Kaspersky Lab Endpoint Security for Business
Strengths: Comprehensive solution while supporting a vast majority of platforms including mail servers, mobile devices, and removable media.
Weaknesses: No cloud management solution.
Verdict: Kaspersky continues to be a strong contender in this field.
SummaryKaspersky Endpoint Security for Business (KESB) was developed to protect an entire IT infrastructure. The vast majority of platforms are supported, such as Windows, Linux and Mac workstation and server operating systems; mail servers like Exchange, LMS, and others; collaboration servers like MS SharePoint, web gateways, mobile devices, removable storage and so on. The latest version provides built-in sensors and integration with Endpoint Detection and Response (EDR), enabling the capture and analysis of large volumes of data to discover obscure, complex cyberattacks.
Some interesting mobile security features are included as well, such as a combined signature-based, proactive and cloud-assisted detection, which results in real-time protection. Pre-configuring and deploying applications centrally using SMS, email, and PC are available with the Deployment Over the Air provisioning feature.
Kaspersky also outlines cloud-enabled endpoint controls. Application control is powered by Dynamic Whitelisting from Kaspersky's in-house laboratory, which boasts reduced exposure to an attack, giving total control over the specific software that can run when installed on PCs. Kaspersky Lab has developed the Dynamic Whitelisting Database to offer better application categorization by systemizing knowledge of legitimate software. With devices thus controlled, users can set, schedule, and enforce data policies. Host Intrusion Prevention regulates access to sensitive data on recording devices by using local and cloud reputation databases.
KESB follows the traditional approach of an on-premises solution. With the on-premises approach, there are usually a few ways KESB can be deployed, but the most common way will be from the Kaspersky Security Center. Administrators have access to detailed information about network security levels, as well as configuring all the components of protection built using Kaspersky Lab applications.
Deploying endpoint agents and security policies from the Security Center is an easy, straight-forward process to follow. The Vulnerability and Patch Management component is a great feature as it allows for automated vulnerability elimination, which can ultimately free up security teams from constantly performing manual checks. KESB has improved manageability and deployment as it can now accommodate up to 100,000 endpoints through a single server installation.
Basic, no-cost support is offered for the duration of the license which includes 9 a.m.- 8 p.m. EST Monday - Friday phone support, electronic ticket submission via an online portal and live chat. There are several fee-based tiered support options such as premium levels of support. A dedicated technical account manager is available to assist customers 24x7.
- Matthew Hreben
Tested by: Matthew Hreben