Kaspersky Next EDR Optimum Reviews

When it comes to endpoint security requirements, we work with Trend Micro most of the time; currently, my focus is mostly on Trend Micro or Kaspersky.

Mostly, when we work with Trend Micro, it is about two products: either XDR solutions for endpoint security, or we work with Deep Security solutions for vulnerability management.

Our clients usually wish for a few things and maintain a long wish list; they want everything in one product, which is not possible. Sometimes, they do ask for the encryption feature, which Kaspersky used to have but does not anymore. Consequently, they sometimes turn to Trend Micro, but Trend Micro's encryption is not as strong as it should be for a dedicated solution.

Kaspersky Endpoint Detection and Response Optimum has the automated response feature which reduces manual tasks. Endpoint Detection and Response has more advanced features compared to their previous products, such as behavior analysis, machine learning, and sandboxing to detect malware and other kinds of viruses. They also included zero-day attack monitoring at the endpoint activity. The automated response in Endpoint Detection and Response stops attacks and isolates devices that have been attacked, quarantining corrupted files, which is a significant improvement over previous products.

For Kaspersky, they have advanced threat detections, indicators of compromise scanning, plus artificial intelligence learning, which is being used in all kinds of solutions these days. They have automated and guided responses in Kaspersky Endpoint Detection and Response Optimum. They provide integrated protections and prevention with multi-layered anti-malware, which makes clients want to go for it. They also offer a centralized console with different deployment options, whether on cloud or on-premise depending on the client's need, along with workflows to help small security teams operate efficiently.

The reporting part in Kaspersky Endpoint Detection and Response Optimum is quite good; you can get reports through email and alerts on your mobile if configured with the solution. The reports are comprehensive and very strong.

We did work with one of our clients who required mobile security solutions. In my opinion, Trend Micro, when we went through the POCs and other components, we did not find it very strong as far as mobile security is concerned. I think Kaspersky is much better than Trend Micro when it comes to mobile security solutions.

From an outside perspective, Kaspersky Endpoint Detection and Response Optimum looks pretty strong and comprehensive. The main improvement would be if they could decrease the cost, as it would be great for clients since it is quite expensive now compared to when it used to be cheaper.

The key competitor for Kaspersky Endpoint Detection and Response Optimum is Trend Micro. Trend Micro is the only competitor in the market right now.

I would say both Trend Micro Endpoint Detection and Response and Kaspersky Endpoint Detection and Response Optimum are quite similar; I cannot say that one is better than the other. The difference is mainly in cost; Trend Micro has mostly moved all their products to the cloud, offering no on-premises products now, whereas Kaspersky is still in a transition phase providing both on-premises and cloud solutions. Many clients prefer on-premises as it is less expensive compared to cloud.

I have been using Kaspersky Endpoint Detection and Response Optimum for about seven to eight years, almost.

I would rate stability for Kaspersky Endpoint Detection and Response Optimum as nine; it is pretty stable, a very good, stable product.

Kaspersky Endpoint Detection and Response Optimum can expand from Endpoint Detection and Response to Extended Detection and Response and then threat intelligence solutions; it is very scalable as you can add a lot.

For technical support, Kaspersky provides two kinds: purchased support for real-time assistance and normal support during working hours. If you are a Kaspersky client, you can lodge a complaint through their portal; they get back to you but sometimes take time, so you could say it is a fifty-fifty chance.

Positive

In the past, we used to work basically with Kaspersky as they had three or four different products such as Select, Advanced, and then Total, and then Extended Detection and Response and Endpoint Detection and Response. Recently they actually merged these products and removed Select and Advanced from their portfolio, and it is Endpoint Detection and Response now. They are trying to match names with other vendors as well; for example, Trend Micro does not call it endpoint security; they call it Extended Detection and Response solution, the same way Kaspersky is doing that.

The initial setup for Kaspersky Endpoint Detection and Response Optimum is not complex; they must have a strong server due to the sandboxing requirement. If you have the required hardware available, then deployment or installation is not a big problem; it is quite easy.

I am still attached with Trend Micro, as well as Kaspersky, too, but honestly, I am not paying too much attention to endpoint security these days. I am working on different cybersecurity solutions such as Domain Name System security and other solutions.

Trend Micro Extended Detection and Response is correct.

They do have that; it is correct, the full name is Trend Micro Managed Extended Detection and Response. It is a Managed Detection and Response solution.

It depends on the requirement from the client, to be very honest; normally, the clients over here do not like to give their data centers to third parties, so mostly it is just between local vendors and the client. Most of the time it is just deployment, installations, and technical support for a whole year long. We are trying to get them to build a Security Operations Center in our environment to provide them a twenty-four seven Security Operations Center solution as well, or if they do not want to go local, they can go to the Trend Micro Mobile Device Management solutions, but it is not a very sellable solution, not in Pakistan.

Cloud deployment can be the client's private cloud, or it can be a third-party cloud; it does not matter.

I have been recommending Kaspersky Endpoint Detection and Response Optimum for the last twenty years. I rate this review an eight overall.

The main use case is attractive for customers because the endpoint detection and response system helps with patch management and remote software. It has many ITSM feature sets, which has been an attractive feature for customers because they don't require too many tools. One single endpoint can take care of multiple things.

Automated response capability definitely helps. Writing playbooks may require some technical expertise, but that becomes an attractive feature set on the security point.

Machine learning and behavioral analysis features are quite effective and help in preventing threats beforehand. Before things get out of hand, it helps customers ensure that their assets are secured.

If one is familiar with the Kaspersky product suite and the integration is with Kaspersky or a SIEM product, the integration is straightforward without many challenges.

The reporting system is good, but it can be quite tricky for customers to get the reports. Unfortunately, Kaspersky UI is something they need to work upon. It's not as simplistic or user-friendly as other competing products such as Sophos or Check Point.

The UI they have, while they have tried to make it quite simple on the cloud, the KMC is still comprehensive but complex for many admins. They could follow their cloud UI pattern, which would make life easier for customers.

In general, the main area for improvement is UI. This is the main concern so far.

Tech support from Kaspersky is a place where they could improve. The issue with support is getting hold of the support can be taxing at times. The overall turnaround time in some cases can be quite high.

I've been selling and working with Kaspersky Endpoint Detection and Response Optimum for about 18 months now.

Deployment is straightforward. One of the best parts about Kaspersky is you can roll out the endpoint application via remote discovery. The network discovery tools they have make deployment easier. Even without an Active Directory or an RMM tool, you can still deploy Kaspersky Endpoint Detection and Response Optimum quite easily compared to other solutions.

For both cloud and on-premises, it is quite easy to deploy Kaspersky Endpoint Detection and Response Optimum.

Stability would rate at nine out of ten.

The scalability of Kaspersky Endpoint Detection and Response Optimum rates at nine.

When comparing Sophos Central Intercept X Advanced with XDR, Kaspersky Endpoint Detection and Response Optimum, and Check Point Harmony, the key feature that stands out for Kaspersky is the list of features they bring to the table. On the security point, all three are almost at par, but when it comes to add-on features such as remote assistance, remote software deployment, and patch management, that makes Kaspersky stand out.

On pricing, Kaspersky is quite aggressive, giving strong competition to both Sophos and Check Point.

We mainly work with Sophos, Kaspersky, and Check Point. We work with Harmony Endpoint and Email Security from Check Point. From Sophos, we work with the entire suite of 18 products. With Kaspersky, we mainly focus on the endpoint or the EDR, and their training suite. For EDR, we work with Kaspersky Endpoint Detection and Response Optimum. These are the main features for which customers choose Kaspersky. Overall rating: 9/10.

With Kaspersky Endpoint Detection and Response Optimum, I use it in enterprise environments in my country for medium and small businesses, up to 200 endpoints, 100 endpoints, deployed on Windows, Windows Professional and Windows Server domain.

The best features of Kaspersky Endpoint Detection and Response Optimum are its precision and accuracy in detecting malware. I have experience with its response to zero-hour detection. In the past month, we encountered an unknown type of malware, but the behavior was sufficient for Kaspersky to isolate the network based on this behavior, which proved very efficient.

I utilize the automated response features, which have helped me save time and identify unrecognized activities inside my network.

I do not use the security for mail server with Kaspersky Endpoint Detection and Response Optimum version endpoint EDR, as I have never used security for mail.

A significant issue for me is that I work with SonicWall, and I cannot integrate Kaspersky with SonicWall's Security Operation Center. This integration limitation is problematic for me, which is why I compare the Capture Client with Kaspersky.

As long as there are problems with products from Russia, many more issues will arise. It is difficult because it is a political problem between US government and Russian government. SonicWall can integrate with other products such as Sophos, SentinelOne, and several others, but not with Kaspersky.

I have been using Kaspersky Endpoint Detection and Response Optimum for about eight to ten years.

The technical deployment is easy, but when we have a large number of computers, it becomes slow. The data in the console is not refreshed quickly. The deployment process becomes slower with a larger number of machines.

The support of Kaspersky rates a five out of ten. The response time is not very fast, and many times the answers are not very precise. Compared to other solution providers, the responses are not very clear when we need support.

Neutral

Before implementing Kaspersky Endpoint Detection and Response Optimum, we used Symantec.

Kaspersky Endpoint Detection and Response Optimum does integrate with other solutions, apart from the SonicWall SOC.

I have experience with both Kaspersky Endpoint Detection and Response Optimum and SonicWall. Based on my experience, I rate Kaspersky Endpoint Detection and Response Optimum an 8 out of 10.

My main use cases for Kaspersky Endpoint Detection and Response Optimum include Patch Management and Endpoint Encryption.

I utilize device control as an additional feature.

Threat Response Automation in Kaspersky Endpoint Detection and Response Optimum has significantly impacted my security by streamlining the response processes to threats.

Regarding the features of Kaspersky Endpoint Detection and Response Optimum, I find the most effective ones are the threat response tools.

Threat Response Automation in Kaspersky Endpoint Detection and Response Optimum is quite effective for enhancing security.

For improvement, I recommend automating the deletion of licenses when uninstalling Kaspersky Endpoint Detection and Response Optimum.

The product could be improved by resolving the problem with uninstalling devices. The uninstallation needs better handling, specifically with automatic license deletions.

There isn't anything else that should be improved in Kaspersky Endpoint Detection and Response Optimum beyond that issue.

I have been using it for 10 years.

The integration of Kaspersky Endpoint Detection and Response Optimum into my existing infrastructure is smooth and straightforward.

I have not faced any issues with the stability of Kaspersky Endpoint Detection and Response Optimum.

Kaspersky Endpoint Detection and Response Optimum is scalable for my environment.

Approximately 150 users in my company are working with Kaspersky Endpoint Detection and Response Optimum.

I plan to increase the usage of Kaspersky Endpoint Detection and Response Optimum in the future.

I have contacted Kaspersky support once.

Positive

I am not using any other Microsoft solutions.

The setup experience for Kaspersky Endpoint Detection and Response Optimum is easy. I would rate it a 9 out of 10 for ease of setup.

The deployment takes approximately five to ten minutes for endpoints.

I have observed value for money from Kaspersky Endpoint Detection and Response Optimum. It provides good value for money since implementation.

Kaspersky Endpoint Detection and Response Optimum is reasonably priced for the market.

I do not know the exact cost of the license per endpoint or annually.

I have no knowledge of other tools.

For those who want to use Kaspersky Endpoint Detection and Response Optimum, I recommend considering its features and performance.

I do not have Windows 11 or Windows Server.

I would rate Kaspersky Endpoint Detection and Response Optimum a perfect 10 out of 10.

Positive

I am using Kaspersky Endpoint Detection and Response Optimum as an endpoint solution to protect our desktops and endpoint devices.

It protects against malware and secures the network. The EDR has the ability to block abnormal behavior. Behavior analysis will block and audit to do forensic analysis in case of threats. It fulfills security and protection requirements against newly discovered malware, especially ransomware attacks. It includes Managed Detection and Response for monitoring and alerting against abnormal behaviors with centralized reporting.

To increase the benefits of the product, Managed Detection and Response (MDR) service from Kaspersky should be included. I use this to monitor devices from a centralized location and report any abnormal behaviors.

I have experience with this solution for more than five years.

The solution is highly stable, scoring more than nine in terms of protection. However, if a zero-day attack occurs, this could impact the rating, similar to the CrowdStrike issue three or four years ago.

It is highly scalable, rated as nine, depending on the number of licenses purchased.

I rate the technical support between seven and eight out of ten for Kaspersky.

Positive

I used Symantec more than twenty years ago. I am not familiar with Symantec's new products, however, they work on the same concept of centralized protection and enhancing EDR or XDR solutions.

The initial setup was supported by a good support team and a supportive company. It requires an ongoing effort to configure and comply with new settings the vendor updates. 

The deployment takes between one to two days of studying necessary components, with full deployment completed in about a week for around two hundred endpoint devices.

The deployment was a joint effort between our technical team and the reseller in our region, who provided technical support and guidelines.

It is difficult to measure the ROI directly, however, maintaining security ensures that revenue streams from other operations remain uninterrupted by threats.

The value from Kaspersky is very good, especially since we recently got a special deal.

Based on my experience, I recommend this solution, though there might be better solutions in the market. 

I rate the overall solution as nine out of ten.

I use Kaspersky to monitor parameters, the device, and users. I modify the web filter and device controls to manage the web and device components according to business needs.

The most advantageous aspect is tracking and taking action automatically. It monitors vulnerabilities and takes action, such as blocking USB or devices from the network, to avoid vulnerabilities or ransomware. I use Kaspersky to protect the domain and the network, allowing or denying web categories according to business needs.

Occasionally, I encounter connection problems, and the signal is not very good.

I have about 34 years of experience.

I find the solution very easy and very stable.

It is very easy for me to scale.

I worked at Check Point and CrowdStrike with limited privileges. I switched to Kaspersky for its broader capabilities in monitoring and taking actions on devices.

It was very easy for me to set up. I downloaded the latest version, set it up automatically, or sent it via mailbox to the end user.

Kaspersky is very cheap compared to solutions like CrowdStrike or other vendors. While each solution has strengths and weaknesses, Kaspersky offers better financial aspects.

I have used solutions like CrowdStrike and Check Point before.

Eighty percent of the functions are compatible with Kaspersky's AI features, which are amazing.

Positive

We use it to direct detected computer malware, analyze and diagnose the problems. We can also link it with the antivirus for malware and virus detection.

I mostly like how they capture particular files and submit them to other files, and they have the solution console. And for example, we are using the one in for

an application, like, on the RansomFree, if there are any vulnerabilities in patches coming, in the future, they fix these.

For improvement, they should make the scanning process faster. The scanning and updating take more time.

I have been using Kaspersky Endpoint Detection for six months. 

I would rate the stability of this solution nine out of ten. The customers use Endpoint Detection and Response Optimum as it is very stable.

The scalability of this solution is great, but Defender is better.

However, once one of our systems got affected by malware, updating and saving our site through Kaspersky helped us.

The technical support team is good. We had to create a ticket now. Once we created a ticket, and then we need to send the full consolidated part or the infection computer or infection assistant. Then they will find a solution.

Positive

The initial setup was straightforward. Since we were already familiar with the configuration and sector, we didn’t find the product setup difficult. The solution was deployed within fifteen minutes.

The deployment was done by a vendor team from the client side.

Kaspersky gives a consolidated price with a good solution. If we choose something else, we need to add other options on our own.

Yes, we used McAfee but it isn't listing anymore, so we switched to Kaspersky.

I rate the overall solution a nine out of ten.

We internally use Kaspersky Endpoint Detection and Response Optimum, which is a highly recommended solution. We leverage it for our detection data box, particularly when working with Azure.

All the features work together to provide alerts and help evaluate potential issues related to the detected threats. It's difficult to single out one feature since they all contribute to creating a normal usage profile and detecting abnormal behavior within the business infrastructure. It's a comprehensive solution.

There are certainly some weaknesses. In terms of the product itself, the main weakness lies in the need for highly skilled personnel to operate it effectively. This is why I prefer to use Managed Detection and Response. 

The problem is that there are millions of people worldwide who lack the necessary security skills and resources to manage security issues. It's a specific challenge for each company. If you don't have your own Security Operations Center (SOC) and lack the complete set of competencies and skills to manage the hardware, using Managed Detection and Response instead of Endpoint Detection and Response allows you to delegate the high-scale layer to experts who will handle a part of the job. Then, you only need to decide whether to rely on their advice or not, which requires fewer skills. Therefore, the main weakness lies in the inherent complexity of the solution.

In future releases, I would like to see an eXDR layer for Kaspersky. It's something that is essential. 

I've been using it for more than a year now. We were one of the early adopters. We started using it fully internally about six or seven months ago for protection purposes.

When it comes to Kaspersky, it's not a simple yes or no answer. It depends on various factors. Kaspersky's concept allows you to work with different components to achieve a specific level of detection and response. You can integrate it with other consoles, which is missing in Azure. This includes analyzing the network and cloud. EDR focuses on endpoint information, but there are two crucial aspects missing: network security and cloud security. 

However, if you have EDR components and use QM, you can achieve a fully scalable solution. You can also integrate it with other products like a threat-hunting portal and link flows. In the future, there will be integration with Azure. Without incorporating Kaspersky Endpoint, it may not be completely scalable. So, to achieve full scalability, you'll need to integrate an XDR solution.

In our company, we have around 250 end users utilizing the MDR solutions for our external customers. It's quite a significant number.

Customer service and support are really good. We receive responses within hours. We have the option to contact the German or English-speaking team, which provides a good quality of service. 

Additionally, we can also reach out to the French support team without any issues. Most of the time, we receive prompt and helpful assistance, including detailed instructions to troubleshoot the problem effectively. 

The support is highly reliable compared to other providers like Sophos, which has the worst reputation. Personally, I would rate Kaspersky's support as excellent, although individual experiences may vary. The quality of support is crucial and Kaspersky delivers in this regard.

Positive

From a technical point of view, I don't see any reason why I need to prefer competitors over the solutions provided by Kaspersky at the moment.

The initial setup was easy. Once you have the advanced solution point protection from Kaspersky, you just need to set up the technology through the web console. It's a yearly business license that needs to be activated on the endpoint. We had no issues with that. It's a critical aspect for us, and the deployment process was straightforward.

We only have one full-time administrator managing the solution. Although we are three people who are capable of administering it, in reality, it's a full-time job that requires less than half an hour per day. This includes selling the project, checking alerts, and handling the EDR component. The setup is designed to be efficient.

The deployment took less than a day, and there were no specific prerequisites. I read the solution and the manual, asked some questions, and within eight hours, the deployment was complete. 

There was a main point of contact who assisted throughout the process. It went smoothly. However, if you start from scratch without any existing enterprise protection, it may require more guidance. 

Managing the endpoint protection feature is the main priority. If you're starting from scratch, it might take around a week to deploy the Kaspersky Security Center, which is a preconfigured web or MST component. After that, you'll need some skills to create a strategy and deploy it on the data points. 

Initially, it might seem challenging, but once you understand the basics and have the necessary knowledge about Kaspersky products and endpoint relations, you'll be able to handle it. I would estimate around forty hours for someone unfamiliar with the system to complete the deployment, which is quite impressive.

It's a yearly business license that needs to be activated on the endpoint. We had no issues with that. It's a critical aspect of the deployment. 

The pricing is totally reasonable. However, you need to consider the cost of the yearly solution and also the enterprise protection. Currently, you cannot use the NDR solution without the endpoint protection. But in terms of the product portfolio, the pricing is very fair. After the events surrounding the invasion of Ukraine, some of our customers asked us to explore alternative solutions because they didn't want to work with Russian products anymore. So we conducted comparisons based on pricing. In the best-case scenario, the prices of other solutions were two or three times higher than Kaspersky. To be honest, Kaspersky is significantly cheaper while maintaining high-quality solutions. It's a bit more challenging to compare only the EDR solution since there are considerable differences between different EDR solutions as well as endpoint protection. 

One crucial factor to consider is the quality of the threat center, and Kaspersky is widely recognized as one of the best threat intelligence providers globally. When choosing a security solution, the quality of the solution heavily relies on the expertise of the individuals working on-site to identify threats and assess their severity. 

I recently analyzed a few phishing attacks targeting iOS devices. The exploit patch was released in 2019, and Kaspersky's EDR played a vital role in identifying and mitigating the malware. No other security solution around the world was able to detect this iOS issue, despite the fact that it had been present since 2019. Kaspersky's EDR was the first to uncover the problem, which was later confirmed by the XDR network analysis component of their solution. This is a testament to the product's quality because no other vendors or iOS solutions managed to detect the issue. These are facts that speak for themselves and provide strong evidence of the product's superiority compared to others.

We offer a range of products, including Endpoint Protection, MDR, XDR, password manager, VPN clients, email protection, email gateway, Internet gateway, and Azure automation. 

In addition, we provide CITO and DITC services for IT crews.  Our main focus is on business customers, both final customers and managed direction. We prefer to provide them with the necessary expertise and knowledge since they may lack the resources to handle intense situations and make informed decisions.

The main advantage that competitors have over Kaspersky is that they are not limited by software versions. One issue I have with Kaspersky is that some customer requirements may involve sharing specific details with us, which can pose challenges in certain projects.  And that is one of the recent projects that may be a problem. The only advantage I see over other competitors is that. 

Overall, I would rate it around nine out of ten at the moment.