The following table provides a comparison of features for Co-Exist and Exclusive in the Apex family.
| Feature | Module | SaaS | On-Premise | |||
|---|---|---|---|---|---|---|
| Co-Exist | Exclusive | Co-Exist | Exclusive | |||
| Prevention / Blocking | Web Reputation Service | Anti-Malware | ✔ | ✔ | ✔ | ✔ |
| Anti-Malware | Anti-Malware | ✘ | ✔ | ✘ | ✔ | |
| Pre-Execution Machine Learning | Anti-Malware | ✔ | ✔ | ✔ | ✔ | |
| Behavior Monitoring | Anti-Malware | ✘ | ✔ | ✘ | ✔ | |
| Attack Discovery (IOA) | Endpoint Sensor | ✔ | ✔ | ✔ | ✔ | |
| Anti-Exploit | Anti-Malware | ✘ | ✔ | ✘ | ✔ | |
| Runtime Machine Learning | Anti-Malware | ✘ | ✔ | ✘ | ✔ | |
| Firewall | Anti-Malware | ✘ | ✔ | ✘ | ✔ | |
| Device Control | Anti-Malware | ✘ | ✔ | ✘ | ✔ | |
| Data Loss Prevention | Anti-Malware | ✘ | ✔ | ✘ | ✔ | |
| Application Control | Application Control | ✔ | ✔ | ✔ | ✔ | |
| VASO - IP, URL, DNS, File | Anti-Malware | ✔1 | ✔ | ✔1 | ✔ | |
| VASO - IP, URL, DNS, File | Anti-Malware | ✔1 | ✔ | ✔1 | ✔ | |
| UDSO - SHA1 | Application Control | ✔ | ✔ | ✔ | ✔ | |
| Virtual Patch | Virtual Patch | Vulnerability Protection | ✔ | ✔ | ✔ | ✔ |
| Sample Submission | Sample Submission | Anti-Malware | ✔2 | ✔ | ✔2 | ✔ |
| Detection | Attack Discovery (IOC) | Endpoint Sensor | ✔ | ✔ | ✔ | ✔ |
| Generate Root Cause Chain | Endpoint Sensor | ✔ | ✔ | ✔ | ✔ | |
| Response | Network Isolation (via Root Cause Chain) | Anti-Malware | ✔ | ✔ | ✔ | ✔ |
| Application Ban (via Root Cause Chain) | Application Control | ✔ | ✔ | ✔ | ✔ | |
| Process Termination (via Root Cause Chain) | Endpoint Sensor | ✔ | ✔ | ✔ | ✔ | |
| Add to UDSO - IP, DNS, SHA1 (via Root Cause Chain) | Root Cause Chain | ✔ | ✔ | ✔ | ✔ | |
| Sweeping (IOC, YARA, STIX) | Endpoint Sensor | ✔ | ✔ | ✔ | ✔ | |
2 Only supports USB Autorun
The following table provides a comparison of the EDR events between specific Apex One features that have been disabled and Apex One.