Novell Endpoint Protection Suite v11.x
Strengths: Mature product.
Weaknesses: Product cost coupled with maintenance is a bit high.
Verdict: Good product, though a bit expensive to comparable products.
Novell Endpoint Protection Suite is a compilation of three software products: Novell ZENworks Endpoint Security Management, Novell ZENworks Full Disk Encryption, and an optional subscription to Novell ZENworks Patch Management. Collectively, these offerings share a common agent that runs on the endpoint and provides dynamic, user-aware policies for encryption (safe harbor/folder, as well as whole-/full-disk encryption), personal firewall, device/port controls, wireless control settings, application controls, and more. In addition, it centralizes all relevant reporting and automates the process of software patching, including threat assessment, testing and remediation.
Documentation came on a USB device and consisted of 11 .pdf files, including items from a quick-start guide to server installation, policy management, best practices guidance, and more. Installation options for the central management solution ranged from an ESXi VMware virtual appliance to a standalone Windows 2008 R2 x64 server solution. In addition, the system requires a database. According to Novell, the most commonly used database solution is the Microsoft SQL Server 2008 R2 database. But, users are not limited to just these options.
The Novell Endpoint Protection Suite is administered from a browser. This is commonly done with either Microsoft IE 9 or the Mozilla Firefox browser. Note that Firefox versions 16 through 18 are currently supported. For this evaluation, Novell provided a USB device that contained a number of mountable .zip and .iso files used to install the product. Overall, the installation and configuration of the product was easy to perform.
Using the system was as simple as going to a target system, opening the browser, and then going to the system URL and installing the agent. Other methods to enroll a system were to push an agent, run a script or use Active Directory Policy. There is a solid list of devices that are supported in the ZENworks Control Center. The central dashboard is clean and simple to navigate. Applying policies is easy. Once a policy is created (or implemented by using built-in policies), applying the policy to a folder gives all the devices in the folder the applied policies. The management of mobile devices is just as easy with the addition of the Agent Security feature. Admins can determine if they want to allow end-users the ability to uninstall the ZENworks Adaptive Agent. The Endpoint Security and Full Disk Encryption are just as easy to define, deploy and manage. Endpoint Security has a drop-down list of policy types, including application control, communication hardware, data encryption, firewall, location assignment, scripting, security settings, storage device control, VPN enforcement and Wi-Fi.
Novell offers two, fee-based support solutions: standard or priority maintenance. The respective fees include $18/per seat/per year for standard and $22/per seat/per year for priority. Novell also offers phone and email assistance, as well as aid through its website, along with a knowledge base and FAQ list.
Value for the money spent is fair.