Kaspersky Endpoint Security for Windows

Discover the latest advanced security solutions in the Kaspersky Next line, including powerful endpoint protection for all your Windows business devices. Kaspersky Endpoint Security for Windows has evolved into Kaspersky Next solutions.

Management for mixed IT environments

Light-touch control and management for all endpoints from a 'single pane of glass' console – spend less time and resources managing IT assets and security. Define and replicate specific settings and parameters from a universal policy.

Unique wizards for easy deployment across the network, with or without Active Directory domain. Deploy and retain endpoint protection even if networks are physically disconnected from the Internet.

Kaspersky Security Center is a central management console that makes it easier for administrators to configure, deploy, update and manage their security. It simplifies the application of group tasks, policies and policy profiles and the generation of reports. Three management options are available:

The Kaspersky Security Center MMC console
The Kaspersky Security Center's Web Console
The Kaspersky Security Center Cloud Console

Encryption and data protection for every business

Secure your data with FIPS 140-2 and Common Criteria: EAL2+ certified encryption, or use built-in Microsoft® BitLocker® management to enable OS-embedded encryption.

Kaspersky's File Level Encryption enables the encryption of data in specific files and folders on any given drive. This allows system administrators to encrypt files automatically, based on attributes such as location and file type – and this encryption can be enforced for information created in any application. Users can also easily create encrypted, self-extracting packages – ensuring that data is protected when stored in backup or shared via removable devices, email, network or the web.

It's good practice to apply encryption settings under the same policy as anti-malware, device control and other endpoint security settings. This enables the best practice approach of integrated, coherent policies – for example, IT can allow approved USB devices to connect to a laptop, and can also enforce encryption policies to the device. All through the same single console used to manage Kaspersky Endpoint Security.

In the event of password loss or damage to the drive, data can still be recovered and decrypted using a special centrally managed emergency recovery procedure. Built-in Microsoft® BitLocker® management enables OS-embedded encryption, letting you decide which technology to use and control via the single console.

Kaspersky Endpoint Security for Windows 11.2 now allows files and folders to be deleted remotely. Special tasks can be configured in advance and action taken according to a schedule or by timeout, even when not connected to the network. This is especially useful in the following situations:

A lost device
Having to remove corporate data for contract employees or BYOD employees using their own PCs for work-related tasks
Compliance.

Cloud-enabled controls for policy refinement and breach prevention

Host Intrusion Prevention, and centralized web, device and application controls reduce your attack surface and help keep users safe and productive. Kaspersky has its own dedicated Dynamic Allowlisting laboratory, maintaining a constantly monitored and updated database of more than 2.5 billion trusted programs. This database automatically synchronizes with endpoints to simplify routine work for administrators.
For ease of management, powerful endpoint controls are managed from the same console, tightly integrated with Active Directory and next-generation anti-malware protection. This makes setting blanket policies quick and easy.

Prevent torrenting use and potential data leaks with web controls. A new web control category – 'Cryptocurrencies and Mining' – lets administrators block various cryptocurrency mining websites on corporate resources in a single click. Administrators can monitor, filter and control which categories of websites employees can access, directly at the endpoint. Those categories are updated with hundreds of new resources every month. Once categories are synchronized with the endpoint, policies are enforced even when the user is not on the corporate network. Flexible policies enable acceptable browsing at certain times of the day, while integration with Active Directory means policies can be applied across the business quickly and easily.

Powered by Dynamic Allowlisting, Application Control significantly reduces your exposure to zero-day attacks by providing total control over what software, including specific versions, is allowed to run. This includes shadow IT scenarios where, for example, employees install non-corporate software or games on a device, putting the corporate network at risk while at the same time being unproductive. BDenylisted applications are blocked, while your approved and trusted applications from the Dynamic Allowlisting database continue to run smoothly.

Adaptive Anomaly Control automatically helps apply the highest acceptable level of security for each role in the organization. After first monitoring specific actions and collecting information about the behavior of users and applications, it identifies and learns distinctive patterns of behavior, right down to individual user level. If an application then displays abnormal behavior against this pattern, the application is blocked. All without end users being interrupted.

Some applications' activities may be considered high risk – even though the applications themselves are not classed as malicious – and these activities should be controlled.

Our solution restricts application privileges according to assigned trust levels, limiting access to resources like sensitive data. Working in step with local and cloud (KSN) reputations database, Host Intrusion Prevention controls applications and restricts access to critical system resources, audio and video recording devices.

Kaspersky's huge store of default HIPS settings and restrictions for different applications relieve the administrative burden while giving complete control over specific, individual settings.

To prevent users from connecting to potentially insecure public Wi-Fi networks, you can generate a list of trusted networks based on name, encryption/authentication type, and prevent the creation of a network bridge by blocking a second active network connection.

Disabling a USB port doesn’t necessarily fix your removable device issue, because it can impact on other users’ productivity – for example, being unable to connect a 4G modem. Kaspersky Device Control solves this by enabling a more granular level of control at network connection and device type level. Integration with Kaspersky’s encryption technologies allows you to apply encryption policies to specific drive types, as well as:

Create rules for allowed devices
Set read/write permissions for devices
Log delete/copy operations
Align device controls with Active Directory users

		Recommended
	Kaspersky NextEDR Foundations	Kaspersky Next EDR Optimum

Manage protection
IT Specialists	Required	Required

Time to control	~15 mins weekly	~15 mins weekly
	Product features
Features overview
Endpoint Protection	feature is included	feature is included
Anti-Ransomware	feature is included	feature is included
Network Security	feature is included	feature is included
Cloud Monitoring	feature is included	feature is included
Cloud Security	feature isn't included	feature is included
Task Optimisation	feature is included	feature is included
Basic EDR Capabilities	feature is included	feature is included
Essential EDR Capabilities	feature isn't included	feature is included
Cybersecurity Trainings for ITOffer	feature isn't included	feature is included

Kaspersky Endpoint Security for Windows

Discover the latest advanced security solutions in the Kaspersky Next line, including powerful endpoint protection for all your Windows business devices. Kaspersky Endpoint Security for Windows has evolved into Kaspersky Next solutions.

Get Kaspersky Next  for all-in-one business protection

Start using next-gen endpoint protection to secure your business devices against ransomware, malware, and zero-day threats.

Management for mixed IT environments

Light-touch control and management for all endpoints from a 'single pane of glass' console – spend less time and resources managing IT assets and security. Define and replicate specific settings and parameters from a universal policy.

Encryption and data protection for every business

Secure your data with FIPS 140-2 and Common Criteria: EAL2+ certified encryption, or use built-in Microsoft® BitLocker® management to enable OS-embedded encryption.

Cloud-enabled controls for policy refinement and breach prevention

Start protecting your business today

These solutions are available for instant online purchase. Choose the level of protection that fits your business and start right away.

Need help for the next step?

We’re here to help in any way that works best for you

Free Trial

Find a partner

Contact Us

Kaspersky Endpoint Security for Windows

Discover the latest advanced security solutions in the Kaspersky Next line, including powerful endpoint protection for all your Windows business devices. Kaspersky Endpoint Security for Windows has evolved into Kaspersky Next solutions.

Management for mixed IT environments

Light-touch control and management for all endpoints from a 'single pane of glass' console – spend less time and resources managing IT assets and security. Define and replicate specific settings and parameters from a universal policy.

Deploy across diverse and air-gapped networks

Scalable management

Central console – simplifies administration tasks

Encryption and data protection for every business

Secure your data with FIPS 140-2 and Common Criteria: EAL2+ certified encryption, or use built-in Microsoft® BitLocker® management to enable OS-embedded encryption.

Prevent data breaches

Protect data at rest

Secure data sharing and backup

Central management and choice centrally

Remote wipe for data safety and compliance

Cloud-enabled controls for policy refinement and breach prevention

Control inappropriate resource use

Reduce exposure to attacks

Automate custom-hardening for each PC

Regulate access to sensitive data and recording devices

Stop threats associated with public Wi-Fi or USB devices

Start protecting your business today

These solutions are available for instant online purchase. Choose the level of protection that fits your business and start right away.

Need help for the next step?

We’re here to help in any way that works best for you

Free Trial

Find a partner

Contact Us

These solutions are available for instant online purchase. Choose the level of protection that fits your business and start right away.