IT Central Station is now PeerSpot: Here's why
2022-04-25T21:05:00Z

What to choose: an endpoint antivirus, an EDR solution or both?


Hi community professionals,

I am looking for your advice on whether it makes sense to use both an endpoint antivirus and an EDR solution simultaneously? What are the pros and cons of using each one or both simultaneously?

*In terms of products, I've been looking at CrowdStrike Falcon, Microsoft Defender for Endpoint, and ESET Endpoint Security.

Thanks for the help!

PeerSpot user
Guest
55 Answers

ChandanMunshi - PeerSpot reviewer
Top 10Real User

EDR (or XDR) is the new coinage for endpoint security technology. 


Although those good old days antivirus software were doing the same thing, signature-based detection and response against that defection. But the modern threat vector has changed a lot and everything is quite complicated these days. So, the protection mechanism also. 


Almost all leading cyber security software vendors have come up with newer versions of endpoint protection, sometimes with AI as well. 


So, if there is an option, it is always better to go with EDR of anything "*DR". But keep in mind that cyber security has to be implemented in every layer of ISO. 

2022-04-27T13:18:43Z
Alex S - PeerSpot reviewer
User

The “Antivirus” protection technology is replaced by EDR which does include a modern version of “antivirus” along with other ways of device protection. 


Multiple vendors provide EDR: Trend Micro, Cisco, etc.


The more current technology is XDR.

2022-04-27T01:35:57Z
reviewer1406157 - PeerSpot reviewer
Top 5Real User

Next-Generation Antivirus (NGAV) uses a combination of artificial intelligence, behavioral detection, machine learning algorithms, and exploit mitigation, so known and unknown threats can be anticipated and immediately prevented.


Endpoint detection and response (EDR) is a solution that combines data collection, data analysis, forensics, and threat hunting, with the end goal of finding and blocking any potential security breaches in due time.


For the current attack landscape, you need both NGAV + EDR in a single product for better protection & remediation.


but the current trend is


XDR (Extended Detection and Response) collects and automatically correlates data across multiple security layers – email, endpoint, server, cloud workload, and network. This allows faster detection of threats and improved investigation and response times through security analysis.

2022-04-28T05:31:48Z
ArindamPal - PeerSpot reviewer
Real User

Antivirus lifeline (as a separate tool) is limited now. 


All the products are now combining EPP and EDR into a single solution. I would rather prefer to go with XDR solutions which will help to detect and as well as remove the existing one from the system.

2022-04-27T13:30:38Z
Carsten Dan Petersen - PeerSpot reviewer
User

If you look at a product like SentinelOne, it is both EPP and EDR (and much more...). In that case you only need this single product.

You could take a look at this short explanaition on YouTube: EDR? EPP? Both?!? See how to explain SentinelOne in just 2 minutes

2022-04-26T07:14:32Z
Buyer's Guide
Endpoint Protection for Business (EPP)
June 2022
Find out what your peers are saying about CrowdStrike, SentinelOne, Microsoft and others in Endpoint Protection for Business (EPP). Updated: June 2022.
610,190 professionals have used our research since 2012.