ESET’s endpoint protection software (opens in new tab) is pitched at small and medium-sized businesses and combines the protection of the company’s popular antivirus solution along with its security product.
ESET Endpoint Protection Advanced Cloud (opens in new tab) covers Windows, and macOS, and with certain conditions also extends to Linux, Android and iOS endpoints as well.
The antivirus (opens in new tab) bit of the solution uses heuristics and machine learning to protect against zero-day attacks and malware. It’ll also protect you against fileless malware (opens in new tab) thanks to the bundled mitigations that’ll detect any hijacked applications.
In fact, ESET monitors and evaluates all executed applications on the endpoints and based on their reputation and behavior will block any processes that act like ransomware (opens in new tab). It keeps an eye on typically exploitable applications such as browsers, document readers, email clients, Flash, Java, and such, to look for identifiable exploitation techniques.
One of its interesting protection features is its ability to monitor the integrity and security of the UEFI firmware and the preboot environment. In addition to scanning the computer, ESET also has web access and email client (opens in new tab) protections to catch and block malicious downloads, harmful webpages, and purge spam from emails.
The security product brings with it a software firewall (opens in new tab), the ability to detect malicious communications over the Internet and then block the offending process that initiated it. You also get a Host-based Intrusion Prevention System (HIPS) that uses a predefined set of rules to identify and stop dubious behavior.
While the smartphone (opens in new tab) clients also have the antivirus features that you get with the desktop, their security features differ. On Android and iOS devices you get application control and device security features as well as anti-theft features, such as the ability to remotely lock the device, or wipe it in case it is stolen.
Interface and use
All of these features are accessible and can be tweaked from the endpoint clients or from the smartphone clients installed on the individual devices.
The cloud interface on the other hand, helps you deploy endpoints, rollout specific tasks to them, and get notifications and reports about incidents.
It contains several dashboards that help visualize different aspects of the network. There’s one that gives you an overview of the security incidents, another specifically for virus detections, another for events blocked by the firewall, and more. You can drill down each one of them to oversee the status of computers, along with the threats or quarantined items.
But first you’ll have to deploy the ESET agent to the endpoints. For this, you’ll have to create a small installer. The process for creating the installer allows for some customizations such as the ESET endpoint security product. This enables you to create multiple installers for a different set of machines. For instance, you can create separate installers for Windows (opens in new tab) and Macs (opens in new tab).
The installer will anchor the selected ESET security product on the endpoint, activate the valid license and automatically connect to the cloud interface. You can either directly download the installer or send a link to it via email.
Best of all, there’s also a remote deployment tool that can remotely deploy the installers to all the endpoints in your network. The remote deployment tool can sync with an active directory server or can scan and map all the endpoints in your network.
The two best administration features of ESET’s cloud-based interface are policies and tasks. Think of policies as predefined configurations that you can push to the endpoints to get them up and running quickly.
For instance there are policies to block access to all devices, another to only allow reads, another to log all warnings and critical events, and so on. You can also create custom policies. A policy can be applied to individual computers or can be rolled out to a group of computers and a computer can have multiple policies as well.
Then there are tasks, which are predefined commands to conduct some of the most common operations. For instance, there’s a task to perform diagnostics on the endpoints, run a scan, update the different ESET modules, isolate a computer from the network, and more. You can also create custom tasks.
Once a task has been created you can then schedule and execute it as per a defined trigger. The task can be executed as soon as the endpoint receives the task from the cloud interface, or at a selected time.
Finally, like all good enterprise software, ESET Endpoint bundle can also create all kinds of reports to visualize the network status. These reports can be printed or shared in digital form.
Plans and Pricing
ESET Endpoint bundle can be managed with either the cloud-based interface or an on-premise one, and both have different prices.
If you choose the cloud-based management console, protecting 5 devices will cost £261.25/year and twice that for two year and thrice for three year. Protecting 5 machines comes to about £52/machine/year, though adding more endpoints will reduce this amount. For instance, a license for 7 endpoints costs about £41/machine/year, and 10 endpoints will cost just £32/machine/year.
The on-premise is cheaper and costs £150 for 5 endpoints per year. You’ll get a 25% discount for a 2 year license that’ll cost £227.30 and a 30% discount for 3 years that comes to £315 or £21/machine/year.
Perhaps the biggest advantage the ESET endpoint bundle offers over its peers is that it offers both cloud-based and on-premise management consoles.
As a security product though, like most of its peers, besides hunting for malicious files on the computers, it also protects your web browsing and monitors connected devices as well. Although it lacks the privacy enhancing apps like the VPN (opens in new tab) and a sandbox environment that you get with Avast Business Antivirus Pro Plus (ABAPP) (opens in new tab) it supports more platforms than ABAPP.
Also, its user-interface offers the same kind of dexterity that you get with Bitdefender GravityZone Advanced Business Security (GZABS) (opens in new tab) without any of the complexity. Although it doesn’t ship with an administrator’s guide, the contextual help and the tooltips make easy work of navigating the interface.
ESET Endpoint Protection Advanced Cloud offers an impressive set of security features that are nicely complimented by its deployment and remote management functionalities.
Despite the fact that most of its remote administration features cover only Windows and macOS, it still doesn’t leave your Linux endpoints completely in the lurch, which is a definite plus. Its coverage of both Android and iOS devices makes it one of the most complete endpoint security platforms.
- You can sign up to ESET Endpoint Protection Advanced Cloud here (opens in new tab).
- We feature the best business laptops (opens in new tab).