Endpoint Security Manager

Centrally Manage Comodo's award-winning suite of security products!

Endpoint Security Manager allows systems administrators to leverage and maximize the protection offered by Comodo's endpoint security solutions such as Comodo Internet Security (including Firewall and Antivirus) and Comodo Disk Encryption.These products can be centrally managed and administered through the central management console. If installed individually, each product delivers superior protection against its specific threat vector. If installed as a full suite of packages, they provide a level of total endpoint security that is unrivaled in the industry.

Total malware and virus prevention

• Default Deny Protection™ prevents any applications that are not part of Comodo’s list of safe files from running on your PC.
• Auto Sandbox Technology™ automatically decides if an unknown application should run on your PC, without the user being interrupted.
• Comodo's virus free warranty "fool-proofs" your endpoints against damages caused by viruses or malware.

More efficient, effective and easier management

• Save thousands of man-hours per year, by centrally managing security policies with a fully integrated security suite.
• Administrator time can be re-directed towards more productive and profitable core business interests.
• Administrators can respond more quickly to protect an entire network against the latest, zero hour threats.

Huge Cost Savings

• Save up to $30 per endpoint per year with the Power Management feature.
• Realize operational and support savings by centrally managing a single-vendor suite of security software.
• Applications integrated with ESM will be provided free-of-charge for seamless deployment across the network.
• Innovative pricing simplifies licensing and provides an immediate ROI.

Dashboard Features:

• Interactive real time graphical diagrams on dashboard which show statistics of infected PCs and AV base updates
• Shortcuts and wizards that allow you to quickly initiate commonly executed activities like importing endpoint computers, creating new tasks and installing the Endpoint Security Manager agent.
• A snapshot of managed and unmanaged computers in your network
• A summary of the status of tasks under execution
• Getting Started links to help you learn about important aspects of the application

Management Features:

• Ability to view a list of windows restore points and rollback system
• Ability to launch remote desktop connection to PC directly from context menu
• Execute actions on several computers from the computer tree
• AV scanning progress to be displayed in Endpoint Security Manager console
• Ability to reboot target computers
• Connect to endpoint machine via the Windows Command prompt
• Ability to clone tasks from the Task Manager window
• Support for SQL Server 2008 Express Edition
• Power Management to remotely set power policy parameters on target machines

More Features:

• Local Administration for Comodo Internet Security, enables a user to respond to alerts locally without the administrator’s assistance
• Automatically detect existing AV and centrally uninstall from each PC
• Ability to initiate live chat support via the Endpoint Security Manager console
• Includes Comodo Internet Security with Firewall and Antivirus
• Default Deny Protection™ to protect against known and unknown viruses
• Auto Sandbox Technology™ automatically sandboxes all unknown applications
• Full Disk Encryption with two factor authentication protects sensitive data from unauthorized use
• Advanced Host Intrusion Prevention System
• Seamless integration and deployment of software
• Manage console from one central location
• Constantly protects with real-time-on-access scanning
• Remote management and policy enforcement
• CIS updates through Comodo Offline Updater; which downloads updates from the web
• Whitelist of known safe executables

Frequently Asked Questions

What support is provided for Endpoint Security Manager?

Comodo provides 24/7 phone support for Endpoint Security Manager. USA: +1 888 256 2608 | International: +1 703 637 9361

Issues can also be submitted through our ticketing system at http://support.comodo.com and a support technician will contact you to resolve your issues.

Is there a minimum or maximum number of PCs a business must have to use Endpoint Security Manager?

No. Endpoint Security Manager can be used for any network environment. ESM has been tested to scale seamlessly up to 10,000 PCs and could scale up higher if needed.

What operating systems are supported with Endpoint Security Manager?

The operating systems supported are Windows XP, Windows Vista, Windows 7, Windows Server 2003, Windows Server 2008

Can I manage and monitor remote locations with Endpoint Security Manager?

Yes. We support IP based import, so if remote PCs have a static IP address it is possible to import these PCs to Endpoint Security Manger and manage them.

Can management server be run from a virtual server (VMWare)?

Yes. The following virtual servers are supported: VMWare Server 1.0, VMWare Server 2.0, VMWare Workstation 5.0, Microsoft's Hyper-V.

Can I add approved applications to the already existing Comodo Whitelist?

Yes. It is possible to do while answering CIS requests; applications could be treated as "Trusted." Also, a path to the application could be manually added to CIS configuration on the Endpoint Security Manager side; then the configuration could be applied to the workstation.

What are the System Requirements for Endpoint Security Manager?

32 Bit:

• 1 GHz Intel Pentium III or equivalent
• 1 GB RAM minimum (2-4 recommended)
• 4 GB (This incorporates the space required for the SQL server)
• Microsoft .NET Framework 2.0
• Microsoft SQL Server 2005 Express – SP2 or higher
• Microsoft SQL Server 2008 Express

64 Bit

• 1 GHz Intel Pentium IV 64 bit processor or equivalent
• 1 GB RAM minimum (2-4 recommended)
• 4 GB (This incorporates the space required for the SQL server)
• Microsoft .NET Framework 2.0
• Microsoft SQL Server 2005 Express – SP2 or higher
• Microsoft SQL Server 2008 Express

How are updates received and how are they pushed out?

Updates for CIS are received through Comodo Offline Updater; which downloads necessary update from the web. To push out updates RM CIS needs to be configured from Endpoint Security Manager with two tasks. First, use custom URL for updates and second is force updates of AV and binaries. This task could be scheduled. Product updates can be done on the start page; through a link on the top right corner "Check For Available Update'. Users could click to check updates and allow download of new version (if any).

How does Disk Encryption protect my sensitive data?

In order to protect sensitive data two levels of authentication have been incorporated into Comodo Disk Encryption, a USB key is included and a boot application feature that is added as an additional level of security which the user authenticates before the computer boots into operation.

Can I enable and disable Firewall/Antivirus/Disk Encryption?

Yes. Components of CIS such as Firewall and Antivirus could be changed during installation stage via parameterization of installing sequence. Disk encryption can be enabled and disabled remotely by creating a sequence with the Disk Encryption actions.

How does Comodo Endpoint Security Manager differ from competitors' endpoint solution?

• Default Deny Protection™ – prevention based technology as opposed to conventional, detection based technology. DDP prevents viruses from executing in the network in the first place instead of allowing viruses in and then removing them.
• Whitelisting – takes an advanced approach to preventing security breaches and reducing downtime. By working within the universe of known and safe executables, unknown applications within the environment are challenged prior to execution. If there is a virus outbreak, whitelisting eliminates the need for IT administrators to scramble for the latest Antivirus signatures. Comodo currently has a whitelist of safe applications, and users are also able to add their own to create a customized list.
• HIPS – Host Intrusion Prevention System – that blocks viruses and malware before they ever get a chance to install.
• Ability to connect to endpoint machine via Windows Command prompt.
• Power Management Support is integrated within the console itself.

Endpoint Security Manager Support

For help with Endpoint Security Manager, check out the comprehensive user guide.

Can't find an answer there?

Contact our 24/7 phone support line:
USA: +1 888 256 2608
International: +1 703 637 9361

Issues can also be submitted through our ticketing system at http://support.comodo.com/ and a support technician will contact you to resolve your issues.