The EDR solution provides flexible Endpoint Security Server deployment and a centralized management architecture designed to support organizations with geographically distributed offices, multiple administrative levels, and large endpoint environments.
The solution supports deployment on both Microsoft Windows and Linux/Ubuntu operating systems and provides hierarchical visibility with role-based access control across different organizational aggregation levels.
1. Flexible Endpoint Security Server Deployment
The EDR solution provides the flexibility to deploy the Endpoint Security Server on either:
- Microsoft Windows Server
- Linux / Ubuntu Server
This allows organizations to select the server operating system according to their existing infrastructure, IT policies, and deployment requirements.
The server architecture supports centralized management of protected endpoints and security operations from the EDR Management Console.
2. Centralized EDR Management Console
The solution provides a centralized Management Console for monitoring and managing endpoint security across the organization.
The console provides consolidated visibility into:
- Endpoint security status
- EDR detections
- Security alerts
- Threat incidents
- Policy status
- Endpoint health
- Protection status
- Other security and operational information
This enables security teams to monitor the overall endpoint security posture from a single interface.
3. Multi-Level Aggregation
The EDR Management Console supports multiple levels of organizational aggregation, allowing security information to be viewed according to the organization’s administrative structure.
The aggregation hierarchy can include levels such as:
Headquarters (HQ) → Zone → Region → Division → Depot → Endpoint
The hierarchy can be customized according to the organization’s actual structure and reporting requirements.
Administrators can therefore view EDR status at a specific organizational level or drill down to individual groups and endpoints.
4. Hierarchical Security Visibility
The solution provides security visibility at different organizational levels.
For example:
Headquarters
Authorized users can obtain an overall view of endpoint security across the complete organization.
Zone / Region
Security teams can view the security posture of endpoints belonging to a specific zone or region.
Division / Depot
Authorized users can further drill down into specific divisions, offices, depots, or other organizational units.
Endpoint
Analysts can ultimately access individual endpoint information for detailed investigation and remediation, subject to their assigned permissions.
This hierarchical approach allows each administrative team to focus on the endpoints and security information relevant to its responsibility.
5. Role-Based Access Control
The EDR solution provides Role-Based Access Control (RBAC) to control access to security information and management capabilities.
Multiple users can be assigned different roles and access permissions based on their organizational responsibilities.
Access can be controlled according to:
- User role
- Organizational level
- Assigned site
- Region
- Zone
- Division
- Depot
- Device group
- Other configured administrative scope
For example, an administrator responsible for a particular region can be restricted to viewing and managing endpoints within that region, while a higher-level administrator can have visibility across multiple regions or the entire organization.
6. Segregated Administrative Access
The hierarchical access model ensures that users receive only the level of visibility and control appropriate to their responsibilities.
This provides:
- Centralized governance
- Delegated administration
- Controlled access to endpoint information
- Separation of administrative responsibilities
- Reduced risk of unauthorized policy or configuration changes
7. Drill-Down Monitoring
The Management Console allows authorized users to move from a high-level security overview to more detailed information.
For example:
HQ → Zone → Region → Division → Depot → Device Group → Endpoint → Security Event
This drill-down capability enables administrators to quickly identify where security issues are occurring and investigate the affected endpoints.
8. Scalable Organizational Management
The combination of flexible server deployment, centralized monitoring, hierarchical aggregation, and role-based access provides a scalable architecture for organizations with distributed endpoint environments.
The solution enables organizations to maintain:
Centralized Control + Hierarchical Visibility + Delegated Administration + Role-Based Access
This architecture provides centralized EDR governance while allowing security and IT teams at different organizational levels to independently monitor and manage the endpoints within their assigned scope.
