The Senforce Endpoint Security Suite is a quite different offering from the other products in this category. Senforce ESS uses a client installed on workstations to control the workstation's access to known and unknown wireless devices. The Endpoint Security Suite has both a stand-alone version and an enterprise (server-based) version. The configuration of the Endpoint Security Suite application allows the administrator to lock the system down to only attached to access points (no ad hoc connections) on an approved list. The Endpoint Security Suite can also deny access to the wireless interface while the wired connection is active, all wireless interfaces on the client can be disabled, and Endpoint Security Suite also can require a minimum set of security features to be met on both the client and access point in order for a connection to be established.
Senforce provided little documentation for this review process. A quick-start guide would have been handy when performing the initial install and writing the first few endpoint policies. The application is in two parts: the Senforce security client that provides the enforcement of the policy on the client and the Senforce policy builder that provides the security policy to which the client will have to adhere.
The server version provides a central log management component as well as tools to push the configuration out from the Senforce server to multiple clients on the network. The Senforce policy builder does require the .net version 1.1 and SQL server version 2005. Once the policy builder is installed, the layout is easy to understand and building policies is relatively easy. Despite the ease of running through the policy builder, I found myself wishing for a built-in help file.
Senforce offers several support options including email, phone and online support. The Senforce website includes a knowledge base, but it is password protected for registered users.
The Senforce Enterprise Security Suite is at the low end of the price spectrum for products tested, but the pricing may be misleading because it is licensed on a per-node basis as opposed to a network or hardware device licence.