עברית

Endpoint protection and EDR

Protecting the machine itself, not only the perimeter

ILS Networks deploys and manages endpoint protection and EDR: ESET and SentinelOne, one policy across workstations and servers, integrated with your existing network and security layers.

Book a call What the service covers
Partnerships
ESET · SentinelOne
Coverage
Endpoints and servers
Support
24/7

Overview

A good firewall does not help once the attack is already inside

Most incidents today do not come through the wall — they come through a person: a file that got opened, a phishing message that worked, a password that leaked. Once that has happened, what decides the outcome is what you can see inside the machine itself, and how quickly you can isolate it.

So endpoint protection is not a licence you install and forget. It is deployed to a defined policy, it covers servers as well as desktops, it connects to what you can see on the network, and somebody is named as the person who reads its alerts.

What the service covers

Deployment, policy and operation

01

Deployment

  • ESET or SentinelOne, matched to the environment
  • Coverage across workstations, servers and virtual environments
  • Orderly removal of the previous product with no exposure window
  • A pilot before any organization-wide rollout
02

Policy

  • One policy across the organization, not per-machine settings
  • Separation between user groups and server groups
  • Exceptions documented and reviewed, not accumulated
  • Alignment with requirements set by external bodies
03

Ongoing operation

  • Alert monitoring and incident handling
  • Version updates and coverage checks — who has stopped reporting
  • Integration with firewalls and the network estate
  • 24/7 support alongside the rest of the infrastructure

Proof

Security in operating enterprise environments

Ariston Group

A centrally managed security stack

01

A Sophos-based security infrastructure as the central protection layer, alongside ten branches connected under a single, centrally managed security policy.

  • Sophos
  • Unified policy

CooperVision

Threat detection in network traffic

02

An NDR solution deployed for threat detection in network traffic, as a layer complementing endpoint protection and the network we built.

  • NDR
  • Arista Networks

The projects shown here are based on work delivered by the ILS team in customer environments.

FAQ

Frequently asked questions

What is the difference between antivirus and EDR?

Classic antivirus recognises known files by signature. EDR watches behaviour on the endpoint — which processes ran, what they tried to change, where they connected — so it catches attacks nobody has seen before and lets you investigate what happened after the fact. For most organizations the right answer is not to choose, but to deploy a platform that does both.

Which endpoint products do you work with?

ILS Networks is an official partner of both ESET and SentinelOne. The choice between platforms comes from the environment: workstation and server counts, the operating systems actually in use, regulatory requirements, and who operates the system day to day.

Does the protection cover servers, or only workstations?

Servers too. A policy that covers only workstations leaves the layer that actually holds the data exposed. Deployment is planned so workstations, servers and virtual environments run under the same policy and the same management.

How does this fit with the firewall and the network?

The endpoint layer and the network layer should tell the same story. We design them together — segmentation in the network, firewalls at the edge and endpoint protection inside the machine — so an incident looks the same from both angles instead of falling between them.

Who operates the system after deployment?

That is agreed up front. At some clients the internal team operates it and we advise; at others operation is part of our managed IT service. What matters is that someone is defined as watching the alerts — an EDR nobody reads is a licence, not a defence.

Do you serve organizations in Israel?

Yes. ILS Networks is an Israeli IT infrastructure company operating since 2009, with 24/7 support, and an official partner of ESET and SentinelOne.

Next step

Want to know what is actually protected?

A short technical call with the team: what is installed today, how much of it is live, and what is missing — no commitment.

Your details are used to respond to your inquiry, as described in our privacy notice.