Webroot SecureAnywhere Business Endpoint Protection Review - Review 2022

Webroot SecureAnywhere Business organisation Endpoint Protection (which begins at $150 per yr for v endpoints) is one of the few independently endemic and managed deject hosted endpoint protection services. The company Webroot provides a consummate spider web-based solution for IT professionals who need to protect Microsoft Windows PCs and servers as well as computers using Apple Bone X. The software also provides a mobile device component that offers features such as antivirus, device locate, device wipe, and secure browsing, though these features are mostly aimed at the Android platform due to the limits Apple tree builds into iOS. You can evaluate Webroot SecureAnywhere Business Endpoint Protection yourself via the 30-day trial available on their website. Overall, I liked this product very much just its disability to notice script-based attacks proceed it well behind current Editors' Choice winner Bitdefender GravityZone Elite.

User Interface

1 thing I liked nigh Webroot SecureAnywhere Business concern Endpoint Protection is that information technology'south delightfully simple to gear up. A client application can exist deployed and installed with minimal fuss subsequently being downloaded from the web console. The only prompt is for the activation key that matches the client upwardly to the online account. At that point, Webroot SecureAnywhere Business Endpoint Protection will scan your system for existing threats so enable itself. On the client side, Webroot SecureAnywhere Business Endpoint Protection provides a tiny, streamlined user interface (UI) that lets you perform a few key tasks such equally scanning, manual blocking, and log checking.

The Web Console is a straightforward, tabbed UI that didn't suffer from too much simplicity, different Avast for Business organisation Premium Endpoint Security. A squeamish touch hither for IT consultants is that Webroot SecureAnywhere Business concern Endpoint Protection can manage multiple organizations from i panel. You lot can drill downwardly into each to discover a specific Endpoint Protection module. From there, it'south possible to manage policies, groups of devices, run reports, and change global settings, which can be applied to all devices.

Administrators accept a broad and deep reach when it comes to controlling devices registered to the management panel. A full gamut of organisation actions, such as restarting the system, restoring a file, setting upwardly scans, and running control line tools, are simply a click away. Some of the features are slightly more complicated than I'd like, though. For instance, restoring a file requires knowing its Message Assimilate algorithm 5 (MD5) hash. While this can be tracked downwards through the log files, it seems unnecessarily involved. Granted, this is merely constructive if the arrangement recognizes that a procedure is doing potentially malicious things.

Webroot - Detailed threat reports

Test Results

Webroot SecureAnywhere Business Endpoint Protection immediately intervened in a quick and obvious mode on the customer system when I began extracting my sample of 111 malware variants to the desktop. Information technology brought upward a dialog that showed the quarantined items and offered to clean them. Also, websites with known malware were immediately blocked. My custom ransomware simulation, nevertheless, was non immediately blocked and I was able to apply a cipher to a folder of sensitive data. Fortunately, Webroot SecureAnywhere Business Endpoint Protection did monitor the changes and, once I manually blocked the app, the changes were chop-chop reversed.

To examination protection against harmful websites, I used a random selection of 10 newly reported websites from PhishTank, an open community that reports known and suspected phishing websites. All of the Uniform Resources Locators (URLs) I attempted to utilize resulted in a "Harmful spider web site blocked" bulletin in the browser.

When faced with two browser-based exploits, Webroot SecureAnywhere Business organisation Endpoint Protection fared exceedingly well. The offset test utilized a flaw in Java ane.vii, and below that, lets an attacker run programs remotely if a specific URL is clicked. Webroot SecureAnywhere Business Endpoint Protection quickly shut down the procedure and reported a threat on the dashboard. Similarly, the Flash-based exploit that allowed remote code execution was also blocked and eliminated. In add-on, Webroot SecureAnywhere Business Endpoint Protection successfully detected and removed several PDF files infected with a Metasploit payload that would have allowed a persistent connectedness to the machine.

Nonetheless, it strangely didn't observe a Microsoft Word file embedded with a like exploit. After deploying a phishing-style set on in which a user opened an infected electronic mail, Webroot SecureAnywhere Business concern Endpoint Protection did not detect the compromise. From this point, I could escalate my privileges to administrative status and appoint in several activities that would accept quickly triggered a response from most of our competitors and even Windows Defender. In order: I could retrieve a listing of all hashed passwords, clear the event logs, add items to the windows registry, upload and download files, encrypt files, and alter the windows hosts file that correlates URLs to where they resolve to, and install a keylogger.

Webroot - Group management

Interestingly, though, I had a keylogger installed when browsing HTTPS traffic; Webroot SecureAnywhere Business Endpoint Protection successfully jammed the output. Keystrokes appeared equally bare or only showed newline characters. While I was notwithstanding uneasy that I could go this far, Webroot SecureAnywhere Business organization Endpoint Protection was at least attempting to block fraud attempts.

The ultimate test, however, was attempting to shut down Webroot SecureAnywhere Concern Endpoint Protection without user intervention. Since the test environment's user is part of the local admin's grouping, I could escalate my privileges to arrangement level. Webroot SecureAnywhere Business Endpoint Protection makes it nearly impossible to kill the agile process. Information technology simply keeps restarting like an endless horde of system protection zombies. In the end, I was yet able to defeat this protection by but passing an uninstall switch to the Webroot SecureAnywhere Business Endpoint Protection app. Information technology silently disappeared and gave me full control. To prevent this from happening, y'all tin can ready up an uninstall password merely that doesn't get configured by default.

Independent lab results are difficult to come by for Webroot SecureAnywhere Business organization Endpoint Protection. However, MRG Effitas did award the MRG Effitas Online Banking/Browser Security laurels to Webroot SecureAnywhere Business Endpoint Protection in 2022, which is no easy feat. From a testing perspective, I think it's a solid product. However, the company volition demand to work on its scripting exploit prevention measures to keep upward with the residuum of the field, especially with leading products such as Editors' Pick Bitdefender GravityZone Elite and F-Secure Protection Service for Business (39.60 Per Device Per Year at F-Secure) .

Webroot - Overview

Attack Response

Webroot SecureAnywhere Business Endpoint Protection triggered alerts that I fix within a few short minutes of infection, and an piece of cake-to-come across red indicator showed upwardly on the dashboard. The client machine was relatively tranquility, however, when it came to alerting its user. The Chore icon inverse to have an exclamation momentarily, but all of the action occurred at the dashboard. This places near of the onus of response on your company's IT admin as opposed to the terminate user. Since Information technology folks are ofttimes running around rather than simply staring at a dashboard, this ways some delayed response, and certainly necessitates attending paid to configuring email and other notifications that can reach IT professionals when they're non at their desks. There are arguments for and against this philosophy merely it works as designed.

For the instances in which Webroot SecureAnywhere Business organisation Endpoint Protection misses an infection, there are protections in place to prevent keyloggers from dumping that data out to the spider web, but this tends to be an imperfect solution. Since it doesn't cake malware from collecting local network passwords, in that location'due south even so an opportunity to pivot since users, in general, utilise the same password in multiple locations. In the scenarios for which it was designed, withal, it worked well enough.

Webroot - White list and black list support

Webroot SecureAnywhere Business Endpoint Protection isn't a bad endpoint protection production by whatsoever ways, but information technology does fail to accost some of the newer methods of attack. Its primary mode of action is to prevent infections from native rather than scripted attacks. In Webroot SecureAnywhere Business organization Endpoint Protection's defense force, this will capture nearly of the attacks out there. However, in a post-Equifax era, it'due south enough to want to expect for an update that addresses these holes. It likewise caved nether the pressure of a direct attack when a file was snuck into an unsuspecting employee's system. Since humanity is always the weakest link, this is ofttimes an inevitability. Fifty-fifty then, with a few pocket-size patches, Webroot SecureAnywhere Business organisation Endpoint Protection could exist an excellent ally in defending your network.

Webroot SecureAnywhere Business Endpoint Protection Specs

Policies Target	Device
Manage past Grouping	Yes
Manage by Tag	No
Full Inspect Log	Yes
Linux Version	No
Mobile Device Management	Yes
Mobile Agent for Android	Yes
Mobile Agent for iOS	Yes
Malicious Website and Anti-Phishing Defense	No
External Device Control	No
Native Encryption Management	Yes