Installing Endpoint on Servers

[xpreme]

Dear Friends,

    As you know it is possible to install "KES for Windows" and also "KS for Windows Server" on Windows servers. Which one is recommended?

Thanks in advance

[ElvinE5]

Good day

 

If there are no specific tasks that need to be done through KES, I would recommend installing KSWS.

products have different settings for policies and tasks, don't forget to check and create them.

[xpreme]

Thanks @ElvinE5

[Thomas Becker]

But please keep in mind that as of now KSWS will not be developed any further and migration to KES should be done within the next 1-2 years. We will support KSWS quite a while though.

For existing servers I don't think you need to rush to change from KSWS to KES, but on a new system I'd recommend to first install KES and test if it suits you. We are constantly upgrading KES with each version to adjust to the special needs on servers.
In one of the last versions we started supporting Sever Core OS:
https://support.kaspersky.com/KESWin/11.11.0/en-US/128140.htm
and with 11.11 we added the "upgrade without restart" feature.

Here's a snippet from the release notes for KES 11.11 related to server OS:

1. Spoiler

   1. Log Inspection component for servers has been added. Log Inspection monitors the integrity of the protected environment based on the results of Windows event log analysis. When the application detects signs of atypical behavior in the system, it informs the administrator, as this behavior may indicate an attempted cyber attack.
       
   2. File Integrity Monitor component for servers has been added. File Integrity Monitor detects changes to objects (files and folders) in a given monitoring area. These changes may indicate a computer security breach. When object changes are detected, the application informs the administrator.
       
   3. The option to upgrade Kaspersky Endpoint Security without a restart has been added. This lets you ensure uninterrupted operation of servers when upgrading the application. You can upgrade the application without a restart starting with version 11.10.0. You can also install patches without a restart starting with version 11.11.0.

 

Further info could be found in the online help. For example: https://support.kaspersky.com/KESWin/11.11.0/en-US/224330.htm

[ElvinE5]

@Thomas Becker@xpreme

Yes, indeed it is, and in the future we will probably have to switch to a KES solution when protecting servers.

However, it should also be mentioned that at the moment the ability to use the components described in points 1 and 2 on servers with KES requires the customer to have the same Hybrit Cloud Enterprace license - to protect servers and cloud environments

just like for KSWS now, components are included but require this license.

I mean that for the customer using the licenses of the Select, Advanced, Total class (basic for the business product line), the radar will not receive these advantages.

[xpreme]

@Thomas Becker @ElvinE5

Hi,

Thank you so much friends for your tips. I got the point.

BR