• Windows, Linux and Mac 
• Windows and Linux servers 
• Windows Server containers 
• Android and other mobile devices 
• Removable storage 

• Software exploits
• Ransomware 
• Mobile malware 
• Advanced threats 
• Fileless threats 
• PowerShell & script-based attacks 
• Web threats 

• File, web, network and mail threat protection 
• Protection for Workstations, Servers and mobile devices 
• Behavior Detection 
• Ransomware, exploit prevention and remediation 
• Anti-Malware 
• Vulnerability Assessment 
• Security Policy Adviser 
• Process isolation 
• Application Control for PC, Server & Mobile 
• Web Control for PC, Server & Mobile 
• Device Control for PC, Server & Mobile 
• Defense for Workstations, Servers 
• Mobile Threat Defense 
• Exploit Prevention and Rollback 
• Host Intrusion Prevention System (HIPS) 
• Firewall and OS firewall management 
• Cloud-assisted protection 
• Reporting 
• Remote Data Wipe 
• Cloud console 
• Web and MMC based consoles 
• Full integration with Kaspersky EDR Optimum (add-on) 
• Full integration with Kaspersky Sandbox (add-on)
• AMSI, Microsoft Active Directory, Syslog, RMM, PSA, EMM integration 

• Adaptive Anomaly Control 
• Patch management 
• Encryption management 
• Hardware & Software Inventory  
• Web, Email threat protections and controls for servers 
• Server and container protection   
• Advanced SIEM integration via Syslog 
• OS and third-party installation 

• Kaspersky Security Center
• Kaspersky Endpoint Security for Windows / Linux / Max
• Kaspersky Endpoint Security for Windows Server
• Kaspersky Security for Mobile - Android / iOS/ HarmonyOS

•  Windows 11
•  Windows 10 all versions
•  Windows 8.1
•  Windows 8
•  Windows 7 all versions, Service Pack 1 or later
•  Windows Server 2008 R2 all versions, Service Pack 1 or later
•  Windows MultiPoint Server 2011 or later
•  Small Business Server 2011 or later

•  VMWare Workstation 16 Pro or later
•  VMWare ESXi 7.0U1a or later
•  Microsoft Hyper-V 2019 Server or later
•  Citrix Virtual Apps and Desktops 7 2009 or later
•  Citrix Provisioning 2009 or later
•  Citrix Hypervisor 8.2 LTSR or later

•  CentOS 6.7 or later, x86 / x64
•  Debian GNU / Linux 9.4 or later, x86 / x64
•  Red Hat® Enterprise Linux® 6.7 , x86
•  Red Hat® Enterprise Linux® 7.2 or later, x64
•  Linux Mint 19 , x86
•  Linux Mint 20.1 and later, x64
•  ALT Education/Workstation/Server 9, x86 / x64
•  AlterOS 7.5 and later, x64
•  Amazon Linux 2, x64
•  Astra Linux Common Edition (operational update 2.12), x64
•  Astra Linux Special Edition RUSB.10015-01 (operational update 1.5 and 1.6), x64
•  Astra Linux Special Edition RUSB.10015-16 (release 1) (operational update 1.6), x64
•  EulerOS V2.0SP2 2.2.17, x64
•  EulerOS V2.0SP5 2.5.6, x64
•  openSUSE Leap 15.0 and later, x64
•  Oracle Linux 7.3 and later, x64
•  Oracle Linux 8.0 and later, x64
•  Pardus OS 19.1, x64
•  SUSE Linux Enterprise Server 12 SP5 and later, x64
•  SUSE Linux Enterprise Server 15 and later, x64
•  Ubuntu 18.04 LTS and later, x64
•  Ubuntu 20.04 LTS, x64
•  GosLinux 7.2 , x64
•  Mageia 4, x86
•  Red OS 7.3, x64

•  macOS 10.14 or later

•  Parallels Desktop 16 for Mac Business Edition
•  VMware Fusion 11.5 Professional or later

File Threat Protection 

Anti-virus detects and eliminates threats on a device in real-time by using the application’s

anti-virus databases and the Kaspersky Security Network cloud service.

Firewall 

The firewall protects each endpoint against network threats when browsing the internet

or using a local network. It blocks unauthorized network connections to the computer,

reducing the risk of infection. It monitors the network activity of applications on the

device, which reduces the risk of malware propagation in the network. It also restricts

actions performed by users who violate the company’s security policy (intentionally or

otherwise).

Host Intrusion Prevention prevents applications from performing actions that may be

harmful to the operating system, and controls access to operating system resources and

personal data.

---

Network Threat Protection

This component scans a device’s inbound network traffic for activity typical of a network

attack, such as the intrusion of a remote device into the operating system. When

Network Threat Protection detects an attempted network attack on the device, it blocks

network activity from the attacking computer.

---

Behavior Detection

Behavior Detection collects information about the actions of applications on a user’s

computer and provides this information to other components for more effective

protection.

---

Exploit Prevention

Exploit Prevention tracks executable files run by vulnerable applications.

When there’s an attempt to run an executable file from a vulnerable application

 that wasn’t initiated by the user, the component blocks the file from running.

---

Remediation Engine

The Remediation Engine lets you roll back actions performed by malware in the operating

system, delivering protection against cryptolockers.

---

Advanced Disinfection Technology

 Advanced disinfection technology is aimed at purging the Windows operating system of malicious programs that have already started their processes in RAM and that prevent Kaspersky Security from removing them by using other methods. The threat is neutralized when Advanced Disinfection technology is applied.

---

Kaspersky Security Network ( KSN )

400 million consenting customers and thousands of businesses agree to allow the cloud-based Kaspersky Security Network (KSN) to receive anonymous data about malware and suspicious behavior from their computers.

This real-time data stream is an infrastructure of cloud services providing access to Kaspersky's online knowledge base, which contains information about the reputation of files, web resources and software.

The use of data from the Kaspersky Security Network ensures faster responses of Kaspersky Endpoint Security to new threats, improves the performance of some protection components and reduces the likelihood of false positives.

---

BadUSB Attack Prevention

BadUSB Attack Prevention component prevents infected USB devices emulating a keyboard from connecting to the computer. When a USB device is connected to the computer and identified as a keyboard by the operating system, the application prompts the user to enter a numerical code generated by the application. This procedure is known as keyboard authorization.

---

SECURITY MANAGEMENT  

 

Device Control   

Controls user access to external and removable devices connected to the computer.  

Administrators can allow or block the use of certain devices by type or create a ‘trusted’ list. 

 

---

Web Control  

Allows control of user access to the internet depending on the site’s content or location.  

Web URL blacklisting restricts users from accessing potentially harmful or undesirable  

websites. Whitelisting allows access to safe internet resources only. 

 

---

 

Application Control  

Application Control manages the startup of applications on users’ computers and reduces the risk of computer infection by restricting access to applications. This allows you to implement a corporate security policy when using applications. 

 

---

 

System Vulnerability and Patch Management  

Streamlining and centralizing admin tasks to save time and money, as well as further heightening your security, with: 

• Remotely manage application updates and patches on your corporate devices 
• Advanced in-depth scanning for vulnerabilities, and automated patch distribution 
• Time and resource-saving OS and software deployment 
• Centralized system image creation, storage and deployment - ideal for upgrade to Microsoft Windows 10/11 
• Hardware and software inventory reports - helping control software license obligations. 

 

---

 

Remote Data Wipe 

Enables you to remotely delete data from users’ computer. Protect data on a laptop in case it is lost or stolen 

---

Installation of operating systems and applications

Kaspersky Security Center allows you to create operating system images and deploy them on client devices on the network, as well as perform remote installation of applications by Kaspersky or other vendors. 

---

Hardware and software inventory 

Automated discovery and hardware and software tracking give administrators detailed insights into every asset on the corporate network. Automated software scanning enables rapid detection of outdated software that may pose a security risk if not kept up to date. 

---

Role Based Access Control (RBAC) 

You can configure access rights to application features for Kaspersky Security Center users by configuring the rights for each user or group of users individually. Or you can create standard user roles with a predefined set of rights and assigning those roles to users depending on their scope of duties 

---

 

HOW MUCH EASY IS TO START / STEP 7

Skills required:  2.0 ( from 1 to 5)

Budged for business security: 1.5 ( from 1 to 5) or small budged

Enterprise solutions for small or medium business companies without IT staff

---