Comodo Advanced Endpoint Security 3

How do I manage my endpoints using ESM?

The ESM server is administered via a panoramic-display, browser-based console on any Silverlight compatible system.

What protection does it offer?

ESM 3 leverages Comodo's award-winning anti-malware suite, Comodo Internet Security 10 offering:-

• Comodo's best of breed black-list based antivirus solution
• Comodo's legendary firewall
• Comodo's innovative Defense+ host intrusion protection system with Default Deny Protection™ which, using our huge application whitelist, prevents untrusted executables from running and blocks viruses at source
• Auto Sandbox Technology™ automatically separates unknown applications into an isolated environment while integrated cloud behaviour analysis helps determine the application's integrity and trustworthiness - all without interrupting the end-user

Comodo is so confident that we can protect endpoint we are the only vendor that offers our Limited Virus-Free Guarantee*

How do I use it?

Once installed through the simplified wizards, endpoints are quickly and efficiently discovered via Active Directory query, workgroup discovery or IP address range. They can then be grouped as required and administrative policies applied. CESM will automatically reapply those policies to endpoints not compliant with their required configurations.

System requirements?

CESM 3 Server does not require a dedicated server and can be installed on 32-bit and 64-bit platforms including.

• Windows 7
• Windows Server 2003
• Windows Small Business Server 2003
• Windows Server 2008
• Windows Small Business Server 2008
• Windows Small Business Server 2011

as long as they meet the following hardware requirements

• 1 GHz Intel Pentium III or higher
• 1 GB RAM (2 – 4 GB recommended)
• 4 GB free disk space

CESM 3 Agents can be installed on

• Windows XP SP3
• Windows Vista
• Windows 7
• Windows Server 2003
• Windows Small Business Server 2003
• Windows Server 2008
• Windows Small Business Server 2008
• Windows Small Business Server 2011
• Mac OSX 10.5 +
• Debian variants of Linux (Debian/Ubuntu/Mint)

Comodo Internet Security v6 can be installed on

• Windows XP SP3
• Windows Vista
• Windows 7
• Windows 2003 Server / Small Business Server
• Windows 2008 Server / Small Business Server
• Windows 2008 Server R2
• Windows 2011 Small Business Server

Please note that installing CIS 10 may require manual configuration of the firewall, if deployed, and disabling of Defense+ HIPS and Sandbox. We also recommend that scheduled scans be run outside of production hours and that, if large volumes of data are being scanned, the scheduled scans be broken up into several smaller scans.

What features does ESM 3 offer?

Manages LAN and WAN endpoints

Unique panorama view of endpoint estate with "first-glance" view of 11 critical endpoint metrics

Manages Comodo Internet Security version 8 security configurations

Manages CPU, RAM and harddisk usage

Manages services, processes and applications

Manages endpoint power consumption

Manages USB devices

Set-and-forget policies ensure that endpoint configurations are automatically re-applied if they cease being compliant

Deploys endpoint policies with pre-configured firewall and application whitelisting rules

Lowest resource overhead anti-malware suite available on the market

Default-deny anti-malware suite denies system access to unknown files

Allows updating of definition database from internet and/or caching proxy

and that's just for starters…

Is there a minimum or maximum number of PCs a business must have to use Advanced Endpoint Protection?

Version 3 has been tested managing 2500 endpoints.

Can the management server be run from a virtual server?

Yes.

How are virus database updates received and how are they pushed out?

Virus database updates can be received from the internet or from the ESM server acting as a caching proxy. You can choose to use either (or both) as part of the deployment procedure or through post-deployment policy editing. Administrators can also update selected endpoints using the 'Update' button in the endpoint's properties tab.

Can I enable and disable individual components?

Yes. The choice of which components to install can be made during the initial setup wizard or at any time thereafter.

Can I configure Advanced Endpoint Protection to use an existing database server?

Yes, ESM can use its embedded Microsoft® SQL Express 2012edition or you can configure ESM to use an existing Microsoft® SQL instance (Express, Standard or Enterprise) 2005 or later.