Enterprise Security for Endpoints
Strengths: Ability to add layers of protection via licensing; data protection module
Weaknesses: Deployment and configuration takes some work
Verdict: Better-than-average endpoint protection; middle of the pack on pricing; not outstandingly easy to use
Trend Micro's Enterprise Security for Endpoints is a centrally managed security suite for desktops, laptops and mobile devices.
We were provided with a download for OfficeScan 10.6, Control Manager 6 and some plug-in licences for intrusion defence firewall and integrated DLP. Trend Micro Control Manager 6 provides central threat and DLP policy management across layers of the IT infrastructure. Trend Micro OfficeScan protects enterprise networks from malware, network viruses, web-based threats, spyware and mixed threat attacks. An integrated solution, OfficeScan consists of a client program that resides at the endpoint and a server program that manages all clients. The client guards the endpoint and reports its security status to the server. The server, through the web-based management console, makes it easy to set coordinated security policies and deploy updates to every client.
The requirements for the OfficeScan Server are Windows 2003 SP2 or later. However, there are a few caveats. OfficeScan requires IIS or Apache web server, and Control Manager used our MS SQL instance to install its database. We had some issues getting OfficeScan and Control Manager running on the same server (Trend Micro does not recommend installing Control Manager and OfficeScan 10.6 on the same box. Instead, it was highly recommended to install them on separate machines). After several attempts, we did get both packages to load. We launched the OfficeScan web portal. Once in, we downloaded and installed the two plug-ins mentioned above.
Enterprise Security for Endpoints includes multiple, purpose-built components. OfficeScan provides real-time protection against the latest viruses and Trojans and web-based threats. It uses cloud-based threat intelligence and integrated optional DLP. Intrusion Defense Firewall, a plug-in for OfficeScan, provides network-level, strong endpoint protection by supplementing highly effective OfficeScan client-level security with proactive virtual patching.
The data protection module provides digital asset control and expands the range of devices monitored by device control. The DLP plug-in for OfficeScan includes predefined policy templates, multi-channel content filtering and granular device control. All of these solutions can be integrated through the OfficeScan Manager framework, which uses a plug-in architecture to permit easy integration of components to tailor the protection capabilities to the customer's needs.
The user interface was intuitive and we had no problem adding modules, setting policies and reviewing results. Customers can find endpoints through a scan tool. Reporting was good and offered numerous standard accounts. There was a high-level dashboard summary of key client information and threats.
Standard one-year support is the usual eight-hours-a-day/five-days-a-week package. Ongoing renewal is usually 40 per cent of the first year's price and 30 per cent thereafter. Support is available 24/7 for an extra c£5-c£7 per user.
Documentation was complete and we did need to use it to deploy and configure the software.
The price for Enterprise Security for Endpoints varies depending on the number of users, but is around c£25 per user for 251 users, including that one year of standard support.