F-Secure’s business endpoint solution, Protection Service for Business (PSB), is one of the few platforms that provides security cover to workstations, servers as well as mobile endpoints. It supports Windows, macOS, and Linux along with Android and iOS mobile devices.
Plans and Pricing
Strangely, F-Secure sells PSB licenses only through authorized resellers or managed service providers.
Unlike many of its peers, there’s no minimum number of licenses that need to be purchased for PSB and F-Secure offers annual subscriptions for a period between 1 to 3 years.
Its tier-based pricing is based on the number of endpoints and the price per endpoint will come down as the number of endpoints go up.
For instance, protecting 25 endpoints for a term of 1 year cost $33.73 per endpoint, or for a term of 3 years $27.44 per endpoint per year. Similarly, protecting 100 endpoints for a term of 1 year costs $23.10 per endpoint, or for a term of 3 years $19.25 per endpoint per year.
One of the good things about PSB is that it uses the F-Secure Security Cloud for real-time threat intelligence, which the company claims helps it identify and prevent new threats from around the world within a matter of minutes.
PSB relies on heuristic, behavior, and reputation analysis to sniff out zero-day malware and exploits. Moreover, once such an attack has been identified, even if on an endpoint on the far side of the planet, it’ll share that information with all its protected endpoints across the world.
Besides such behind-the-scenes protections PSB also offers more proactive security controls. It’s got device control to prevent threats from removable devices and can also curb data leakages by allowing read-only access.
Then there’s the patch management feature that we particularly like. With this feature you can use PSB to download and distribute software updates to all the endpoints in your network. You can optionally use this feature via PSB’s endpoint proxy product to minimize the bandwidth usage while downloading updates. This proxy, which can be installed atop Windows or Linux machines, caches updates to the malware signature database, along with the patch management updates.
PSB also has adequate web controls. The platform will prevent access to phishing sites, and will also block malicious scripts and other types of rogue content. There’s also the Connection Control feature that can be configured to ensure that connections aren’t interrupted during online banking and that the clipboards are cleared when you are done banking.
One security feature that’s been handled very smartly is the firewall. Instead of reinventing the wheel, PSB doesn't include its own firewall and rather has a set of customizable rules for configuring the Windows Firewall.
Interface and use
The PSB platform is made up of several individual products that cover all the supported features across the various supported platforms. You’ll have to select the appropriate product during the process of enrolling an endpoint.
PSB enables you to deploy the security clients by email, and in addition to local installation, you can also deploy the clients on a large network remotely.
The centralized cloud management interface looks modern and is fairly intuitive to operate. It’ll offer to take you through an interactive guided tour when you first log in and also includes a fairly detailed support section that offers several onboarding videos to help you orient yourself with the interface.
The landing page is smartly designed and will give you a good security overview of your environment. It’ll depict issues such as missing security updates, and the status of security features like real-time scanning and firewall.
Endpoints are assigned default policies or profiles as PSB calls them, that cannot be modified but can be cloned and tweaked and assign them either individually or in groups to all your endpoints.
The settings are broken down into sections and for the most part have labels that spell out their purpose. There’s also contextual tooltip help with virtually all of the settings to clarify the purpose of the setting, which is pretty handy. Still, finding a particular setting could be a time consuming affair if you didn’t know where to look. A search function specifically for the profile settings would’ve been a great addition.
In addition to enabling and disabling individual settings, PSB also gives you the option to enforce many of the essential settings such that they cannot be modified by the users on the endpoints.
One good thing about this platform is that the console-to-endpoint communications work in real time. This allows you to configure, deploy and tweak settings without any delays caused by polling intervals.
The administration interface also has a detailed graphical reports section that will show lots of relevant and useful information. However these reports don’t offer the same kind of details that you get with some of the other platforms. Furthermore, while you can generate the reports as per a schedule and send them via email, it isn’t possible to print them directly.
While PSB’s dashboard is fairly attractive and gives out essential information about your endpoints, it doesn’t offer as many details, nor is it as configurable as some of its peers such as ESET Endpoint Protection Advanced Cloud.
Also while there aren’t any glaring gaps in PSB’s offering, we were surprised to find that ransomware protection is bundled as part of the Premium edition add-on. Ransomware protection is usually offered as a standard security feature with many endpoint security solutions such as TrendMicro Worry-Free Services Advanced. If you do purchase the Premium offering, you’ll also get the Application Control module to block the execution of suspect apps and scripts.
Furthermore, while PSB protects mobile devices, you’ll have to pay extra to get anti-theft features. This is pretty unusual as even the Avira Antivirus for Endpoint that includes the Free version of the smart client, offers anti-theft features.
PSB’s final shortcoming is its lack of reporting dexterity.
Despite the above mentioned shortcomings, PSB offers a great number of security features. But alas, not all of these are available on all its supported platforms. A majority of the features are available only on Windows, while Linux workstations essentially only get malware protection and integrity checking.
The lack of web traffic scanning and browsing protection on Linux also doesn’t bode well for businesses that have Linux endpoints. Similarly, we aren’t sure if bundling ransomware protection as part of the Premium subscription is a good idea.
These issues together with small irritations like the inability to download PDF reports, and no endpoint-wise breakdown of updates, prevents PSB from scoring any higher.