Difference between McAfee ENS and EDR

[#1]

Hi Team, Can you help me out a bit? I haven’t worked with McAfee before and the client asked us if it is an EDR. So I see we have McVision EDR as a separate tool. But ENS is also monitoring some events and even taking action too. So what exactly do we have here as tool capabilities with ENS. Can you elaborate a bit?

[Daveb3d]

Basically, ENS is antimalware and behavioral prevent (though it can monitor), but EDR is logging all system activity and trying to identify threats based upon correlated behaviors.

Dave

[AdithyanT]

Hi,

Thank you for your post.

ENS WHitepaper: https://www.mcafee.com/enterprise/en-us/assets/white-papers/wp-understanding-ep-security-10-module.p...

EDR Whitepaper: https://www.mcafee.com/enterprise/en-us/assets/data-sheets/ds-mvision-edr.pdf

EDR cannot replace an Antivirus program, it can, however, be used to complement it by enhancing your investigation and detection capabilities in the machine. They are 2 separate products that cannot be directly compared with each other owing to the difference of their purpose. I sincerely hope this helps.