Today, businesses need to implement security that protects their internal IT infrastructure and also extends outside traditional perimeters – so that mobile workers can access corporate systems and data without introducing new security risks. Kaspersky Endpoint Security for Business SELECT combines Kaspersky Lab’s award-winning anti-malware technologies, plus file server security and easy-to-configure endpoint controls – all to protect your internal IT infrastructure – plus rigorous mobile security and MDM that enables secure access to your corporate systems.
Protecting your data and your business reputation
By combining signature-based, proactive and cloud-assisted anti-malware technologies – plus Kaspersky’s two-way firewall and special Network Attack Blocker features – Kaspersky Endpoint Security for Business SELECT delivers multi-layer protection against the latest threats.
Protecting shared storage
The presence of just one infected file – on any of your servers – could adversely affect all computers on your network. That’s why Kaspersky Endpoint Security for Business SELECT provides anti-malware protection for file servers running Microsoft Windows or Linux.
Securing mobile access and Bring Your Own Device initiatives
Whenever a business enables mobile access to its corporate systems and data, new security risks can be introduced. That’s why Kaspersky Endpoint Security for Business SELECT includes powerful security for mobile devices. With Kaspersky mobile security technologies, your business can benefit from the cost and efficiency gains offered by BYOD initiatives – while Kaspersky protects you against viruses, Trojans, worms, spyware, bots and many other threats.
Simplifying mobile device management (MDM)
Kaspersky Endpoint Security for Business SELECT includes both mobile security and flexible MDM that gives you control over the security that’s running on your mobile endpoints and also helps you to manage how individual devices are allowed to access the corporate network. When a new mobile device appears on your corporate network, Kaspersky technologies ensure it’s visible to you – so you can manage the device’s security and control how it accesses the network.
Helping you to enforce your security policies
Kaspersky Endpoint Security for Business SELECT includes powerful controls that help you to ensure your corporate security policies are applied across your business. Flexible Application Controls, Device Controls and Web Controls make it easy for administrators to manage how applications run, control the use of removable devices and manage web usage – so your systems and data benefit from additional levels of protection.
Delivering security immediately
Kaspersky Endpoint Security for Business SELECT is preconfigured so that it can start protecting your systems and data immediately after you install it. In addition, because Kaspersky Endpoint Security for Business SELECT includes Kaspersky Security Center – Kaspersky’s centralised management console – you can rapidly adjust the configuration of almost all Kaspersky security applications that your business is running.
Adding more security when you need it
Kaspersky also offers a range of Targeted Security Solutions that let you add further protection technologies. There are Targeted Security Solutions for storage, mail, Internet gateways, virtualisation and collaboration – plus a far-reaching systems management solution.
Kaspersky Endpoint Security for Business SELECT delivers a compelling combination of world-class security technologies and easy-to-use management functionality.
Advanced Anti-Malware for Workstations*
Award-winning anti-malware protection
Kaspersky’s latest anti-malware engine combines signature-based technologies, heuristic analysis and cloud-assisted technologies. In the period since 2004, Kaspersky has been awarded the highest number of platinum and gold awards – across all testing categories – by the independent Anti-Malware Test Lab.
Protecting complex, heterogeneous IT estates*
Kaspersky Endpoint Security for Business ADVANCED helps businesses to protect a wide variety of platforms, such as Mac, Linux and Windows – including the new Windows 8.1 and OS X 10.9 Mavericks operating systems.
Defending against new malware threats
Because cybercriminals are continually launching new and more complex malware, it’s vital that your defences are as up-to-date as possible. Kaspersky delivers malware database updates on a much more frequent basis than is offered by many other security software providers. In addition, Kaspersky’s use of pattern-based signatures helps to improve malware detection rates, reduce the size of update files and reduce the load on your IT resources..
Urgent Detection System
Kaspersky continually updates its Urgent Detection System database, with its latest information about newly discovered malware. This means Kaspersky can help to defend your IT infrastructure against emerging threats – even before a new malware signature can be released.
With its Active Disinfection technology, Kaspersky can deliver protection against malicious code at the lowest levels of a computer’s operating system.
Monitoring how your applications behave
When an application launches on your corporate network, Kaspersky’s System Watcher technology will monitor the application’s behaviour. If any suspicious behaviour is detected, Kaspersky Endpoint Security for Business ADVANCED will automatically block the application.
Preventing attacks by hackers
Kaspersky’s Host-based Intrusion Prevention System (HIPS) and personal firewall help you to manage and control both inbound and outbound traffic. You can set parameters for individual ports, IP addresses or specific applications.
Network Attack Blocker
Kaspersky Endpoint Security for Business ADVANCED includes a special Network Attack Blocker feature that detects and monitors suspicious activities on your corporate network. The feature also lets you preconfigure how your systems will react if any suspicious behaviour is identified.
Kaspersky Endpoint Security for Business ADVANCED includes Kaspersky Security Network (KSN) – a cloud-based service that automatically collects information about suspicious behaviour and malware on millions of consenting customers’ computers. This real-time flow of information ensures that Kaspersky can deliver a faster response to the emergence of new malware – and helps to minimise the occurrence of ‘false positives’. Independent assessments confirm that KSN helps Kaspersky to identify new threats within as little as 0.02 seconds.
Protecting multi-platform file server environments
With its powerful antivirus engine, Kaspersky Endpoint Security for Business SELECT delivers world-class anti-malware protection for file servers running Windows, Linux or FreeBSD. In addition, Kaspersky’s optimised scanning processes help to ensure there’s no significant impact on the performance of your systems. The application protects terminal servers – Citrix or Microsoft – and also runs on cluster servers.
Improved manageability and reporting
Kaspersky recognises that every minute spent on administration and reporting, is time you could be devoting to strategically important activities. That’s why Kaspersky Endpoint Security for Business SELECT provides user-friendly management tools and clear reports – so you get easy, quick access to the controls and information that can help you to improve security.
In the event of a system failure, Kaspersky’s anti-malware protection will automatically restart when your system restarts.
Virtualisation support – for Windows-based file servers
Kaspersky’s file server security solution has achieved VMware Ready certification.
Mobile Security** and Mobile Device Management (MDM)**
By combining signature-based, heuristic and cloud-assisted anti-malware technologies, Kaspersky Endpoint Security for Business SELECT delivers powerful security for corporate mobile devices and Bring Your Own Device (BYOD) initiatives. It’s easy to scan applications, files, email attachments and media files.
Control tools for mobile devices
Application Control functionality makes it easy for administrators to ensure only company-approved software is allowed to run, and unwanted or grey applications are all blocked.
Web Control features let administrators block malicious or dangerous websites and also control access to websites that don’t conform to the company’s corporate security and usage policies – such as social networking, recruitment, gambling, retailing or adult websites, as well as proxy servers.
In addition, Kaspersky technologies automatically detect rooting / jailbreak incidents.
To help prevent your sensitive business data falling into the wrong hands, Kaspersky Endpoint Security for Business SELECT makes it easy to enable and manage the encryption features that are provided on most popular mobile devices.
Secure containers for corporate data
Bring Your Own Device (BYOD) initiatives can result in significant issues – including the problem of separating and securing corporate data on a device that also holds the user’s personal information. Kaspersky Endpoint Security for Business SELECT includes Kaspersky’s Containerisation technology. It’s easy to set up a separate container – within the user’s mobile device – so that corporate data is separated from the user’s personal data. You can enforce additional security for the container – by enabling automatic encryption within the container and / or demanding additional user authorisation before an application is allowed to launch.
In the event of an employee leaving the company, it’s easy to ensure sensitive corporate data is no longer stored on their personal mobile device. Kaspersky technology gives you remote access to the corporate container – so you can delete the container and all corporate data, without deleting the owner’s personal data on the device.
Anti-theft features for mobile devices
If a user’s mobile device is lost or stolen, remotely operated security features help you to protect corporate data and prevent access to your corporate network. You can remotely lock the mobile device, delete corporate data and find the device’s approximate location. If a thief changes the SIM card in the device, Kaspersky’s SIM Watch feature will send you the new SIM’s telephone number.
Wide-ranging MDM capabilities
Kaspersky Endpoint Security for Business SELECT includes flexible mobile device management (MDM) tools that fully support all functionality in Microsoft Exchange ActiveSync, Apple MDM Server and Samsung SAFE.
Kaspersky technologies make it easy for administrators to:
Enforce the use of PINs on all mobile devices
Impose restrictions on passwords – to ensure only complex passwords are used
Manage encryption features
Block the use of a device’s camera
Manage many other device features
With Kaspersky’s MDM tools, there’s no need to use separate consoles. You can perform all MDM actions from Kaspersky’s single management console.
**Only available for mobile platforms that are included in Kaspersky’s list of supported platforms. Some features are not available for some of the supported mobile platforms.
Kaspersky Endpoint Security for Business SELECT includes Application Control capabilities that help IT administrators to manage how applications run on your corporate network:
Application Monitor – monitors applications and classifies them as untrusted, restricted or trusted
Application Startup Control – makes it easy to block, allow or audit the launch of applications
Application Privilege Control – controls whether an application is allowed to access the registry, file system or other resources
You can enable a Default Allow policy that blocks blacklisted applications, or apply a Default Deny policy that only allows whitelisted applications to launch.
Currently, Kaspersky is the only company that has invested in its own Whitelist Lab. The Lab assesses the security status of common applications and determines whether they can be added to the whitelist database of programs that are safe to run. The information from Kaspersky’s dynamic whitelisting service helps to support effective Application Control.
Whitelist updates are delivered from the cloud-based Kaspersky Security Network – which helps to ensure the very latest whitelist information is available to Kaspersky’s customers.
It’s easy for users to attach removable devices to almost any system on the corporate network – and those devices may prove to be the source of malware infections or could be used to steal confidential business data. Kaspersky’s Device Control features enable you to ensure that only authorised devices are attached to your corporate network – and also ensure they are only used for legitimate processes:
You can control device access privileges – to help eliminate the risk of data loss or the introduction of malware from unauthorised devices. Access privileges can be set up according to the type of device, its bus or a specific device’s serial number.
To help ensure your users are productive during working hours – and your ‘data in motion’ policies are complied with – Device Control also lets you specify the times during which specific controls are applied.
Controlling web usage
Web Control functions give you an easy way to monitor and filter your users’ web browser activities – according to category, content or type of data. It’s easy to prohibit, limit, allow or audit your users’ activities on individual websites or categories of sites, such as games websites, social networks or gambling sites. Web Control helps to ensure users are not able to access infected sites or inappropriate content – and it helps to boost day-to-day productivity.
Kaspersky Endpoint Security for Business SELECT includes an easy-to-use management console that gives you centralised control over virtually all Kaspersky security applications and features. This single console –Kaspersky Security Center – gives you granular-level management of Kaspersky security across your corporate network.
The following Kaspersky applications are all included within Kaspersky Endpoint Security for Business SELECT: