Kaspersky Small Office Security Review: One Dashboard, One File Server

Fix it now

Kaspersky Small Office Security is not a console-free product. Kaspersky publishes the KSOS Portal as one cloud dashboard for every device and user, from which machines are added and removed, updates pushed and alerts reviewed. A five-licence pack covers five PCs or Macs, five mobile devices and one file server, plus five installs of the VPN and Password Manager.

1. Buy it if you have a small team and one file server, and want the server covered by the same engine as the desktops.
2. Buy it if you are currently running consumer licences on business machines, which is both under-protective and not permitted.
3. Count devices, not seats, when you size the pack. The file server is additional to the device count rather than drawn from it.
4. Skip it if you need enforced central policy, dynamic groups and reporting you could hand an auditor. Kaspersky Next is that product.
5. Skip it if the firm is growing quickly. You will migrate within a year and pay for the move twice.
6. The jurisdiction and procurement questions in our Kaspersky Standard review apply to business buyers too, often more sharply.

Name every server on your quote. The pack covers a file server, and whether a Linux box or a hypervisor can be covered is not something the published pack description settles.

If that settles it you can stop here. If you want the pack contents and the comparison with Kaspersky Next, read on.

Why it happens

The premise this article used to run on was that Small Office Security is the product you buy when you do not want a console. That is not what Kaspersky publishes. Kaspersky describes the KSOS Portal as one cloud dashboard for every device and user, from which an administrator can add and remove machines, push updates, review alerts and manage password and Safe Money settings. There is a central management surface, and the decision between this product and the managed platform is about what that surface does rather than whether it exists.

The licensing shape is the second thing that is usually got wrong, and it works in the buyer’s favour. Kaspersky publishes a five-licence pack as covering five PCs or Macs, five mobile devices and one file server, plus five installs of the VPN and Password Manager. The file server is additional to the device seats rather than consuming one of them. Anyone who has been told to count the server against the pack has been told to buy more than they need.

Mobile is included on both major platforms rather than being an Android afterthought. Kaspersky publishes supported platforms as Windows 11, 10, 8.1, 8 and 7 SP1 or later, macOS 11 or higher, Android 8 or higher and iOS 15 to 17. Check the bottom of that list against the oldest machine and the oldest phone in the office before ordering.

What is in the box is broader than a plain endpoint licence and worth listing, because reviews routinely omit half of it: a built-in VPN, a password manager, file encryption and encrypted backup, Safe Money checkout protection, vulnerability scanning and web control. Those are the tools a small firm actually reaches for, and they are the reason the product is priced above a workstation licence.

File server coverage is the part that earns the product its place. A shared server is where ransomware does its visible damage, because that is where the documents everybody needs live. Covering it with the same engine as the desktops closes the gap that a workstation-only purchase leaves open, and it is the single most common omission when a small firm buys protection piecemeal.

The ceiling is real even so, and it is about enforcement and evidence rather than about the absence of a dashboard. What the published description of the portal does not establish is that it enforces policy across devices in the way an administrator means by that word, or that it produces reporting you could hand to an auditor. If you need either, price Kaspersky Next instead and do it before you buy this, because migrating costs more than starting in the right place.

Full reference

What a pack covers

That table is the correction most worth carrying away. The server does not eat a seat, and the mobile allowance is a separate five rather than a share of the computer count.

Supported platforms

What the product includes

• Kaspersky’s protection engine on desktops and on the file server.
• A built-in VPN and a password manager, with installs counted separately from the device seats.
• File encryption and encrypted backup.
• Safe Money checkout protection.
• Vulnerability scanning and web control.
• The KSOS Portal: one cloud dashboard for adding and removing devices, pushing updates, reviewing alerts and managing password and Safe Money settings.

Protection on the file server is not a backup. Test that you can restore the shared folders from a backup held somewhere the server cannot write to, and test it before you need it. Every ransomware recovery that goes well is a recovery from a backup, not from an antivirus product.

Small Office Security against Kaspersky Next

When to move up

1. The first time a client, insurer or auditor asks how your endpoints are managed and you cannot produce a report.
2. When you need to enforce a setting rather than request it, such as device control or a scan window.
3. When you acquire a second site, or staff who never come into the office.
4. When the device count passes what one pack covers and you find yourself managing two.
5. When you add a server that is not the file server the pack covers.

What we could not establish

Pack sizes above five licences and their term lengths are not published on the pages we could reach. Nor is whether a Linux server or a hypervisor can be covered: the pack names a file server, and the platform list is a Windows, macOS, Android and iOS list. Name every server you own on the quote and ask specifically, rather than assuming either a yes or a no.

Questions people ask about this