Kaspersky EDR Optimum vs. Microsoft System Center Endpoint Protection

We have been using Kaspersky EDR Optimum for over 10 years, with the evolution of products reaching EDR now, we can verify the integrated responsiveness and visibility of our environment. Great protection tool on all OS. Very good value for money, with the new licensing, all business plans will now have native EDR.

Incentivized

If an organization is all Windows-based Active Directory systems, then System Center Endpoint Protection is worth deploying and using. If it's a hybrid of operating systems, then an alternative solution is best.

Incentivized

• KEDR Optimum is helping to see threat kill chain formation, which helps to get clear picture of the what exactly attacker was trying to do during attack.
• We are crating prevent execution rules to block the threat in our complete infra.
• Ioc scan to validate and remove the any active threat entry from our endpoints

Incentivized

• It is easy to use and configure. This is a benefit, not just for the IT/Admin team, but also for the end-user, as they can easily set how and when to run scans.
• It is good a identifying threats and removing these threats. When looking for a product such as this, it is important to really look at these two areas to really see how the software will work in a real-world environment. SCEP is one such product that does really well at both of these things.

Incentivized

• Agent package size is little big, if it can be optimize with lite package would be great
• If possible Host Integrity functionality can be added, to take action as quarantine the non-compliance machine to connect our enterprise network
• Many times KSC cloud operating slow, if it can optimized for the faster response

Incentivized

• Not so much a limitation on the software itself, but the fact that is primarily only "signature" based, it cannot detect threats that have mutated.
• This software provides virtually no protection against zero-day threats.
• The System Center Endpoint Protection does not offer protections based on behavioral analysis.

Incentivized

At the moment and unfortunately we'll not renew our licenses, due to the Russian conflict and the company policy that has forced us to get rid of any Russian related product. Before that incident, we were very happy with the product and we did not even think once about changing it... Maybe on the future...

Incentivized

It is integrated with Windows and SCCM, making it easy to use, license, manage, and update. Additionally, it is straightforward to diagnose when virus and ransomware alerts are detected on endpoints. IT Service Desk management is also easy.

Incentivized

This item can always be improved, perhaps by pre-elaborating very long reports, such that they are built progressively so that when the user wants to consult them, the delay is minimal. It would also be interesting to have a warehouse of reports, which serves as a repository where they can be consulted whenever needed, adding AI capabilities that allow data to be linked together and improve the analysis and possible correlations of events.

Incentivized

Support is pretty good overall. Since it's a Microsoft product, there are a number of different options for either end-users or IT Admins to get help with this product. This includes phone support, email, web KB articles, community forums, etc. This support is also available 24/7, which can't be said the same for every AV product out there. Also, organizations can opt to buy into Enterprise support, which gives the added benefit of faster response times, training by the vendor, etc.

Incentivized

After several evaluations we concluded that the kasprsky provider has a solution for each processing environment we have.This impacts an excellent cost-benefit for achieving economies of scale on the company's infrastructure. On the other hand, we verified that during its operation, its level of effectiveness in terms of malware detection is excellent. Finally, it provides a desktop patch management solution that we found efficient and effective. Allowing you to automate the distribution of patches with a minimum staffing of technical personnel.

Incentivized

Microsoft System Center Endpoint Protection was the logical choice for our organization since we were utilizing so many other Microsoft solutions. We have since realized the need for more advanced threat protections and primarily use SCEP as an additional level of protection. Our primary protection is being provided by Carbon Black because of it's advanced heuristics and behavioral analysis capabilities

Incentivized

• In mayor aspect, saving time for IT/Cybersecurity teams.
• Agile process to short the operations outages.
• Centralized view and relevant data for SOC team.

Incentivized

• The Windows 11 version of SCEP is significantly better than the Windows 10 and older iterations, and it has saved us from virus issues in the past.
• This is faster and less work to deploy to a pc when we build and deploy them.
• No extra admin and costs for AV licensing in our case, which makes renewal times easier on IT Management.

Incentivized