What is endpoint security and what should an endpoint security policy include?

An endpoint is any host acting as a network client; its security policy should include antivirus, host intrusion prevention, and documented rules employees must follow.

An endpoint (or host) is any individual computer or device that acts as a network client — laptops, desktops, servers, smartphones, and tablets. Endpoints matter because they are where users (and therefore attacks like malware and phishing) actually land, and because there are so many of them, scattered and often mobile. That is why securing endpoints is considered one of the hardest jobs for a network administrator.

A good endpoint security policy combines technical controls with human rules:

• Antivirus software to detect and remove known malware
• Host intrusion prevention systems to block suspicious behaviour on the device itself
• Well-documented policies that employees must follow — since the most carefully configured device is still vulnerable to careless users
• Network access control to admit only compliant devices for a more comprehensive solution

Go deeper:

• Endpoint security — Wikipedia — how endpoint protection, host IPS, and network access control enforce compliance on every device.