Eset Endpoint vs Eset Smart Security

Hello,

since Eset offers large variety of business products I would like to get a clear picture before buying the ultimate solution for my Small Business Server.

My questions:

Does Eset Endpoint have more advanced firewall feature over Eset Smart Security? (1)

Is Gamer Mode in ESS just the same feature as Presentation mode in Eset Endpoint? (2)

Do I understand right that Eset Endpoint is generally stronger/more advanced than ESS Business Edition? (3)


Thank you very much.

 

For Windows servers it is recommended to use ESET File Security for Microsoft Windows Server.

 

Hello,

Originally, ESET Smart Security came in both a Home Edition and a Business Edition. A few months ago, though, the business edition was renamed to ESET Endpoint Security and released with several different features than the home edition, including:

• Remote management
• Component-based install
• Device control

As well as some other additional features. Over time, the two programs will diverge as they add features specific to each market segment.

In the case of Gamer Mode and Presentation Mode, the feature is the same, but is named differently in the two programs because of their audiences, e.g., most businesses are probably not going to be looking for anti-malware software that improves their video gaming experience.

I don't know if I would say that one program is stronger or more advanced than the other. They are not meant to compete with each other so much as to meet the needs of two different kinds of customers.

Regards,

Aryeh Goretsky

 

Thank you for replying,

It clarifies and it looks that bit by bit I can find out. Another new feature in EES is the two-way firewall, which must be a brand new feature since it's also mentioned on Eset 6 RC page. There's good description for Eset Endpoint but no such notes for Eset Smart Security 5 BE which I have currently installed and considering upgrade. The good news for me is that EES has all the features available as in former ESS 5 Business, nothing cut, so I will upgrade.

 

I've read about Eset File Security which is optimized for file servers that once set don't require any user interaction at all. The powerfull firewall and other features like device control are missing in EFS. It's a great product Eset strohgly recommends but it's very server oriented.

-----------------------------------

Press Release

What's new in Eset Endpoint


New Features

Host-based Intrusion Prevention System (HIPS): Host-based Intrusion Prevention System (HIPS) is a behavioral scanner that protects your endpoints from behind-the-scenes tampering. It protects critical system registry entries, processes, applications and files from unauthorized access and modification.
- Advanced behavioral analysis
- Uses network filtering to monitor running processes, files and registry keys
- Actively blocks intrusion attempts

Self-Defense: Prevents malicious software from corrupting or disabling ESET Endpoint Antivirus or ESET Endpoint Security. This feature is closely related to Host-based Intrusion Prevention System (HIPS).

Web control: Controls access to websites for users on your network using the following administrative functions:
- Define policies for Internet use: Define the categories of websites that users will be able to access, either per user or per groups of users
Integrate with directory services
- Filter websites by category: Over 140 categories of websites available for the administrator to choose from when defining rules, including the most critical ones from the business point of view (for example, legal liability sites) or sites that may impact IT infrastructure
- User notifications: Displays a neutral blocking page whenever a user attempts to access a restricted site
- Local override: If necessary, a local override of website blocking can be performed by launching an Internet browser with administrator privileges (provided administrators are excluded from the defined rules)

Device control: Monitors and regulates the use of certain types of devices (including removable media) on endpoints machines. Device control allows you to:

- Define policies – administrator is able to define rules on specific types of devices that can be used on endpoint machines, either per user or per groups of users. Integration with directory services ensures that it is possible to use Active Directory groups within the configuration of the feature.
- Block specific types of devices – CD/DVD-ROM devices, data storage devices connected over USB or Firewire, USB connected printers, imaging devices, Bluetooth devices or modems; rules can be defined based on type of device or port.

- Whitelist specific storage devices – Whitelist specific storage media based on serial number. Access permissions include blocking, read-only access or read and write access.

Logs and reporting – detailed logging is available for Device control functionality, including the following information: timestamp, username, computer name, group/username, device class, device details, event details, triggered action; there will be information about file actions for storage devices, indicating that a specific file has been accessed for read, read/write, write, delete, delete on close, read attributes or write attributes. Upon inserting a CD/DVD or connecting an external device with storage, the user will be prompted to scan its contents for malware. The user can select an option to remember the selected action in the future

Pre-release updates: Schedule your client workstation(s) to receive pre-release updates for virus databases and program modules. Pre-release updates can be utilized on test computers to identify potential conflicts or other issues in advance of the update's release and implementation on your network. Pre-release updates are typically available 12 hours prior to regular production updates.

Delayed updates: Schedule your client workstation(s) to receive delayed virus database and program module updates. This allows your critical systems more time to avoid potential server incidents. Delayed updates are typically distributed 12 hours after regular production updates are released.

Updates Rollback: Roll back your client workstation(s) to older versions of virus databases and program modules should you encounter a potential false positive. Update rollbacks are sent out as a task from the ESET Remote Administrator Console to all client workstations. They disable real-time file system protection on these workstations to prevent other systems from being affected. You can also roll back client workstations to a locally stored snapshot of virus databases and program modules, and stop additional updates until the issue has been resolved.


Presentation mode: When enabled, Presentation mode provides uninterrupted usage for presentation-based software. This means that ESET notifications (for example, firewall notifications and threat alerts) will be suppressed, CPU usage minimized, and scheduled activity postponed during important presentations or full-screen activities.

Component-based (modular) installation: By selecting Custom installation during the installation process, you select the specific modules, components and features that you wish to include in the installation. This kind of installation is especially useful for network administrators looking to maximize network performance; or administrators that are aware of features / components that they do not wish to install on client workstations.


ESET Live Grid: A new feature that speeds up scanning by utilizing a safe whitelist based on information gathered from other ESET users in the cloud. Based on this information, ESET Endpoint Antivirus and ESET Endpoint Security create a local database of files, folders and programs that are known to be safe. These items are automatically skipped during future scans, subsequently speeding up scan times and boosting system performance.

ESET Reputation System: Running processes are displayed along with their risk level and number of users in the cloud who are also running them
First time scans with a new virus signature database do not utilize the cloud whitelist

 

Your original post was about Small Business Server