Kaspersky- Next EDR Foundations

  KASPERSKY ENDPOINT SECURITY NEXT EDR FOUNDATIONS  

FEATURES

• ML-based Endpoint Protection & Ransomware Defense

• Provides strong protection against known, unknown and advanced malware threats, including ransomware, fileless malware, and zero-day attacks with machine learning powered engines.

• Flexible Deployment & Simplified Management

• Offers both cloud-based and on-premises consoles; simple agent deployment and centralized policy management.

• Root Cause Analysis & Visibility

• Includes tools to visualize how threats spread, investigate their origin (kill chain), and respond based on that insight.

• Essential Controls & Vulnerability Monitoring

• Contains application control, web control, device control; plus built-in vulnerability scanning/assessment for both system OS and applications.

SPECIFICATIONS

• Supported Platforms: Windows workstations & file servers; macOS; iOS and Android mobile devices.

• Protection Types: Anti-malware, anti-ransomware, web/malicious site filtering, mail threat protection etc.

• Management Console: Cloud-based or on-premises; centrally managed policies and dashboards.

• Vulnerability & Patch Management: Yes; identifies outdated software, assists with patching.

• Root Cause Analysis: Visual kill-chain, event tracing.

• Other Controls: Application control, device control, web control.

  KASPERSKY ENDPOINT SECURITY HYBRID CLOUD   

FEATURES

• Multi-Layered Threat Protection Across Hybrid Environments

• Protects workloads across physical, virtual, private cloud, public cloud platforms using malware signatures, behavior monitoring, exploit prevention etc.

• Performance-Optimized for Virtualization / VDI

• Light agents, shared caching, optimizations reduce CPU, I/O, memory load (in some cases up to ~30%) so that virtual environments (VMs / VDI) operate efficiently.

• Wide Platform / Cloud Support & Visibility

• Native integrations / APIs with major cloud providers (AWS, Azure, GCP), support for many virtualization platforms (VMware, Hyper-V, Citrix, KVM etc.), plus centralized visibility into cloud workloads.

• Regulation & Compliance Support

• Features that help in policy compliance, system hardening, integrity monitoring, vulnerability management.

SPECIFICATIONS

• Supported Platforms: Windows and Linux servers / workloads; virtualized hosts & VDI; public cloud instances; containers

• Licensing Model: Per virtual machine or per CPU, depending on deployment; flexible licensing.

• Performance Overhead Reduction: Light agents + shared cache, optimizations to reduce resource usage (CPU, memory, IOPS) by about 30% in virtualized environments.

• Management Console: Uses unified / centralized console (Kaspersky Security Center) to manage across hybrid infrastructure.

• Security Features: Exploit prevention, application control, system hardening, integrity monitoring, anti-ransomware, scanning of containers/images, etc.

  KASPERSKY ENDPOINT SECURITY NEXT EDR EXPERT  

FEATURES

• Advanced Endpoint Protection & Visibility

• Provides a powerful stack including anti-malware engine, sandboxing, global reputation database, threat hunting, and mapping to MITRE ATT&CK to detect sophisticated and targeted threats.

• Root Cause Analysis & Investigation Tools

• Offers clear visualization of threat progressions, investigation graphs, event timelines, allowing security teams to trace back from suspicious activity to its origin.

• Automated & Manual Response Scenarios

• Supports predefined workflows (“automated response”) alongside manual interventions such as quarantining, isolating endpoints, terminating processes, etc., to contain threats quickly.

• Comprehensive Security Controls & Integration

• Includes behaviour detection, exploit prevention, remediation engines, firewall, web/mail threat protection, controls over devices, apps, web access; integrates with other Kaspersky and third-party systems.

• Scalable Deployment & Centralized Management

• Can be deployed cloud-based or on-premises; centralized management through Kaspersky’s console; meant for organizations with security operations / SOC.

SPECIFICATIONS

• Supported Platforms (Endpoint Agent): Windows, Linux, macOS

• Components: Endpoint agents, Administration Server, Console, sensors / integrations for network, sandbox, threat intelligence, event correlation etc.

• Management Interface: Web-based console; centralized policy deployment; role-based access controls.

• Detection Methods: Behavior detection, exploit prevention, remediation engine; anti-malware signature + ML + sandbox + threat intelligence; mapping to MITRE ATT&CK, IoA rules, etc.

• Threat Hunting / Forensics: Yes—tools for hunting threats, investigating historical alerts, root cause graphs.

• Security Controls: Web threat protection, mail protection, file threat protection, firewall, behaviour based controls, device control, application control, etc.