with 12 months' notice. If you require additional technical support from IBM, including an extension of support beyond the discontinuance date, contact your IBM representative or IBM Business Partner. This extension may be available for a fee.
If for any reason you are dissatisfied with the program and you are the original licensee, you may obtain a refund of the amount you paid for it, if within 30 days of your invoice date you return the program and its PoE to the party from whom you obtained it. If you downloaded the program, you may contact the party from whom you acquired it for instructions on how to obtain the refund.
For clarification, note that (1) for programs acquired under the IBM International Passport Advantage offering, this term applies only to your first acquisition of the program and (2) for programs acquired under any of IBM's On/Off Capacity on Demand (On/Off CoD) software offerings, this term does not apply since these offerings apply to programs already acquired and in use by you.
Volume orders (IVO)
IBM International Passport Advantage Agreement
Passport Advantage applies
Yes, and through the Passport Advantage website at
Yes. Usage is limited to the quantity of Installs licensed.
For additional information, refer to the License Information document that is available on the IBM Software License Agreement website
Software Subscription and Support (Software Maintenance) applies
Yes. Software Subscription and Support (also referred to as Software Maintenance) is included with licenses purchased through Passport Advantage and Passport Advantage Express. Product upgrades and Technical Support are provided by the Software Subscription and Support (Software Maintenance) offering as described in the Agreements. Product upgrades provide the latest versions and releases to entitled software and Technical Support provides voice and electronic access to IBM support organizations, worldwide.
IBM includes one year of Software Subscription and Support (Software Maintenance) with each program license acquired. The initial period of Software Subscription and Support (Software Maintenance) can be extended by the purchase of a renewal option, if available.
While your Software Subscription and Support (Software Maintenance) is in effect, IBM provides you assistance for your routine, short duration installation and usage (how-to) questions, and code-related questions. IBM provides assistance via telephone and, if available, electronic access, only to your information systems (IS) technical support personnel during the normal business hours (published prime shift hours) of your IBM support center. (This assistance is not available to your end users.) IBM provides Severity 1 assistance 24 hours a day, 7 days a week. For additional details, consult your IBM Software Support Handbook at
Software Subscription and Support (Software Maintenance) does not include assistance for the design and development of applications, your use of programs in other than their specified operating environment, or failures caused by products for which IBM is not responsible under the applicable agreements.
For additional information about the International Passport Advantage Agreement and the IBM International Passport Advantage Express Agreement, visit the Passport Advantage website at
System i Software Maintenance applies
Variable charges apply
Educational allowance available
Back to top
|IBM Electronic Services|
IBM has transformed its delivery of hardware and software support services to help you achieve higher system availability. Electronic Services is a web-enabled solution that offers an exclusive, no-additional-charge enhancement to the service and support available for IBM servers. These services are designed to provide the opportunity for greater system availability with faster problem resolution and preemptive monitoring. Electronic Services comprises two separate, but complementary, elements: Electronic Services news page and Electronic Services Agent.
The Electronic Services news page is a single Internet entry point that replaces the multiple entry points traditionally used to access IBM Internet services and support. The news page enables you to gain easier access to IBM resources for assistance in resolving technical problems.
The Electronic Service Agent is no-additional-charge software that resides on your server. It monitors events and transmits system inventory information to IBM on a periodic, client-defined timetable. The Electronic Service Agent automatically reports hardware problems to IBM. Early knowledge about potential problems enables IBM to deliver proactive service that may result in higher system availability and performance. In addition, information collected through the Service Agent is made available to IBM service support representatives when they help answer your questions or diagnose problems. Installation and use of IBM Electronic Service Agent for problem reporting enables IBM to provide better support and service for your IBM server.
To learn how Electronic Services can work for you, visit
Back to top
Business Partner information
If you are an IBM Business Partner -- Distributor for Workstation Software acquiring products from IBM, you may link to Passport Advantage Online for resellers where you can obtain Business Partner pricing information. An IBM ID and password are required.
For Passport Advantage information and charges, contact your IBM representative or authorized IBM Business Partner for Software ValueNet. Additional information is also available at
Information on charges is available at Web site
In the Electronic tools category, select the option for Purchase/upgrade tools.
Back to top
To order, contact your local IBM representative or your IBM Business Partner.
To identify your local IBM Business Partner or IBM representative, call 800-IBM-4YOU (426-4968). For more information, contact the Americas Call Centers.
Phone: 800-IBM-CALL (426-2255) Fax: 800-2IBM-FAX (242-6329) For IBM representative: email@example.com For IBM Business Partner: firstname.lastname@example.org Mail: IBM Teleweb Customer Support ibm.com® Sales Execution Center, Americas North 3500 Steeles Ave. East, Tower 3/4 Markham, Ontario Canada L3R 2Z1 Reference: YE001
The Americas Call Centers, our national direct marketing organization, can add your name to the mailing list for catalogs of IBM products.
Note: Shipments will begin after the planned availability date.
IBM Software ValueNet
These products are available under IBM Software ValueNet, either directly from IBM or through authorized Business Partners who invest in skills and high value solutions. IBM customers may benefit from the industry-specific or horizontal solutions, skills and expertise provided by these Business Partners.
Additions to Software ValueNet will be communicated through standard product announcements. For a current list of IBM software available under Software ValueNet, visit
Questions regarding IBM Software ValueNet may be sent to AskSoftwareValueNet@us.ibm.com
SiteProtector and Electronic Service Agent are trademarks of IBM Corporation in the United States, other countries, or both.
IBM, X-Force, Virtual Patch, Proventia, Tivoli, Passport Advantage, Express, ValueNet and ibm.com are registered trademarks of IBM Corporation in the United States, other countries, or both.
Windows is a registered trademark of Microsoft Corporation in the United States, other countries, or both.
Pentium is a registered trademark of Intel Corporation or its subsidiaries in the United States and other countries.
Other company, product, and service names may be trademarks or service marks of others.
For the most current information regarding IBM products, consult your IBM representative or reseller, or visit the IBM worldwide contacts page