What is our primary use case?
Kaspersky Endpoint Detection and Response Optimum provide real-time monitoring and detection for different operating systems. It is compatible with Linux, and Mac can use the server. It offers real-time monitoring for antivirus, ransomware, and other intrusion attacks.
It also has EDR capabilities. I was initially looking for a solution with EDR, and I discovered that Kaspersky offers EDR, possibly through its EDR Optimum feature. We might consider acquiring this license or exploring other options like CrowdStrike or Clearix.
What is most valuable?
We find it particularly useful for enhancing the security of our endpoints and gaining real-time visibility and context during incidents.
Additionally, it offers features like system hardening, vulnerability management, patch management, and device control, which are not present in other solutions.
So, from our perspective, it ticks all the boxes. However, we are also considering other options like CrowdStrike or TrendPoint for extended detection and response capabilities.
What needs improvement?
For EDR, it should provide us with a comprehensive view. Currently, it gives us a process-oriented view, but we need a broader view like Crowdstrike. It needs to provide a complete picture, including IoT connections between devices, and it should be more intuitive.
Support can be considered another area for improvement. It could have faster response times.
For how long have I used the solution?
I have been working on this solution for three years. I'm using version 11.8 of Kaspersky Endpoint Detection and Response Optimum.
What do I think about the stability of the solution?
It's fine. It's good, but not completely stable.
I would rate the stability an eight out of ten.
What do I think about the scalability of the solution?
For scalability, we would need to request the vendor to increase the license or purchase an upgraded license file. It's a straightforward process, I believe, but it's not something I have personally experienced.
How are customer service and support?
The support team does respond to us, but it takes time. They are not instant; maybe on the second day they would be more helpful.
There is no live support available. Overall it's fine, but I would give them an eight. But considering the response time, maybe it's more like an eight if we prioritize faster support.
How would you rate customer service and support?
How was the initial setup?
I'm familiar with the product, so it's easy for me. Maybe a seven or eight. Although there is a lot of documentation, some areas could use improvement.
I use it more on a weekly basis, maybe twice a week. Since there are administrators responsible for daily administration and any antivirus solution, there are daily tasks for support and auditing purposes.
What about the implementation team?
For the new servers, the deployment process involved installation, configuration, and testing. We followed an implementation policy and defined tasks and pilot testing for about one to two weeks to ensure everything was working properly before moving to production. So this is all the process.
What's my experience with pricing, setup cost, and licensing?
The price is good, not too high. I would rate it an eight, like in the middle.
I would rate the pricing model a five out of ten.
Which other solutions did I evaluate?
We are evaluating our options to ensure we have the best solution for our needs. So we may acquire another license or explore different too
What other advice do I have?
I think for others; it is important to depend on and read different use cases. This way, they can evaluate the different solutions and capabilities.
It's stable, and Kaspersky has many years in the market. So there is trust, and they are reliable.
Overall, I would say it's an eight. It is a good solution for us, but there is still room for improvement.
Which deployment model are you using for this solution?
On-premises
*Disclosure: My company does not have a business relationship with this vendor other than being a customer.