Kaspersky Endpoint Security for Linux
For workstations and servers
Although the number of threats targeting Linux is lower compared to those targeting other platforms, attacks against it are on the increase: there are more than 100,000 malicious files registered in Kaspersky Lab databases.
Kaspersky Endpoint Security for Linux provides next-generation, multi-layered protection against all types of cyberthreats, on the widest range of Linux platforms. It delivers reliable protection with minimal impact on performance. It’s available within our comprehensive product portfolio – including Kaspersky Endpoint Security for Business – and provides complete protection in hybrid environments, ensuring all systems are managed and protected all the time.
Kaspersky Endpoint Security for Linux provides built-in technologies to:
- Eliminate redundant scanning and protect valuable data and business applications
- Identify and block the latest, emerging threats
- Deliver optimal security with minimal impact on other applications or overall system performance.
Protection from cyberthreats
Kaspersky Endpoint Security for Linux is built on the world's most tested, most awarded security. It combines the best of human expertise with big data threat intelligence and machine learning. Multiple layers of security detect known and advanced threats, even in memory or boot sectors.
Real-time protection from zero-day attacks
Rapid response to zero-day malware is a critical part of Kaspersky's cybersecurity capabilities. Kaspersky Security Network (KSN) is our advanced cloud system that processes anonymized threat data from millions of nodes worldwide, using sophisticated data science technologies to deliver near real-time threat intelligence to every user.
This agility means that, even in zero-day attack situations, where threat information is not yet available to the endpoint, KSN works with Kaspersky Endpoint Security for Linux to stop threats. Big data processing of massive volumes of threat metadata from suspicious files makes it possible to make rapid, accurate decisions about their safety without having to completely analyze their content – with short response times, it's a significant additional layer of security for *nix endpoints.
Behavior Detection provides proactive defenses, identifying and extracting suspicious behavior patterns and effectively protecting your system against advanced threats.
Auto-scan of removable drives
Auto-scan for newly connected storage devices doesn't allow malicious programs that exploit operating system vulnerabilities to replicate themselves via removable drives.
Network Threat Protection
Our Network Threat Protection helps to prevent network threats – including port scanning, denial-of-service attacks and buffer-overruns. It constantly monitors network activities and, if it detects suspicious behavior, runs pre-defined responses.
Web Threat Protection and anti-phishing
Our Web Threat Protection delivers a near-100% threat detection rate incorporated in the web traffic and blocking blocks harmful scripts.
Web Threat Protection monitors web traffic for attempts to visit phishing websites – and blocks access to them. To check links on webpages for phishing threats and malicious web addresses, Kaspersky Endpoint Security uses the application databases, heuristic analysis and data from Kaspersky Security Network.
Reduce exposure to attacks with device control
Device control reduces your attack surface and helps keep users safe and compliant with security policies.
Control network risks from one place
Configure and manage built-in Linux OS firewall settings: Kaspersky Endpoint Security for Linux enables the creation of firewall rules policy, network activity logs and security incident review from one place.
Enforce network policies to all endpoints from Kaspersky Security Center, your single point of security management and control.
Kaspersky Security for Linux contains a unique anti-cryptor mechanism capable of blocking encryption of files on shared resources from a malicious process running on another machine on the same network. This system constantly watches over the protected shared folders, tracking the state of the stored files. As soon as encryption activity is detected, the system blocks the attack source machine from accessing the server, stopping the encryption process and preventing the loss of corporate data.
Help meet regulatory requirements
The safety of sensitive data is at the top of every business's security agenda. Kaspersky Security for Linux supports this with essential functionality to strengthen security and aid compliance with key principles such as PCI DSS and SWIFT usage requirements. The File Integrity Monitor can guarantee the integrity of system files, logs and critical applications by tracking unauthorized changes in important files and directories.
Security for DevOps
Kaspersky Endpoint Security for Linux enables run-time protection from threats, on-demand scanning of containers, images and repositories as well as flexible integration into CI/CD pipelines.
Run-time protection for containerization platforms
Secure containerization environments ensure safer development, packaging and publishing of applications. Kaspersky Endpoint Security for Linux packs extensive security for Docker platform, enabling On-Access Scan (OAS) for File Threats, providing real-time Behavioral Protection to prevent exploitation, privilege escalation and container escape attempts. Namespaces are monitored for threat-carrying entity isolation and granular control of actions that are taken on the abusing entity upon detection.
On-Demand Scanning (ODS) tasks with flexible scope control
On-Demand Scanning of containers, images and both local and remote repositories allows maintaining sanitized repos for devs’ needs. Namespace monitoring, flexible mask-based scan scope control and ability to scan different layers of containers help enforce secure development best practices.
Rich integration options enable “security as code” approach
Kaspersky Endpoint Security for Linux provides interfaces to enable “security as code” approach. Paired with ODS, Kaspersky Endpoint Security for Linux enables transformation of DevOps into DevSecOps, helping combine lean software practices and Just-In-Time application building, packaging and delivery in a controlled and secure way without slowing down the processes.
CI/CD platform integrations (e.g. Jenkins) simplify pipeline building and automation.
Low footprint for high-performance protection
Kaspersky Endpoint Security for Linux is specifically designed to have minimal impact on other programs and overall system performance. The graphical user interface is optimized for Linux and together with improved command line management capabilities, this simplifies task execution and daily reporting.
Load balance performance at kernel level
Load balancing of resources and optimized scanning technology – with the option to exclude trusted processes – enhances overall performance while reducing system requirements for protection. (System resources are reallocated when PC or server load is low or heavily loaded). Kaspersky Endpoint Security for Linux provides exceptional scanning performance with fanotify (kernel internal object) compatibility for on-access scanning.
Security scanning can be performed in background mode while server software is being updated, helping to reduce server downtime.
Eliminate unnecessary resource consumption
Kaspersky Endpoint Security for Linux optimizes resource usage with on-demand and scheduled scanning of local hard disks, media drives, shared file systems and distributed file systems.
A wide range of settings ensures high protection levels without sacrificing performance, for example:
- Schedule file scanning for unprivileged users
- Adjust the level of anti-malware protection
- Specify exceptions to enable selective scanning
Kaspersky Endpoint Security for Linux monitors and controls network shares and scans automatically when files are changed, ensuring that resources are optimized.
Centralized management – for ease of use even in mixed IT environments
Spend less time and fewer resources managing IT assets and security: Kaspersky Security Center's 'single pane of glass' console provides powerful security controls and management for all Linux endpoints.
Generate reports, configure group or individual tasks and universal policies, manage scan settings, etc., from the same console that manages Kaspersky security for other platforms, including Windows, Mac OS and Android.
Simplify deployment and kernel update process
Application installation takes just a few minutes on x86 and x64 platforms and requires only one package. No additional compatibility packages are required to run on x64 workstations or servers.
It's not necessary to reinstall or setup following kernel updates on workstations or servers – reliable protection against malware is up and running without the need for administrator involvement.
Customize tasks and configuration settings
Customize Linux protection across your business in a structured, efficient way using Kaspersky Security Center for group tasks and policies.
Three management options are available:
- The Kaspersky Security Center MMC console
- The Kaspersky Security Center's Web Console
- New The Kaspersky Security Center Cloud Console
How to buy
Kaspersky Endpoint Security for Linux is included in the following products:
For the most complete, up-to-date requirements, please refer to Kaspersky Knowledge Base.
- 1 GB of hard drive space for installation, storing temporary files and log files.
- An Internet connection for activating the application and updating databases and application modules
- Intel Core 2 Duo 1.86 GHz or higher processor
- RAM: 1 GB for a 32-bit OS (2 GB for a 64-bit OS)
- Swap partition of at least 1 GB
- CentOS-6.9 x86 / x64
- Debian GNU/Linux 8.9 x86 / x64 or higher
- Red Hat® Enterprise Linux® 7.4 x64 or higher
- Ubuntu Server 16.04 LTS x64 or higher
- openSUSE® 42.3 or higher
- Amazon Linux AMI
- Linux Mint 18.2 and later
- Micro Focus Open Enterprise Server 2018
- SUSE® Linux Enterprise Server 15
- OracleLinux 7.3 and later
- Perl interpreter: version 5.1 or higher (www.perl.org).
- Installed Which utility (from the OS installer).
- Installed packages for compiling applications (gcc, binutils, glibc, glibc-devel, make, ld), source code for the operating system kernel – for compiling modules of Kaspersky Endpoint Security 10 for Linux in operating systems that do not support fanotify.
- Kaspersky Endpoint Security for Linux is compatible with Kaspersky Security Center. To ensure proper functioning of the Kaspersky Endpoint Security for Linux administration plug-in, Microsoft Visual C++ 2015 Redistributable Update 3 RC (https://www.microsoft.com/en-us/download/details.aspx?id=52685) must be installed.
Version requirements for subscription
- This application is available as part of Kaspersky Endpoint Security for Business or Kaspersky Hybrid Cloud Security and can be purchased on subscription, with flexible monthly licensing. Please check with your local partner about system requirement, and subscription options in your country here.
World-class protection and confidential data security for servers and workstations running *nix operating systems on a corporate network.
Kaspersky's unique combination of big data threat intelligence, machine learning and human expertise enables agile, responsive protection against any kind of threat — with minimal management overheads.