Lumension Security's Endpoint Security product brings together various Lumension controls into one platform. The platform is comprised of Device Control, Application Control and AntiVirus. The Device Control portion of the product takes a "default deny" approach to removable devices and media, ensuring that a solid policy can be created with no holes or mistakes. The Application Control component protects the network from users running possible malicious applications through a defined set of rules that prevents unauthorized execution of programs and executables. Finally, the AntiVirus piece provides overall protection from malware, including viruses, trojans, rootkits, spyware and adware.
Installation requires a multi-step process of installing the various components. This process entails setting up the database backend, installing the server software, installing the management console, and deploying the client. While the process is lengthy, we found it to be fairly straightforward, and all component installations were guided by setup wizards. The management console application does an excellent job of organizing various components and features of the product and we found it easy and intuitive to navigate.
We found this solution to integrate well with the existing Active Directory structure of our environment. Agent deployment can be done through a Group Policy Object, which ensures agents are deployed completely across the enterprise. Policy configuration and deployment also is nicely plugged into Active Directory with the ability to assign various permissions to already existing groups and users.
Documentation was comprised of several PDF guides, including for quick setup, Device Control, Application Control, and for the administrator. We found all these to be easy to follow with many step-by-step instructions, but there was a lack of screen shots and configuration examples. We think adding more visuals to the documentation would be helpful in better understanding how to use the product.
Lumension offers standard support included in the licensing price of the product. This support includes phone technical support and email support from Monday to Friday 6 a.m. to 6 p.m. MST with one business day response time. Premium support is also available at an extra cost, and this includes 24/7 phone support and four-hour email response time. There is also a customer forum and knowledge base on the website that customers can access regardless of support level.
At a price just over $18 per node for the full Endpoint Security Solution Pack, we find this tool to be a great value for the money. Customers can also purchase any of the three components separately depending on their needs, which provides for flexibility.
