The normal use case was for viruses protection. The viruses were getting transferred through the internet and external storage drives to the end-users. However, I am seeing more often customers are going one step further and using a sandboxing environment for protection against ransomware.
When comparing Kaspersky Endpoint Security to any other solution, our customers like mostly the reliability, and the ability to defend against viruses, worms, and attacks. It is easy to use and very light on the end-user machine's resources.
I have been using this solution for approximately 13 years.
Kaspersky has two kinds of support. Our customers have a layer of support. First, they receive support from providers like us and if we are not able to solve their problem, we involve the distributors' technical support. The customer always has the option to open a ticket directly with Kaspersky, bypassing us. If they do not purchase the support from Kaspersky, then it takes a lot of time to solve a very minor issue from the technical support and development. There is a long queue waiting for support. However, if they purchase the support from Kaspersky, then the support is responsive and helpful.
This solution is priced lower than some of its competitors.
Kaspersky has introduced new products and upgraded versions of Endpoint Security. It is a bit complicated these days, especially their licensing. They are promoting customers to purchase the EDR, Endpoint Detection and Response, rather than going for the Endpoint Security only. The EDR requirement for deployment is a little higher, especially for mid-size or small-size companies. The server they require for the EDR or sandboxing is pretty heavy and costly. If they can reduce the price, then it would have been a good cloud solution.
The support from Kaspersky is purchased separately.
I have evaluated Carbon Black and SentinelOne.
They should have a minimum number of solutions available. They used to have only three or four, feature-wise, but now they have probably seven or eight. There are too many options for the client, they get it confused. All the features used to be in one solution, but now they have them all separated. For example, they used to have a DLP, scanning, and patch management in the Endpoint Security, but now they do not. They separated them into other solutions. It would be better for marketing, as well their customers too to combine the features.
I advise my customers that they should compare Kaspersky with other solutions, especially one which is already quickly gaining market ground, especially in this region, in our country, which is Trend Micro. Trend Micro is also very good. They are a comparable competitor against Kaspersky. Being on the neutral side, I give them both options to use, and then they can decide by themselves. However, Trend Micro is actually more expensive than Kaspersky.
I rate Kaspersky Endpoint Security an eight out of ten.