Kaspersky Antivirus For HP Thin Clients

[Cvoulkidis]

Hi, can you suggest me which Kaspersky product is suitable for HP Thin clients? We currently use Kaspersky Endpoint Security 11 for Windows but it uses almost 90% of the Client resources and the Client become unstable.

[Vimaro]

Dear user, Thanks for your message. Could you please tell us which OS are used by Thin clients?

[Kavuser10]

HP does support limited set of AV products. Theoretically Kaspersky for Embedded Security is the product to look into. The real question is why do you need AV for Thin Clients in the first place? Your Thin Clients should be completely locked down with Write Filter. If they are running Windows 10 IoT then you also could get by with the built in Windows Defender.

[Cvoulkidis]

Dear user, Thanks for your message. Could you please tell us which OS are used by Thin clients?

The OS version is Windows 10 Enterprise 2016 LTSB

[Cvoulkidis]

HP does support limited set of AV products. Theoretically Kaspersky for Embedded Security is the product to look into. The real question is why do you need AV for Thin Clients in the first place? Your Thin Clients should be completely locked down with Write Filter. If they are running Windows 10 IoT then you also could get by with the built in Windows Defender.

By using the Write Filter are we protected from inserting usb sticks?

[Kavuser10]

By using the Write Filter are we protected from inserting usb sticks?

Depends. Theoretically there are some problems. With write filter the places where anything can write is very limited and nothing persist after reboot. But there is a possibility to use Thin Client as a jump point to other systems. The built-in Defender does offer some protection. HP supports a very limited set of AV products on Thin Clients. The question is whether you need USB on those devices. If not, you can use HP USB Port Manager to disable front ports and also disable connecting any mass storage devices on any ports.

[Cvoulkidis]

By using the Write Filter are we protected from inserting usb sticks?

Depends. Theoretically there are some problems. With write filter the places where anything can write is very limited and nothing persist after reboot. But there is a possibility to use Thin Client as a jump point to other systems. The built-in Defender does offer some protection. HP supports a very limited set of AV products on Thin Clients. The question is whether you need USB on those devices. If not, you can use HP USB Port Manager to disable front ports and also disable connecting any mass storage devices on any ports.

It is not only about USB. The Thin Clients have email access via web client. So, threats may occur.