User guide

Fast and Effective Endpoint Security for Business PassMark Software
Comparative Analysis Page 20 of 44
Edition 1 22 August 2012
among other color conventions. The client interface
is aesthetically pleasing, appropriately sized and
simple, having two main tabs, Protection and
Control and Settings.
Client Management & Remote
Management 4/5
As with ESET’s product, the KSC Administration
Console can be installed on a separate computer to
the Administration Server for remote management.
While online documentation indicates that KSC
supports configuration of permissions (e.g. access
privileges, remote installation, editing of hierarchy
settings) for different roles, we could not find any
obvious way to do this from the management
console.
One-click group creation makes it easy to create
complex structures for larger networks. Group
creation can also be automated by importing
existing structures in Active Directory, Microsoft
Windows Domains and Workgroups, or from a text
file.
A wide range of filters can be applied when
searching for managed computers, including
domain, IP range, application, status, and
application. Unmanaged computers are
automatically discovered in the Windows network,
Active Directory, specified subnets, or can be
manually searched for using NetBIOS name, DNS
name, IP, or IP range. Discovered computers are
then listed in the directory tree, as they would be in
Windows Explorer. Unassigned computers can be
automatically assigned to administration groups by
defining rules. As mentioned above, applications (in
our case KES 8.0 and KSC 9.0) can be selected to be
automatically installed on client computers in a
group.
Under reports and notifications, 16 default reports
(Error, Protection status, Deployment and Viruses
reports to name a few) templates covering main
areas of concern are generated upon viewing.
Additional templates can be created and date
ranges, presentation, and automated delivery can be
configured. Like ESET’s product, there is a web-
based console to monitor server and client activities.
According to online support, this component was
only recently made commercially available (since 14
June 2012), so it was not included in the package
that we tested in May 2012.
Updates 4/5
By default, an Update task is scheduled to run clients
whenever updates are downloaded to the
repository. Server Update default settings are set to
check for updates from Kaspersky’s Update server
every hour, which is reasonable.
As with strict policy application, an update task can
be configured to execute On “Virus Outbreak”.
While updates were highly configurable and flexible,
it would have been useful to also have updates as
being defined by policies.
Screenshot 4: Kaspersky Endpoint Security8 (Client)
Effectiveness 4.5/5
In their latest Summary Report dated December
2011, AV Comparatives awarded Kaspersky an
ADVANCED+ grade for all tests, including the
Retrospective, and Removal tests. Kaspersky Anti-
Virus was thus hailed as "Product of the Year" for
2011, placing it first overall out of 20 products.
In their most recent File-Detection Test Report,
Kaspersky excelled in On- Demand Detection of
Malicious Software, achieving a Total Detection rate
of 99.3%, placing them 3rd out of 20 competitors. In
the False positives test, they placed 5th out of 20,
with "few FP's".
Kaspersky passed the VB100 test 71 times and failed
23 times, resulting in a 75% success rate.