FIM vs Kaspersky Endpoint Security for Business

FIM is free, open-source software for monitoring file systems on premises. It watches files in the background, keeps historical information, emits events when changes occur, creates hashes, and analyzes content, attributes, ownership, and permissions. On Linux, the Audit daemon can identify who caused an event and which command produced it. Events may be written locally, sent over a network, or sent to both destinations. Documentation lists Elasticsearch 8.x or OpenSearch 2.x and Splunk indexer 9.x integrations, with only one integration active at a time. FIM runs on Linux, Windows, and macOS. Installation guidance lists Ubuntu Xenial or later, CentOS 7 or later, Windows 7 or Server 2016 or later, and macOS Big Sur or later. Minimum requirements are one CPU core, 128 MB memory, and 1 GB storage, with storage use increasing over time. The maker says support is free and provides an email contact.

Kaspersky Endpoint Security for Business provides endpoint protection for small and medium-sized businesses. Its threat protection uses machine learning and threat intelligence against fileless threats, exploits and rootkits. Controls include endpoint protection, anti-ransomware, application, web and device controls, vulnerability and patch management, and encryption. Kaspersky Security Center offers MMC, web and cloud consoles for configuring, deploying, updating and managing security. Organizations can deploy the product in cloud, on-premise, hybrid or air-gapped environments; supported systems include Windows, Windows Server, Linux, macOS, Android and iOS. Windows protection includes AES-256 encryption, BitLocker management, and encryption identified as FIPS 140-2 and Common Criteria EAL2+ certified. Security Center can manage up to 100,000 physical, virtual and cloud-based endpoints through one server installation. Pricing is on request, and Kaspersky business products are sold through partners. Kaspersky states that Endpoint Security for Business Select has evolved into Kaspersky Next EDR Foundations and related Next solutions.