Kaspersky Next EDR Optimum Reviews

When it comes to endpoint security requirements, we work with Trend Micro most of the time; currently, my focus is mostly on Trend Micro or Kaspersky.

Mostly, when we work with Trend Micro, it is about two products: either XDR solutions for endpoint security, or we work with Deep Security solutions for vulnerability management.

Our clients usually wish for a few things and maintain a long wish list; they want everything in one product, which is not possible. Sometimes, they do ask for the encryption feature, which Kaspersky used to have but does not anymore. Consequently, they sometimes turn to Trend Micro, but Trend Micro's encryption is not as strong as it should be for a dedicated solution.

Kaspersky Endpoint Detection and Response Optimum has the automated response feature which reduces manual tasks. Endpoint Detection and Response has more advanced features compared to their previous products, such as behavior analysis, machine learning, and sandboxing to detect malware and other kinds of viruses. They also included zero-day attack monitoring at the endpoint activity. The automated response in Endpoint Detection and Response stops attacks and isolates devices that have been attacked, quarantining corrupted files, which is a significant improvement over previous products.

For Kaspersky, they have advanced threat detections, indicators of compromise scanning, plus artificial intelligence learning, which is being used in all kinds of solutions these days. They have automated and guided responses in Kaspersky Endpoint Detection and Response Optimum. They provide integrated protections and prevention with multi-layered anti-malware, which makes clients want to go for it. They also offer a centralized console with different deployment options, whether on cloud or on-premise depending on the client's need, along with workflows to help small security teams operate efficiently.

The reporting part in Kaspersky Endpoint Detection and Response Optimum is quite good; you can get reports through email and alerts on your mobile if configured with the solution. The reports are comprehensive and very strong.

We did work with one of our clients who required mobile security solutions. In my opinion, Trend Micro, when we went through the POCs and other components, we did not find it very strong as far as mobile security is concerned. I think Kaspersky is much better than Trend Micro when it comes to mobile security solutions.

From an outside perspective, Kaspersky Endpoint Detection and Response Optimum looks pretty strong and comprehensive. The main improvement would be if they could decrease the cost, as it would be great for clients since it is quite expensive now compared to when it used to be cheaper.

The key competitor for Kaspersky Endpoint Detection and Response Optimum is Trend Micro. Trend Micro is the only competitor in the market right now.

I would say both Trend Micro Endpoint Detection and Response and Kaspersky Endpoint Detection and Response Optimum are quite similar; I cannot say that one is better than the other. The difference is mainly in cost; Trend Micro has mostly moved all their products to the cloud, offering no on-premises products now, whereas Kaspersky is still in a transition phase providing both on-premises and cloud solutions. Many clients prefer on-premises as it is less expensive compared to cloud.

I have been using Kaspersky Endpoint Detection and Response Optimum for about seven to eight years, almost.

I would rate stability for Kaspersky Endpoint Detection and Response Optimum as nine; it is pretty stable, a very good, stable product.

Kaspersky Endpoint Detection and Response Optimum can expand from Endpoint Detection and Response to Extended Detection and Response and then threat intelligence solutions; it is very scalable as you can add a lot.

For technical support, Kaspersky provides two kinds: purchased support for real-time assistance and normal support during working hours. If you are a Kaspersky client, you can lodge a complaint through their portal; they get back to you but sometimes take time, so you could say it is a fifty-fifty chance.

Positive

In the past, we used to work basically with Kaspersky as they had three or four different products such as Select, Advanced, and then Total, and then Extended Detection and Response and Endpoint Detection and Response. Recently they actually merged these products and removed Select and Advanced from their portfolio, and it is Endpoint Detection and Response now. They are trying to match names with other vendors as well; for example, Trend Micro does not call it endpoint security; they call it Extended Detection and Response solution, the same way Kaspersky is doing that.

The initial setup for Kaspersky Endpoint Detection and Response Optimum is not complex; they must have a strong server due to the sandboxing requirement. If you have the required hardware available, then deployment or installation is not a big problem; it is quite easy.

I am still attached with Trend Micro, as well as Kaspersky, too, but honestly, I am not paying too much attention to endpoint security these days. I am working on different cybersecurity solutions such as Domain Name System security and other solutions.

Trend Micro Extended Detection and Response is correct.

They do have that; it is correct, the full name is Trend Micro Managed Extended Detection and Response. It is a Managed Detection and Response solution.

It depends on the requirement from the client, to be very honest; normally, the clients over here do not like to give their data centers to third parties, so mostly it is just between local vendors and the client. Most of the time it is just deployment, installations, and technical support for a whole year long. We are trying to get them to build a Security Operations Center in our environment to provide them a twenty-four seven Security Operations Center solution as well, or if they do not want to go local, they can go to the Trend Micro Mobile Device Management solutions, but it is not a very sellable solution, not in Pakistan.

Cloud deployment can be the client's private cloud, or it can be a third-party cloud; it does not matter.

I have been recommending Kaspersky Endpoint Detection and Response Optimum for the last twenty years. I rate this review an eight overall.

The main use case is attractive for customers because the endpoint detection and response system helps with patch management and remote software. It has many ITSM feature sets, which has been an attractive feature for customers because they don't require too many tools. One single endpoint can take care of multiple things.

Automated response capability definitely helps. Writing playbooks may require some technical expertise, but that becomes an attractive feature set on the security point.

Machine learning and behavioral analysis features are quite effective and help in preventing threats beforehand. Before things get out of hand, it helps customers ensure that their assets are secured.

If one is familiar with the Kaspersky product suite and the integration is with Kaspersky or a SIEM product, the integration is straightforward without many challenges.

The reporting system is good, but it can be quite tricky for customers to get the reports. Unfortunately, Kaspersky UI is something they need to work upon. It's not as simplistic or user-friendly as other competing products such as Sophos or Check Point.

The UI they have, while they have tried to make it quite simple on the cloud, the KMC is still comprehensive but complex for many admins. They could follow their cloud UI pattern, which would make life easier for customers.

In general, the main area for improvement is UI. This is the main concern so far.

Tech support from Kaspersky is a place where they could improve. The issue with support is getting hold of the support can be taxing at times. The overall turnaround time in some cases can be quite high.

I've been selling and working with Kaspersky Endpoint Detection and Response Optimum for about 18 months now.

Deployment is straightforward. One of the best parts about Kaspersky is you can roll out the endpoint application via remote discovery. The network discovery tools they have make deployment easier. Even without an Active Directory or an RMM tool, you can still deploy Kaspersky Endpoint Detection and Response Optimum quite easily compared to other solutions.

For both cloud and on-premises, it is quite easy to deploy Kaspersky Endpoint Detection and Response Optimum.

Stability would rate at nine out of ten.

The scalability of Kaspersky Endpoint Detection and Response Optimum rates at nine.

When comparing Sophos Central Intercept X Advanced with XDR, Kaspersky Endpoint Detection and Response Optimum, and Check Point Harmony, the key feature that stands out for Kaspersky is the list of features they bring to the table. On the security point, all three are almost at par, but when it comes to add-on features such as remote assistance, remote software deployment, and patch management, that makes Kaspersky stand out.

On pricing, Kaspersky is quite aggressive, giving strong competition to both Sophos and Check Point.

We mainly work with Sophos, Kaspersky, and Check Point. We work with Harmony Endpoint and Email Security from Check Point. From Sophos, we work with the entire suite of 18 products. With Kaspersky, we mainly focus on the endpoint or the EDR, and their training suite. For EDR, we work with Kaspersky Endpoint Detection and Response Optimum. These are the main features for which customers choose Kaspersky. Overall rating: 9/10.

With Kaspersky Endpoint Detection and Response Optimum, I use it in enterprise environments in my country for medium and small businesses, up to 200 endpoints, 100 endpoints, deployed on Windows, Windows Professional and Windows Server domain.

The best features of Kaspersky Endpoint Detection and Response Optimum are its precision and accuracy in detecting malware. I have experience with its response to zero-hour detection. In the past month, we encountered an unknown type of malware, but the behavior was sufficient for Kaspersky to isolate the network based on this behavior, which proved very efficient.

I utilize the automated response features, which have helped me save time and identify unrecognized activities inside my network.

I do not use the security for mail server with Kaspersky Endpoint Detection and Response Optimum version endpoint EDR, as I have never used security for mail.

A significant issue for me is that I work with SonicWall, and I cannot integrate Kaspersky with SonicWall's Security Operation Center. This integration limitation is problematic for me, which is why I compare the Capture Client with Kaspersky.

As long as there are problems with products from Russia, many more issues will arise. It is difficult because it is a political problem between US government and Russian government. SonicWall can integrate with other products such as Sophos, SentinelOne, and several others, but not with Kaspersky.

I have been using Kaspersky Endpoint Detection and Response Optimum for about eight to ten years.

The technical deployment is easy, but when we have a large number of computers, it becomes slow. The data in the console is not refreshed quickly. The deployment process becomes slower with a larger number of machines.

The support of Kaspersky rates a five out of ten. The response time is not very fast, and many times the answers are not very precise. Compared to other solution providers, the responses are not very clear when we need support.

Neutral

Before implementing Kaspersky Endpoint Detection and Response Optimum, we used Symantec.

Kaspersky Endpoint Detection and Response Optimum does integrate with other solutions, apart from the SonicWall SOC.

I have experience with both Kaspersky Endpoint Detection and Response Optimum and SonicWall. Based on my experience, I rate Kaspersky Endpoint Detection and Response Optimum an 8 out of 10.

My main use cases for Kaspersky Endpoint Detection and Response Optimum include Patch Management and Endpoint Encryption.

I utilize device control as an additional feature.

Threat Response Automation in Kaspersky Endpoint Detection and Response Optimum has significantly impacted my security by streamlining the response processes to threats.

Regarding the features of Kaspersky Endpoint Detection and Response Optimum, I find the most effective ones are the threat response tools.

Threat Response Automation in Kaspersky Endpoint Detection and Response Optimum is quite effective for enhancing security.

For improvement, I recommend automating the deletion of licenses when uninstalling Kaspersky Endpoint Detection and Response Optimum.

The product could be improved by resolving the problem with uninstalling devices. The uninstallation needs better handling, specifically with automatic license deletions.

There isn't anything else that should be improved in Kaspersky Endpoint Detection and Response Optimum beyond that issue.

I have been using it for 10 years.

The integration of Kaspersky Endpoint Detection and Response Optimum into my existing infrastructure is smooth and straightforward.

I have not faced any issues with the stability of Kaspersky Endpoint Detection and Response Optimum.

Kaspersky Endpoint Detection and Response Optimum is scalable for my environment.

Approximately 150 users in my company are working with Kaspersky Endpoint Detection and Response Optimum.

I plan to increase the usage of Kaspersky Endpoint Detection and Response Optimum in the future.

I have contacted Kaspersky support once.

Positive

I am not using any other Microsoft solutions.

The setup experience for Kaspersky Endpoint Detection and Response Optimum is easy. I would rate it a 9 out of 10 for ease of setup.

The deployment takes approximately five to ten minutes for endpoints.

I have observed value for money from Kaspersky Endpoint Detection and Response Optimum. It provides good value for money since implementation.

Kaspersky Endpoint Detection and Response Optimum is reasonably priced for the market.

I do not know the exact cost of the license per endpoint or annually.

I have no knowledge of other tools.

For those who want to use Kaspersky Endpoint Detection and Response Optimum, I recommend considering its features and performance.

I do not have Windows 11 or Windows Server.

I would rate Kaspersky Endpoint Detection and Response Optimum a perfect 10 out of 10.

Positive

I am using Kaspersky Endpoint Detection and Response Optimum as an endpoint solution to protect our desktops and endpoint devices.

It protects against malware and secures the network. The EDR has the ability to block abnormal behavior. Behavior analysis will block and audit to do forensic analysis in case of threats. It fulfills security and protection requirements against newly discovered malware, especially ransomware attacks. It includes Managed Detection and Response for monitoring and alerting against abnormal behaviors with centralized reporting.

To increase the benefits of the product, Managed Detection and Response (MDR) service from Kaspersky should be included. I use this to monitor devices from a centralized location and report any abnormal behaviors.

I have experience with this solution for more than five years.

The solution is highly stable, scoring more than nine in terms of protection. However, if a zero-day attack occurs, this could impact the rating, similar to the CrowdStrike issue three or four years ago.

It is highly scalable, rated as nine, depending on the number of licenses purchased.

I rate the technical support between seven and eight out of ten for Kaspersky.

Positive

I used Symantec more than twenty years ago. I am not familiar with Symantec's new products, however, they work on the same concept of centralized protection and enhancing EDR or XDR solutions.

The initial setup was supported by a good support team and a supportive company. It requires an ongoing effort to configure and comply with new settings the vendor updates. 

The deployment takes between one to two days of studying necessary components, with full deployment completed in about a week for around two hundred endpoint devices.

The deployment was a joint effort between our technical team and the reseller in our region, who provided technical support and guidelines.

It is difficult to measure the ROI directly, however, maintaining security ensures that revenue streams from other operations remain uninterrupted by threats.

The value from Kaspersky is very good, especially since we recently got a special deal.

Based on my experience, I recommend this solution, though there might be better solutions in the market. 

I rate the overall solution as nine out of ten.

I use Kaspersky to monitor parameters, the device, and users. I modify the web filter and device controls to manage the web and device components according to business needs.

The most advantageous aspect is tracking and taking action automatically. It monitors vulnerabilities and takes action, such as blocking USB or devices from the network, to avoid vulnerabilities or ransomware. I use Kaspersky to protect the domain and the network, allowing or denying web categories according to business needs.

Occasionally, I encounter connection problems, and the signal is not very good.

I have about 34 years of experience.

I find the solution very easy and very stable.

It is very easy for me to scale.

I worked at Check Point and CrowdStrike with limited privileges. I switched to Kaspersky for its broader capabilities in monitoring and taking actions on devices.

It was very easy for me to set up. I downloaded the latest version, set it up automatically, or sent it via mailbox to the end user.

Kaspersky is very cheap compared to solutions like CrowdStrike or other vendors. While each solution has strengths and weaknesses, Kaspersky offers better financial aspects.

I have used solutions like CrowdStrike and Check Point before.

Eighty percent of the functions are compatible with Kaspersky's AI features, which are amazing.

Positive

We use it to direct detected computer malware, analyze and diagnose the problems. We can also link it with the antivirus for malware and virus detection.

I mostly like how they capture particular files and submit them to other files, and they have the solution console. And for example, we are using the one in for

an application, like, on the RansomFree, if there are any vulnerabilities in patches coming, in the future, they fix these.

For improvement, they should make the scanning process faster. The scanning and updating take more time.

I have been using Kaspersky Endpoint Detection for six months. 

I would rate the stability of this solution nine out of ten. The customers use Endpoint Detection and Response Optimum as it is very stable.

The scalability of this solution is great, but Defender is better.

However, once one of our systems got affected by malware, updating and saving our site through Kaspersky helped us.

The technical support team is good. We had to create a ticket now. Once we created a ticket, and then we need to send the full consolidated part or the infection computer or infection assistant. Then they will find a solution.

Positive

The initial setup was straightforward. Since we were already familiar with the configuration and sector, we didn’t find the product setup difficult. The solution was deployed within fifteen minutes.

The deployment was done by a vendor team from the client side.

Kaspersky gives a consolidated price with a good solution. If we choose something else, we need to add other options on our own.

Yes, we used McAfee but it isn't listing anymore, so we switched to Kaspersky.

I rate the overall solution a nine out of ten.

I recently conducted a demo for a client.

The customer's environment had 350+ endpoints and Kaspersky Business Select was in use. They needed something efficient enough for their environment to detect and respond to critical ransomware attacks. The most critical part for the customer was how it will isolate a single PC from the environment remotely and how it will help get the root cause analysis without having to worry about the virus penetration in the network? 

I suggested Kaspersky EDR-Optimum along with the existing Kaspersky Business Select solution to get a better and comprehensive view of network attacks and get more control in case of a cyber attack. The customer was quite satisfied with the product in the demo and is now a happy customer of Kaspersky EDR-Optimum.

Since the deployment of the solutions, the organization has been proactive in its IT operations and has tackled quite a few critical scenarios since the solution has been operational.

The IT team now responds to threats and it has changed the IT security workflow. Instead of having to wait for alerts, the IT security team can actively hunt for threats by proactively scanning endpoints to spot anomalies and security breaches.

Moreover, the automated threat identification and response helps them to utilize their time effectively and respond to threats without downtime and disruption of the business operations.

The most important feature is its capability to remotely monitor the network and, in case of attack, remotely isolate the network. We can work on getting to the root cause of the attack without worrying about the attack penetrating the network.                                                                                 

A great catch for EDR is its excellent threat hunting capability. Using a centralized database and a broad range of automated responses helps organizations to avoid traditional and hectic remediation processes.

In terms of the Pakistani market and talking from a salesperson's perspective, I'd suggest that Kaspersky introduce a bundle of Kaspersky EDR-Optimum or Kaspersky EDR-Expert along with its Business Select/Advance suite.

When I say this, I understand the Pakistani market and how slow and less eager organizations are to invest in IT and internet security. Most of them don't invest until or unless they face any attack or network failure. 

However, in addition to the product, Kaspersky should give EDR-Optimum on the cloud for less than 300 users as well, in case any customer has its whole network on the cloud. That way they can easily use it.    

I have been pitching the solution to customers for over a year or so. The solution is comprehensive enough for customers to buy it.

The product is a market-leading product, so there is no doubt about its stability.

The solution is highly scalable. You can also use it in "Pay/additional user" mode.

Support is excellent. The tech comes on time.

Positive

The EDR project was initiated for the first time, and the organization did not have any other EDR solutions before.

The initial setup is easy and simple.

We, as cyber security consultant vendors, deployed on our customer's network.

The ROI can be justified in a short period of time.

The pricing is economical as compared to other options, and licensing is a subscription based on the user/year.

We evaluated Symantec EDR as well, however, it was expensive.

When you deploy it, use it with its full potential. Otherwise, it won't give perfect results.