WithSecure Business Suite Corporate

What is included in WithSecure Business Suite Corporate?

Policy Manager – On-premises console for policies, deployment, alerts and reporting across hosts.
Client Security – Windows workstation protection with DeepGuard, firewall rules and Botnet Blocker.
Server Security – Protection for Windows file servers, Terminal Servers and Citrix servers.
Linux Security – Real-time scanning, firewall and integrity checking for Linux servers and workstations.
Mac and virtual protection – Client Security for Mac plus offload scanning for VMs and cloud workloads.
Important – No patch management, EDR, disk encryption or mobile device protection included.

What are the main benefits of WithSecure Business Suite Corporate?

WithSecure Business Suite Corporate is WithSecure's on-premises protection suite for workstations and servers, sold before the 2022 company split as F-Secure Business Suite. All components are managed from Policy Manager, which runs on your own Windows or Linux server rather than in a vendor cloud.

Management stays in-house – Policies, alerts and the console run on infrastructure you control.
Active Directory sync – Mirrors the AD tree and flags new unprotected hosts automatically.
Branch office updates – Policy Manager Proxy serves definition updates locally over slow links.
Remote host isolation – Isolate a suspicious machine from the console before investigating it.
Offline network support – Ultimate mode proxies reputation lookups for clients without internet.
VDI scan offloading – One Scanning and Reputation Server handles up to 130 VMs.

Why Windows Defender alone is not enough
Explains which protection gaps remain when a Windows network relies only on the built-in Microsoft antivirus.

Which company size is WithSecure Business Suite Corporate suitable for?

Business Suite fits organisations with their own IT staff or a service partner who can operate a Policy Manager server, keep it updated and review its alerts. It scales from a single site to nested policy domains with remote offices behind Policy Manager Proxy. A small office with nobody to run a server is usually better served by a cloud-managed console such as WithSecure Elements.

Does WithSecure Business Suite Corporate meet the requirements of Swiss cybersecurity legislation?

The reporting obligation in the revised Information Security Act applies to operators of critical infrastructure, such as energy, healthcare, transport, finance and many public bodies, not to every Swiss company. Affected organisations must report cyberattacks to the Federal Office for Cybersecurity (BACS) within 24 hours of discovery. Business Suite supports the detection side: Policy Manager collects malware and DeepGuard alerts from all managed hosts in one console and can forward them by email or syslog, so an incident becomes visible quickly and leaves a timestamped record. It provides no EDR telemetry, attack timeline or root-cause analysis, which are the details a report usually needs, and it does not submit reports or manage the reporting process. This information does not constitute legal advice; affected organisations should verify their obligations with BACS or a legal specialist.

Does WithSecure Business Suite Corporate meet the requirements of European cybersecurity legislation?

No software product makes an organisation compliant with the NIS 2 Directive, because the directive requires risk management measures that are organisational as well as technical. Its measure categories include incident handling, business continuity and backup, supply chain security, vulnerability handling, basic cyber hygiene, access control and the use of cryptography. Business Suite contributes to incident handling through central alerting and remote host isolation, and to cyber hygiene through enforced malware and firewall policies that users cannot change. In this edition it does not support vulnerability handling through patching, because Software Updater is reserved for Business Suite Premium. It also provides no encryption, backup or access management, so those measures need separate tools.

Does WithSecure Business Suite Corporate help with security questionnaires from large customers?

Yes for the endpoint protection part of a typical questionnaire, but not for all of it. With Business Suite you can confirm that Windows, Mac and Linux workstations and servers run centrally managed anti-malware with behavioural detection, that users cannot change security settings, that definitions update automatically, and that alerts are collected centrally and can be passed to a SIEM. You cannot confirm automated patching of third-party software, application allowlisting, disk encryption, mobile device management, EDR with investigation capability or backup. Patching and application control are the gaps raised most often, and both are closed by moving to Business Suite Premium in the same Policy Manager console. EDR can be added through WithSecure Elements EDR, whose sensors are already built into Client Security and Server Security, while encryption, mobile device management and backup require separate products.

What is the difference between WithSecure Business Suite and Business Suite Premium?

The decisive difference is patch management: only Business Suite Premium includes Software Updater, which installs missing Microsoft and third-party updates on Windows computers and servers from Policy Manager. Premium also adds Application Control, DataGuard for additional protection of data against ransomware, Web Content Control for blocking website categories, and Connection Control for secured online banking sessions. Platform coverage and the core protection engines are the same in both editions. For EMC storage servers, the standard edition supports ICAP only, while Premium supports both CAVA and ICAP.

Best antivirus programs for Windows 2025
Compares current antivirus products for Windows by protection, system load and handling to put test results in context.

Which limitations should you know before buying?

Management requires your own Policy Manager server on Windows or Linux, and that server has to be operated, backed up and updated by your team or service partner. Software Updater, Application Control, DataGuard and Web Content Control are only included in Business Suite Premium, so buyers who need automated third-party patching should plan for that edition from the start rather than upgrading later. EDR is not included: the sensors in Client Security and Server Security only report to the cloud-based WithSecure Elements EDR portal when a separate EDR subscription is active. There is no protection for Android or iOS devices and no disk encryption. We found no feature that WithSecure restricts to specific countries or regions.

Frequently asked questions about WithSecure Business Suite Corporate

What does Corporate mean in the product name?

Corporate designates the licence segment for commercial organisations, as distinct from the education and government segments. It does not add features; the functional scope is that of the standard Business Suite edition.

Which Business Suite version is currently supported?

The 16 series is the currently supported generation of Policy Manager, Client Security and Server Security. Support for all earlier on-premises versions ended on 30 September 2024, and WithSecure has not yet set an end-of-life date for the 16 series.

Do clients keep receiving updates if Policy Manager is unreachable?

Yes. By default, Client Security and Server Security fall back to WithSecure's own update servers for malware definitions when they cannot connect to Policy Manager, so protection stays current during a server outage.