Comodo Endpoint Security Manager 3 Professional Edition

How do I manage my endpoints using ESM?

The ESM server is administered via a panoramic-display, browser-based console on any Silverlight compatible system.

What protection does it offer?

ESM 3 leverages Comodo's award-winning anti-malware suite, Comodo Endpoint Security Manager offering:-

• Comodo's best of breed black-list based antivirus solution
• Comodo's legendary firewall
• Comodo's innovative Defense+ host intrusion protection system with Default Deny Protection™ which, using our huge application whitelist, prevents untrusted executable from running and blocks viruses at source
• Auto Sandbox Technology™ automatically separates unknown applications into an isolated environment while integrated cloud behavior analysis helps determine the application's integrity and trustworthiness - all without interrupting the end-user

Comodo is so confident that we can protect endpoint we are the only vendor that offers our Limited Virus-Free Guarantee*

How do I use it?

Once installed through the simplified wizards, endpoints are quickly and efficiently discovered via Active Directory query, workgroup discovery or IP address range. They can then be grouped as required and administrative policies applied. CESM will automatically reapply those policies to endpoints not compliant with their required configurations.

What features does ESM 3 offer?

• One centralized management console combines management of LAN and WAN endpoint's security and system status
• Unique panorama view of endpoint estate with "first-glance" view of 11 critical endpoint metrics
• Automatically uninstalls legacy/existing antivirus products¹
• Manages Comodo Endpoint Security Manager security configurations
• Manages CPU, RAM and hard disk usage
• Manages services, processes and applications
• Manages endpoint power consumption
• Manages USB devices
• Set-and-forget policies ensure that endpoint configurations are automatically re-applied if they cease being compliant
• Deploys endpoint policies with pre-configured firewall and application whitelisting rules
• Lowest resource overhead anti-malware suite available on the market
• Default-deny anti-malware suite denies system access to unknown files
• Allows updating of definition database from internet and/or caching proxy and that's just for starters...

¹- product dependant

Is there a minimum or maximum number of PCs a business must have to use Endpoint Security Manager?

Version 3 has been tested managing 2500 endpoints.

Can the management server be run from a virtual server?

Yes.

How are virus database updates received and how are they pushed out?

Virus database updates can be received from the internet or from the ESM server acting as a caching proxy. You can choose to use either (or both) as part of the deployment procedure or through post-deployment policy editing. Administrators can also update selected endpoints using the 'Update' button in the endpoint's properties tab.

Can I enable and disable individual components?

Yes. The choice of which components to install can be made during the initial setup wizard or at any time thereafter.

Can I configure Endpoint Security Manager to use an existing database server?

Yes, ESM can use its embedded Microsoft^® SQL Express 2012edition or you can configure ESM to use an existing Microsoft^® SQL instance (Express, Standard or Enterprise) 2005 or later.