Kaspersky Endpoint Security for Windows (for workstations)

Kaspersky Endpoint Security for Windows (for workstations) delivers effective Windows workstation security – by combining award-winning anti-malware technologies plus endpoint controls and data encryption in a single, integrated application. All Windows workstation antivirus, controls and encryption functions can be managed from Kaspersky Lab’s centralized management console – Kaspersky Security Center – that helps to save you time during deployment and everyday administration tasks.

 

Multi-layered Windows workstation antivirus

With signature-based security technologies, heuristic analysis and cloud-assisted detection, Kaspersky Endpoint Security for Windows provides award-winning protection against all classes of malware – including new and evolving threats.

Endpoint controls – deliver even greater Windows workstation security

Integrated Application Control, Web Control and Device Control functionality make it easy for you to:

  • Control which applications are allowed to launch on your corporate network
  • Control how users are allowed to access the Internet
  • Control how devices can be attached to your corporate network

Strong encryption – protects sensitive information

Flexible data encryption functionality makes it easy to encrypt individual files and / or entire hard disks. If corporate files or systems are lost or stolen, unauthorized users will not be able to access the encrypted data – so your confidential corporate information will be protected.

Efficient security – preserves more of your IT infrastructure’s performance

Because all Kaspersky Lab security solutions are architected 'from the ground up', each function and application is tightly integrated – to ensure you benefit from world-class security that makes efficient use of your computing resources.

Centralized management console – simplifies administration

You can manage every anti-malware, endpoint controls and data encryption function via Kaspersky Lab's integrated management console – Kaspersky Security Center. Centralized management of deployment, security policies, administration and reporting helps to reduce the time you spend on managing your security.

Get protection for your Windows file servers too

In addition to protecting your desktops and laptops, Kaspersky Endpoint Security for Windows also includes anti-malware, firewall & Host-based Intrusion Prevention System (HIPS) for Windows file servers*. For more information, please click here.

*Kaspersky Endpoint Security for Windows (for file servers) is not included in Kaspersky Endpoint Security for Business – CORE.

Select the security solution that fits your business – and get a FREE trial

Kaspersky Endpoint Security for Windows (for workstations) is included in:

To download your FREE trial of Kaspersky Total Security for Business or Kaspersky Endpoint Security for Business, please click here.

If you’re currently running Kaspersky Open Space Security, please click here for information on how to upgrade.

Features

One application – with multiple security technologies

Integrated Windows workstation security

Whereas some other products may require you to purchase multiple applications – each with a different management console – Kaspersky Endpoint Security for Windows is a single application that covers a wide range of vital security functions:

  • Anti-malware – plus firewall & Host-based Intrusion Prevention System (HIPS)
  • Endpoint controls
    • Application Control
    • Web Control
    • Device Control
  • Data encryption

Choose the modules you need

Kaspersky Endpoint Security for Windows is included within each of Kaspersky Lab’s integrated security solutions for business:

  • Kaspersky Total Security for Business (includes all Kaspersky Endpoint Security for Windows functionality)
  • Kaspersky Endpoint Security for Business – ADVANCED (includes all Kaspersky Endpoint Security for Windows functionality)
  • Kaspersky Endpoint Security for Business – SELECT (excludes data encryption)
  • Kaspersky Endpoint Security for Business – CORE (excludes data encryption and endpoint controls)

For more information about Kaspersky Total Security for Business and Kaspersky Endpoint Security for Business, please click here.

Rapid, easy deployment

Installation is far quicker than for many other security products. Because Kaspersky Endpoint Security for Windows is a single agent – and there's just one agent to install* – installation is much quicker than for many other security products.

For more information on installation and deployment, please click here.

*Although encryption functionality is delivered in a separate installation package, it can be automatically installed with Kaspersky Endpoint Security for Business – ADVANCED or Kaspersky Total Security for Business. So administrators only have to manage one task that automatically rolls out encryption and all other Kaspersky Lab endpoint security technologies that are included in their chosen tier of Kaspersky Lab endpoint security.

Simple upgrade path*

If your security requirements change, you can upgrade – to the next tier of Kaspersky Endpoint Security for Business or to Kaspersky Total Security for Business – and simply use a new license key to access the additional Kaspersky Endpoint Security for Windows functionality that your new tier provides.

*If you upgrade to Kaspersky Endpoint Security for Business – ADVANCED or Kaspersky Total Security for Business (from Kaspersky Endpoint Security for Business – CORE or Kaspersky Endpoint Security for Business – SELECT), you can deploy the encryption module without having to reinstall Kaspersky Endpoint Security for Business or Kaspersky Total Security for Business.

Anti-malware, firewall and Host-based Intrusion Prevention System

Multi-layered anti-malware

Kaspersky Endpoint Security for Windows combines signature-based, heuristic analysis and cloud-assisted anti-malware technologies – so you benefit from multi-layered Windows workstation security, including protection against the latest malware.

Improved security – that puts less load on your systems

Pattern-based detection delivers improved detection and smaller update files – so you benefit from better security and a lower load on your computing resources.

Cloud-assisted malware detection

Millions of consenting customers have opted in to let the cloud-based Kaspersky Security Network (KSN) collect data – about malware and suspicious behavior – from their computers. This real-time flow of data helps all Kaspersky Lab customers to benefit from a real-time response to new malware and a lower rate of 'false positives' – regardless of whether they’ve opted in to providing information to KSN.

Urgent Detection System

To help protect you against new threats – before a new malware signature has been released – Kaspersky Lab's Urgent Detection System database is continually updated with data about newly discovered malware. Because your security no longer relies on the distribution of signature updates, you benefit from near real-time protection.

Active Disinfection

Kaspersky Lab’s Active Disinfection feature works at the lowest levels of the operating system – to protect your Windows workstations against malicious code.

System Watcher

Kaspersky Lab’s System Watcher technology automatically maintains a log of your system and resources. If a malware attack affects the operating system, the system registry or an application, the malware will be quarantined and any changes caused by the attack will be rolled back to their earlier state.

Automatic Exploit Prevention

Automatic Exploit Prevention (AEP) technology helps to prevent malware exploiting vulnerabilities that are present in your operating system or applications. By monitoring the most frequently targeted exploit vulnerabilities, AEP provides an additional level of security.

Host-based Intrusion Prevention System

Kaspersky Lab's Host-based Intrusion Prevention System (HIPS) and personal firewall let you set parameters for an individual port, IP address or application.

Network Attack Blocker

Kaspersky Lab’s Network Attack Blocker monitors suspicious activity on your network – and lets you pre-define how your systems will respond if any suspicious behavior is detected.

Flexible Endpoint Controls

Controlling applications

Kaspersky Lab’s Application Control tools include Application Startup Control and Application Privilege Control – together with continuous application monitoring. Furthermore, Whitelisting Controls & Blacklisting Controls make it easy for administrators to set up and run a default allow or default deny policy.

Controlling the use of devices

Kaspersky Lab’s Device Control tools make it easy to manage which devices are allowed to access your corporate network. You can set up controls that are based on the time of day, geographic location or the type of device. Furthermore, you can align the controls with Active Directory – for granular administration and policy assignment.

Controlling Internet access

Web Control lets you set up Internet access policies and helps you monitor usage. Geographic and time-of-day controls may be aligned with Active Directory – to help in administration and policy setting.

Data Encryption

Strong encryption

Kaspersky Endpoint Security for Windows uses an AES encryption algorithm that has 256 bits of key length, to deliver strong encryption for your confidential information. If files or systems are lost or stolen, unauthorized users will not be able to access your encrypted data.

Full Disk Encryption

For encryption that's 'close to the hardware' – and to make it easy for you to run an 'encrypt everything at once' strategy – Full Disk Encryption (FDE) operates on the physical sectors of the disk.

File-Level Encryption

File-Level Encryption (FLE) helps you to enable secure sharing of data across your network. For additional security – when a file is encrypted – the original, unencrypted file can be wiped from the hard drive.

Encryption of removable media

To protect data that needs to be transferred on mobile devices, Removable Media Encryption carries out Full Disk Encryption and File-Level Encryption.

Simplified sign-on

Kaspersky Endpoint Security for Windows includes Single Sign-on – so, when a user switches on their PC and enters their user name and password, they’ll be able to access the encrypted data on their PC's hard drive. Single Sign-on helps to ensure the encryption & decryption processes are virtually transparent to the user – and that helps to boost efficiency and productivity.

‘Portable mode’ encryption

If you need to transfer sensitive data via email, the Web or a removable device, you can easily set up password-protected, encrypted, self-extracting packages of files and folders. A special 'portable mode' for File-Level Encryption on removable media helps enable the secure transfer of data – even onto computers that are not running Kaspersky Endpoint Security for Windows.

Accessing data after a system fault

In the event of a system fault – even if the operating system cannot boot up – special recovery tools can be used to decrypt the data.

Centralized management

Because every feature within Kaspersky Endpoint Security for Windows – plus many other Kaspersky Lab security applications that you’re running – can be set up and managed via Kaspersky Security Center, you benefit from an easy-to-use, centralized management console. With just one console to use, you won’t have to invest time getting to grips with a different management interface for every different security technology.

  • Deploy and manage Kaspersky Endpoint Security for Windows – plus other Kaspersky Lab applications – across your corporate network
  • Set anti-malware, endpoint controls & data encryption parameters – within a single policy
  • Generate a wide range of customizable security reports

For more information on Kaspersky Security Center, please click here.

System requirements

Hardware requirements:
  • Intel Pentium 1 GHz or faster
  • 1 GB RAM
  • 2 GB of free space on the hard drive
General requirements:
  • Microsoft Internet Explorer 7.0 or higher
  • Microsoft Windows Installer 3.0 or higher
  • An Internet connection – for activating the application and for updating databases & application modules
Operating systems
  • Microsoft Windows 8.1 Professional x86/x64
  • Microsoft Windows 8.1 Enterprise x86 / x64
  • Microsoft Windows 8 Professional / Enterprise
  • Microsoft Windows 8 Professional / Enterprise x64 Edition
  • Microsoft Windows 7 Professional / Enterprise / Ultimate SP0 or higher
  • Microsoft Windows 7 Professional / Enterprise / Ultimate x64 Edition SP0 or higher
  • Microsoft Windows Vista Business / Enterprise / Ultimate SP2
  • Microsoft Windows Vista Business / Enterprise / Ultimate x64 Edition SP2
  • Microsoft Windows XP Professional SP3 or higher
ENDPOINT SECURITY FOR BUSINESS - SELECT
ENDPOINT SECURITY FOR BUSINESS - SELECT

  • Award-winning, multi-layer anti-malware
  • Endpoint controls – Application, Device & Web
  • Mobile security & mobile device management... and more

Free TrialsBuy NowRequest a Demo
 
ENDPOINT SECURITY FOR BUSINESS - ADVANCED
ENDPOINT SECURITY FOR BUSINESS - ADVANCED

  • Rigorous anti-malware & endpoint controls
  • Data encryption – for added security
  • Vulnerability scanning & patch management
  • Systems management & IT efficiency tools

Free TrialsBuy NowRequest a Demo
 
TOTAL SECURITY FOR BUSINESS
TOTAL SECURITY FOR BUSINESS

  • Award-winning anti-malware – plus endpoint controls
  • Data encryption – to protect precious business data
  • Patch management – including automatic vulnerability scan
  • Efficiency-boosting systems management tools
  • Email security – to defend against spam and malware
  • Internet gateway security – for safer web access

Free TrialsBuy NowRequest a Demo