小白求助，不懂就问，KES11和KES10

yaohaozhe

四个问题，感谢各位大佬的解答：
1，单位提供了正版KES，包括完整的部署系统，key都是自动续约的。界面里写着Kaspersky endpoint security 10，但是版本号是11.0.1.90 AES256.这是KES11还是KES10?
2，如果是10，我能不能通过覆盖安装的形式升级到KES11，还可以正常使用单位提供的key。
3，11相比10有啥差别吗？之前一直用KIS2020，防护能力相比kis不会有很大差异吧？我看着功能模块都差不多，除了“安全控制”，而且我看到安全控制里面的东西我都用不到，就全关了。
4，KES怎么这么卡，界面还巨丑，我说的卡是界面UI卡，打开程序规则和消息设置都能卡死。程序用起来是不卡的。有方法改造一下吗？

zwl2828

Hello,

1、KES 10 最新版本为 10.3.3.304，KES 11 最新版本为 11.3.0.773。你电脑上安装的 KES 11.0.1.90 属于 11 系列，发行日期是 2018 年 12 月；

2、可以通过以下方式在计算机上更新 KES：

本地使用安装向导
本地使用命令行
远程通过 Kaspersky Security Center
远程通过 Microsoft Windows 组策略管理编辑器
远程使用系统中心配置管理器

你提到的“覆盖安装”对应第一种方式。你需要向管理员索取包含了“分发包”的安装文件，同时需要关注 KSC 下发的策略是否允许此项操作。

3、KES 11 第一个发行版的更新说明如下：

Integrated Endpoint Sensor component of Kaspersky Endpoint Detection and Response 1.0
IoC scanner (Indicators of Compromise)
Incident response tools
Incident investigation capabilities
System Watcher for servers (components Behavior Detection, Remediation Engine and Exploit Prevention)
OS support for System Watcher
Shared folders protection (from remote encryption)
User interface improvements
Protection components grouped by categories: Advanced Threat Protection and Essential Threat Protection
Technologies (machine learning, cloud analysis, etc) and protection components (Exploit Prevention, Behavior Detection, etc) are shown in statistics and reports.
New names for components.
Antivirus renamed to Threat Protection (for example, File Anti-Virus renamed to File Threat Protection).
System Watcher split to 3 components: Behavior Detection, Remediation Engine, Exploit Prevention.
Application Privilege Control renamed to Host Intrusion Prevention.
Application Startup Control renamed to Application Control.
Lightweight mode for Threat Protection (“Cloud mode”). Light antivirus databases with enabled KSN (require less RAM and drive space).
Device Control
Anti-Bridging feature added (blocks unauthorized commuting between networks).
Importing/Exporting the list of trusted devices (in xml format which is convenient for reading/editing manually).
Application Control
Mixed mode (simultaneous use of test and blocking rules).
New KL category – Trusted certificates.
Simplified interface of Kaspersky Endpoint Security. Application tray icon in Microsoft Windows task bar and context menu without displaying full application window.
Hash sum is specified in detection events and reports and can be used for exclusions. Can be used for configuring exclusions for Trusted Zone.
Masks *,?, ** are supported in Trusted zone settings.
Protection level indicator for policy.  Notifies in case critical protection components are disabled.
Various usability improvements.
Simplified deployment wizard.
Optimized license management.

更新版本的发行说明可以访问 https://support.kaspersky.com/kes11/new 查阅。

4、我这边早期购入的计算机目前没有用户回报遇到明显的性能问题。KES 用户可操作的功能一般仅报告、备份等，日常使用中也不需要打开主界面操作。你提到的“改造一下”我觉得还是要关注 KSC 下发的策略，KSC 默认策略不允许用户卸载 KES 和 Agent 以及修改任何设置或退出 KES。你可以将你遇到的问题回报给 KSC 管理员，询问其是否可尝试在 KSC 上将最新版本的 KES 推送（或者制作独立安装包）到你的计算机进行远程静默升级，升级至最新版本后查看该问题是否得到改善。

Thanks.