Kaspersky Endpoint Detection and Response Expert Reviews

We primarily use the solution for endpoint protection. 

In the software that I use at Kaspersky, we have some options that we made to our client LiDAR for the block patching, and we can close the high chain. 

The endpoint protection can update the patching from this server directly to the client, and every employee. 

The performance for Kaspersky is good, and it's not impacted our client performance.

It offers good blocking capabilities.

The upper patching is excellent.

We have some problems with LiDAR. When we do the install, or reinstall the server console, or server endpoint protection, I don't know why we need to reinstall it. 

Even though we installed, or did a new install for the server endpoint protection features, we use some small PDO or some patching to upgrade it in the employee protection clients if that's in.

I need a local expert. I'm looking for more experts to be able to apply it to certain solutions that we understand already. In order to meet our requirements, we need more experts. 

There are some cases that take three days to deal with. It's too long.

I've used the solution for as long as I've been at the company - about one year. 

While the client is stable, for the console management, we have some problems with LiDAR. Sometimes, we installed it and had a problem and we need to reinstall it. In the last hour, the client can not do the configuration yet we need to add clients into the platform.

We don't find it to have enough space.

We have below 100 people on the solution.

Technical support is not too bad. I can say that it is in the middle of the road. They can be slow to respond.

The initial setup is very straightforward. 

We used either an integrator or consultant. We had help from a third party and didn't handle the entire implementation ourselves. 

The pricing is good. I'd rate it four out of five in terms of affordability.

We did compare Kaspersky EDR with other software vendors.

I'm a customer and end-user.

I would rate the solution a seven out of ten. If we had more local expertise and better support, it would be better.

We are using it to protect our user end. For the server-side, we are using Trend Micro.

It is easy to manage. 

The initial setup is simple. 

It is stable. 

We have local support available to us.

I could be covering more devices, for example, the XDR. If it covered more products, it would improve the XDR.

I've been using the solution for three to four years. 

It is stable and reliable. 

We are not facing any major issues regarding the protection of the endpoints. There are no bugs or glitches. It doesn't crash or freeze.

Around 2,000 people use the solution. We do not plan to increase usage.

We have a local company here in Pakistan that we get support from.

We also use Trend Micro.

The initial implementation process is easy and very straightforward. It's not overly complex. It only takes one to two days to handle the complete deployment.

I'm not sure about how the licensing works. It may be per user. I'm not certain. 

I'm not sure which version of the solution we're using. I don't have that information. 

I'm not directly using this Kaspersky solution. The other team is managing the solution, and that's why I don't have much personal experience. I do not manage it directly.

I'd recommend the solution to other users and companies. 

I'd rate the product seven out of ten.

We are using Kaspersky Endpoint Detection and Response for protecting our clients and our systems from digital threats. For example, our operating systems.

The most valuable features of Kaspersky Endpoint Detection and Response are the threat detection technologies, and activity monitoring and support tools. Additionally, the port and USB security, and antivirus are effective.

The installation process could be more streamlined.

I have been using Kaspersky Endpoint Detection and Response for approximately four years.

Kaspersky Endpoint Detection and Response is stable.

The solution is scalable. We are able to upgrade modules and we have not had any problems.

The initial setup of Kaspersky Endpoint Detection and Response is simple but the time of installation could be quicker. We set up our Kaspersky Endpoint Detection and Response server and our clients installed it on their end.

We have been satisfied with the license of the solution.

I rate Kaspersky Endpoint Detection and Response a nine out of ten.

We are Kaspersky partners and I'm an endpoint specialist. 

The major features I really like are behavior detection and the firmware scanner. The solution also has great threat prevention. Machine learning is also very good as is the real-time protection. The best thing is you can also get a vulnerability report. There are a couple of other features EDR has that are not available in other solutions and that includes the system-level device for controlling the UI which enables control of applications at the location level. There is also the IoC scanner that Symantec doesn't have. Finally, the threat intelligence portal gives me global visibility into threats and their interconnections which is great. 

The one thing Symantec has that EDR lacks is device control. I think Kaspersky has to increase its features when it comes to antivirus control. I'd like to see an increase in the 30-day retention period. 

I've been using this particular solution for 3 years but have used other Kaspersky solutions for over 15 years. 

The solution is stable. 

The scalability is good. Scaling is a matter of creating a new server and replicating all the data. It's not a big issue to do the migration or to upgrade hardware. We currently have around 20,000 users with that number increasing every day. 

The technical support is really bad. They have three models of support and if you have the regular level of support, it can take days to get a response. It forces you to pay extra to get premium support, and then you hear from them within two hours. 

The initial setup is straightforward. If you're deploying for customers then the deployment time will depend on the size of the organization and the level of preparation that has been done in advance. If you have 10,000 users, deployment will take about a day if everything is ready.  

Licensing costs are very reasonable. This is not an expensive solution. 

There are some features lacking in this solution and if I compare it with CrowdStrike or Microsoft, they are both better solutions than Kaspersky. I rate this solution eight out of 10. 

We primarily use the product as a security solution. We use it to protect the company's inner resources to ensure secure access to endpoints by only authorized users. We make sure only the right person can access the right resource.

The product is very easy to use. 

The solution is stable and reliable. 

It can scale well. 

The solution is expensive. It would be ideal if they could lower the costs. 

I've been using the solution for two years.

This is a stable solution. There aren't bugs or glitches. It doesn't crash or freeze. It is reliable. 

This is a scalable product. We can expand it as needed. 

We have around 100 users on the product.

As we increase personnel, we will increase usage. 

Typically, our technical teams deal with issues. I've never dealt with technical support from Kaspersky directly.

We did not use a different solution in the past.

The initial setup was handled by our technical team. I was not a part of the initial implementation process. 

We had an internal technical team handle the setup. I don't have many details about the process. 

We pay a yearly fee for the licensing of the product. We find it to be expensive, however, we need to use it as we need the security it provides. 

We are using the updated version of the solution, however, I'm not sure which version number we are on. 

I'd recommend the solution to other users. 

I would rate the product eight out of ten. We are happy with its capabilities in general. 

Kaspersky EDR is a targeted solution that collects telemetry and forensics data as well as end-to-end IoCs. It does not use any signatures.

The most valuable feature of Kaspersky EDR is its simplicity. The console is easy to use and not very complex.

Kaspersky EDR currently has limited OS support. They only focus on Windows Server and Windows. Kaspersky recently released a Linux version, but it's rudimentary. It does not have any advanced features available on Windows platforms. They should increase their footprint on the Linux side and support other operating systems on the market, like MacOS.

I have been using Kaspersky EDR for about four or five years.

Performance is one area where Kaspersky has room for improvement. The solution must be fast when it's acquiring telemetry data because the attack surface is unforgiving. The solution must be extremely fast with a high response time.

Kaspersky is scalable, but it lacks built-in high availability and disaster recovery. Currently, you need a third-party solution to provide high availability.

I rate Kaspersky support eight out of 10. We have never had any serious issues with their support. They take some time to respond, but they always provide the best solution.  

Positive

Setting up Kaspersky isn't straightforward, but their guide is good. The documentation is fairly well-defined, so we just need to follow that. At the same time, it isn't easy because sometimes there are errors. I rate Kaspersky EDR six out of 10 for ease of installation.

The license is competitive. Pricing is another Kaspersky advantage.

There is a lot of competition in the EDR category. As resellers in the industry for so long, we're aware of the various products to choose from. Kaspersky's strong point is detection. They have a huge threat intelligence and R&D team. Their threat detection is among the industry's best. Their products are generally effective in guessing attacks or detecting different types of unknown malicious techniques.  They also have a great sandbox with their EDR solution.

Their weakness is performance, but detection is one of the best in the industry, if not the best. Kaspersky is always at the top of any third-party analysis of EDR products.

I rate Kaspersky Endpoint Detection and Response eight out of 10. 

Our company uses the solution to provide security protection for clients in higher education and in the Ethiopian financial industry such as bankers and microfinance. 

The solution provides high-end security that is critical for financial institutions and bankers. 

The interface is intuitive with no issues. 

Documentation needs to be simplified and improved so that it provides good product awareness for end users like the documentation provided by CheckPoint. 

Vouchers and training should be offered to enhance the solution's reachability. Certification exams should be accessible and priced reasonably. 

I have been using the solution for one year. 

The solution is stable. 

The solution is scalable. 

Technical support is good and provides well-documented materials. 

The setup and installation are not complicated. 

Our company implements the solution for customers. 

The solution is expensive in comparison to CheckPoint and Fortinet. 

Our company purchased a three-year license that included a warranty and technical support. 

Our company is moving to CheckPoint because we are the only premium partners in East Africa so that increases our market value.

We also like FortiEDR for endpoint securities. 

I recommend trying the solution because of its security sensitivities. 

I rate the solution a seven out of ten. 

Clients are using this product to protect their desktops and laptops and to respond adequately when some vulnerabilities are detected as exploited.

We like the automated change of policies, given some scenarios. It is wonderful. You can rely upon your automated policies being activated if you need to. If you are under attack, or maybe some ransomware is spreading across your network, and you want your endpoints to become more secure given that threat, you get good protection. It's maybe the most important feature of Kaspersky Endpoint Detection and Response.

It's easy to set up. 

The solution is scalable.

It's easy to manage and monitor the endpoints. 

I would like better integration with other products. For example, I would like to have another view in SolarWinds or Datadog. Integration is not easy. I'd like it to be simplified. 

We do not need any additional features. 

The business plan maybe could be improved. They need to change the way they sell the product. They could be better friends with their partners. A partner is not somebody who sells this product. It is usually somebody who manages this product for the end user or the end company that is predicting the assets. The role that a partner plays in this interaction is very important. They need to work to build that relationship to benefit the solution and the client. They should also offer better margins.

We've been dealing with the solution since 2019. It's been around three years. 

It is a very stable solution. The most important thing about stability is not if the product runs or stops running, it is the time window you need to be prepared for new threats. They offer good protection, which makes the product very stable. Kaspersky's usually the first in distributing the indicators of compromise of the newest threats.

The solution can scale well.  It is easy to deploy and manage a large number of endpoints running just a few tasks. You are very aware of what is happening with the threats in your institution. There's a lot of visibility.

Technical support can be improved. When you need support, when you call for support, and you present the evidence in a ticket, they always come back with more questions. They ask you for more evidence, and you have to go and collect it. You get to a point where you want to say, "Oh, just forget it, I don't need more support from you. You always ask me for more, more, more data." 

I would like to see a solution. I don't want to do all of this legwork and not get any help. 

Neutral

The console is very easy. The deployment is easy as well. If you have an active directory or something like that, or if you have previously installed the Kaspersky network agent, it's quite simple. If not, even if you don't have any of those, maybe if you have some software policy to deploy over your assets, it should also be easy. Otherwise, you have to go endpoint by endpoint running the agents. That can take time.

The maintenance is pretty straightforward. If I have 5,000 endpoints, I need one engineer to handle the console installation for, maybe a week's worth of work. The endpoints could take two or three people to deploy in the company. If you can centralize the deployment, it will only take two or three days for one engineer to handle the setup.

I don't have any details in regard to ROI. 

We are a partner of Kaspersky.

We always work with the latest version of the solution.

It's a wonderful product if you have a proper partner to handle it. If you let the product run by itself, by itself, it won't protect you. You need someone on this product with a hand on it every day, checking policies and seeing how it works. That's the only way to be protected from threats.

I'd rate the solution nine out of ten.