Comparison of family features for Co-Exist and Exclusive

Comparison of Apex One family features

The following table provides a comparison of features for Co-Exist and Exclusive in the Apex family.

	Feature	Module	SaaS		On-Premise
	Feature	Module	Co-Exist	Exclusive	Co-Exist	Exclusive
Prevention	Web Reputation Service	Anti-Malware	✔	✔	✔	✔
	Anti-Malware	Anti-Malware	✘	✔	✘	✔
	Pre-Execution Machine Learning	Anti-Malware	✔	✔	✔	✔
	Behavior Monitoring	Anti-Malware	✘	✔	✘	✔
	Attack Discovery (IOA)	Endpoint Sensor	✔	✔	✔	✔
	Anti-Exploit	Anti-Malware	✘	✔	✘	✔
	Runtime Machine Learning	Anti-Malware	✘	✔	✘	✔
	Device Control	Anti-Malware	✘	✔	✘	✔
	Data Loss Prevention	Anti-Malware	✘	✔	✘	✔
	Application Control	Application Control	✔	✔	✔	✔
	Virtual Patch	Vulnerability Protection	✔	✔	✔	✔
Detection	VASO - IP, URL, DNS, File	Anti-Malware	✔¹	✔	✔¹	✔
	UDSO - IP, URL, DNS, File	Anti-Malware	✔¹	✔	✔¹	✔
	UDSO - SHA1/256	Application Control	✔	✔	✔	✔
	Sample Submission	Anti-Malware	✔²	✔	✔²	✔
	Attack Discovery (IOC)	Endpoint Sensor	✔	✔	✔	✔
Response	Kill Chain	Endpoint Sensor	✔	✔	✔	✔
	Network Isolation (Kill Chain)	Anti-Malware	✔	✔	✔	✔
	Application Ban (Kill Chain)	Application Control	✔	✔	✔	✔
	Process Termination (Kill Chain)	Endpoint Sensor	✔	✔	✔	✔
	UDSO - IP, DNS, SHA1/256 (Kill Chain)	Endpoint Sensor	✔	✔	✔	✔
	Sweeping (IOC, YARA, STIX)	Endpoint Sensor	✔	✔	✔	✔

¹ Only supports SO-URL
² Only supports USB Autorun

The following table provides a comparison of the EDR events between specific Apex One features that have been disabled and Apex One.

Endpoint Sensor Captured Events	Apex One Disabled Advanced Protection Service	Apex One (On-Prem and SaaS)
Endpoint Sensor Captured Events	Apex One Disabled Advanced Protection Service	Co-Exist	Exclusive
File	✘¹	✔	✔
Process	✘¹	✔	✔
Registry	✔	✔	✔
Account	✘	✔	✔
IP/Port	✘	✔	✔
DNS	✘	✔	✔
Memory	✘	✔	✔
Injection	✘	✔	✔
Signature	✘	✔	✔
Internet	✘	✔	✔
AMSI	✘	✘	✔

¹ Endpoint Sensor can only record partial events

Comparison of Apex One family features