Kaspersky EDR Expert vs. Sophos Intercept X for Server

Easy to learn, use and deploy. Kaspersky EDR Expert allows to automatically find unmanaged and rogue endpoints, remove previous agent from another vendor, install its agent, move endpoint to a group based on endpoint's characteristics, change security policies if for example endpoint is moved to another subnet or currently out-of-office, apply malware outbreak rules in case of attack

Licensing is incredibly easy to renew - and to adjust based on usage. The interface of cloud-based management is fantastic and easy to navigate as well. Syncs up with Active Directory to get users/security groups and such for easily differentiating policies to various users. Being able to pinpoint exactly where a threat infiltrated a system (what it talked to once it did so) is a massive feature in responding to online threats. Depending on deployment size - the cost could be an issue for some smaller organizations.

Incentivized

• Identify and automatically respond to end-point security threats
• Protect end-point systems against a broad range of cyber attacks
• Reduce operational costs to support EDR services

Incentivized

• File protection and Recovery
• Blocks exploits to deny attackers
• Malware Detection

Incentivized

• Linux-systems support on the same level like windows systems
• Untying from Kaspesky ATA
• AI add to ease the way of profiling the system (it requires 1 FTE to examine all the incidents on 10 000 hosts? too much)

Incentivized

• Takes time to deploy and keep updated
• Resource heavy application when running

Incentivized

I believe the Kaspersky EDR Expert systems represent significant cyber risks for government and commercial enterprise customers

Incentivized

Overall, the suite of benefits and more reasonable cost per user/license to the organization were the key components affecting our decision-making.

Incentivized

Does a great job protecting our systems. Email security has more features and easy to manage. You don't have to have your own server to run the endpoint security. Auto updates the endpoint and servers. With a Managed detect response team that does human threat hunting. Overall an awesome product.

Incentivized

• Automating response task on suspicious activity
• Improving IT specialists skills and IS specialists skills
• Increased visibility of what malware really do on endpoint

• It has protected us from a ransomware attack.
• Centralized management has saved us time.
• It takes more time to install than others.

Incentivized