Endpoint Protection
Protection on Every Device, Managed for You
Next-generation antivirus and endpoint protection on every workstation and laptop, deployed, kept up to date and centrally managed by our team. It blocks known malware and suspicious behaviour according to the policies we configure with you.
What is Endpoint Protection?
An endpoint is any device your staff use to work, such as a desktop or laptop. Endpoint protection is security software that runs on each one to stop malicious software (malware) and harmful activity.
Traditional antivirus mainly recognised threats it had seen before. Next-generation antivirus still does that, but also watches how programs behave, so it can block suspicious activity, such as a program trying to change large numbers of files at once, even when the specific threat is new to it.
We deploy the protection to every device, keep it up to date, set the policies with you and manage everything centrally, so a device that is unprotected or out of date doesn't go unnoticed.
Key benefits
- Known malware and suspicious behaviour blocked on each device
- Deployed, updated and centrally managed by Pulsar IT
- Protection policies agreed with you and applied consistently
- Devices that stop reporting or fall out of date are spotted
- Included in the Advanced IT & Security plan
How does it work?
The protection agent runs on each device and reports to a central management console. Our team uses the console to deploy policies, check that every device is covered and see what has been detected.
Deploy
We install the protection agent on each workstation and laptop, removing old or conflicting antivirus products where needed.
Configure policies
We agree protection policies with you, including what to block, how suspicious files are handled and any business software that needs an exception, then apply them centrally.
Maintain coverage
We keep the agent and its threat information up to date, check that every device is reporting and protected, and fix devices that drop out.
Follow up detections
Detections appear in the central console. Our team follows up those that need attention, such as a quarantined file or a device that needs cleaning up, as part of your support.
- BlockedKnown malwareRecognised malicious files are blocked or quarantined
- BlockedSuspicious behaviourFor example, a program rapidly changing large numbers of files
- AllowedApproved business softwareRuns normally, with agreed exceptions where needed
- AllowedUpdates and policiesReceived from the central management console
Technical scope
- Next-generation antivirus combining recognition of known threats with behaviour-based detection
- Central deployment and management of the protection agent
- Protection policies agreed with you, including exceptions for business software
- Agent and threat information updates
- Coverage checks to identify devices that are unprotected or not reporting
- Quarantine and removal of detected threats according to policy
- Detections visible to our team in the central management console
Endpoint Protection and Managed Endpoint Security
Endpoint Protection is the foundation. The services below build on it, and the managed tier requires it on every device.
Endpoint Protection (this service)
Protection software on each device, deployed, updated and centrally managed. It stops threats on the device itself.
Basic Endpoint Vulnerability Scanning
Finds missing updates and known vulnerabilities and reports them. Included alongside Endpoint Protection in the Advanced plan. See Basic Endpoint Vulnerability Scanning.
Managed Endpoint Security & CVE Remediation
Adds remediation of vulnerabilities by our team, automated SIEM monitoring of endpoint security events, alert review and approved automated response. See Managed Endpoint Security.
Problems solved
Free or consumer antivirus on business devices
Home products aren't designed for central management. Business endpoint protection is managed from one place across all your devices.
Devices that quietly lose protection
Protection can be switched off, expire or stop updating without anyone noticing. Coverage checks find those devices.
Inconsistent settings
When each device is set up differently, some end up weaker than others. Central policies apply the same protection everywhere.
Malware arriving by email or download
Malicious attachments and downloads land on the device first. Endpoint protection is there to block them.
What's included
Included as standard
- Deployment of the endpoint protection agent on each workstation and laptop
- Central management and policy configuration agreed with you
- Agent and protection updates
- Coverage checks so unprotected devices are spotted
- Follow-up of detections that need attention, as part of your support
Optional or scoped
Available on request and confirmed in your proposal; not part of the standard service.
- Vulnerability detection, through Basic Endpoint Vulnerability Scanning
- Remediation, SIEM monitoring and approved response, through Managed Endpoint Security & CVE Remediation
- Filtering of malicious email before it reaches devices, through Email Security & Filtering
What's not included
- SIEM monitoring, vulnerability remediation and automated response, which are part of Managed Endpoint Security
- Personal or unmanaged devices, unless specifically agreed
- Recovery of data encrypted or destroyed by malware, which depends on your backups
- Servers, unless agreed during scoping
Endpoint protection reduces the risk of malware, but no product detects every threat. It works best alongside patching, email filtering, backups and staff awareness.
The protection features available depend on the product and licence level agreed in your proposal, and on the operating systems your devices run.
Who it's suitable for
- Businesses relying on free, consumer or unmanaged antivirus
- Organisations with laptops used away from the office
- Businesses that want protection managed by their IT provider rather than by staff
- Companies preparing for Cyber Essentials, where malware protection is one of the controls
Pricing
This service is tailored to your business, so we confirm the price after a short conversation about your requirements. There is no charge for the conversation.
Use the quote builder to add Endpoint Protection to an indicative quote, or book a free security review and we'll recommend what fits.
Price
On Application
Included in the Advanced IT & Security plan (£35 per device per month).
What affects the price
- Number of workstations and laptops
- Your support plan (Advanced already includes it)
- Operating systems in use
- Protection features and licence level required
All prices exclude VAT.
Add to Your QuoteFrequently asked questions
What is the difference between antivirus and next-generation antivirus?
Traditional antivirus mainly recognises known threats. Next-generation antivirus also looks at behaviour, so it can stop activity that looks malicious even when the specific file hasn't been seen before. It reduces risk rather than removing it.
Is Endpoint Protection included in my plan?
It is included in the Advanced IT & Security plan (£35 per device per month). On the Co-Managed and Essential plans it can be added, priced on application.
We already have antivirus. Do we need this?
It depends on what you have and who manages it. We check your current product, its licence and whether it is centrally managed, and recommend a change only if it leaves gaps.
What happens when a threat is detected?
The agent blocks or quarantines it according to the policy we agreed with you, and the detection appears in our central console. If the device needs further attention, such as a clean-up, our team follows it up as part of your support.
Do I need Endpoint Protection to have Managed Endpoint Security?
Yes. Managed Endpoint Security & CVE Remediation is built on top of Endpoint Protection, so it must be in place on every device in the managed tier.
Let's Secure Your Business
Find out how Pulsar IT can help protect, manage and improve your IT environment.