ManageEngine Malware Protection Plus
Malware Protection Plus at a glance (for Canadian buyers)
- What it is
- ManageEngine's next-generation antivirus (NGAV) platform. Combines traditional signatures with AI/ML behavioural analysis and memory scanning across Windows, macOS, and Linux. Integrated ransomware protection with VSS-based file rollback. Positioned as a full AV replacement, not an add-on.
- Editions
- Free (fully functional for up to 25 endpoints, no time limit - behaviour detection, exploit protection, ransomware protection, threat investigation) and Enterprise Edition (paid, licensed by endpoint slab). No Professional tier - Enterprise is the sole paid edition.
- Licensing
- Per endpoint, with separate slabs for workstations and servers. Workstation slabs: 50, 100, 250, 500, 1,000, 2,500, 5,000, 10,000. Server slabs: 10, 25, 50, 100, 250, 500, 1,000, 2,500, 5,000. Each licence includes 1 technician; extra technician packs sold in 1/2/5/10/25/50.
- Term
- Annual Subscription (renewable) or Perpetual (with annual maintenance and support). On-premises or cloud deployment. Both appear on ManageEngine's public store.
- Canadian pricing
- Listed in USD by ManageEngine; Optrics quotes and invoices in CAD at the RBC daily rate on the quote date.
- Who to talk to in Canada
- Optrics Engineering, ManageEngine's Canadian partner since 2010. Call 1-877-430-6240.
Antivirus, Rebuilt for the Way Threats Actually Behave
Signature-based antivirus catches known threats well but struggles with the daily reality of malware that mutates, hides in memory, or runs entirely through scripts. ManageEngine Malware Protection Plus is a next-generation antivirus (NGAV) platform that pairs traditional signatures with AI and behavioural detection - so both the malware you've seen before and the variants you haven't get covered by the same agent.
What It Does
Where It Fits
For organisations that have outgrown free or signature-only antivirus but don't want the operational weight of a full EDR rollout, Malware Protection Plus sits in between - modern detection techniques delivered in an antivirus form factor with centralised management across the whole endpoint fleet.
Who It's For
A Note on Expectations
No antivirus product can promise complete immunity from malware - that's a marketing claim, not an honest one. Malware Protection Plus is a strong layered control: it significantly improves detection of unknown threats compared to signature-only tools, and gives your team better visibility into what's happening on endpoints when something does get through.
Frequently Asked Questions
What is ManageEngine Malware Protection Plus?
Malware Protection Plus is ManageEngine's next-generation antivirus (NGAV) platform. It combines traditional signature and heuristic detection with AI/ML behavioural analysis and memory scanning to defend Windows, macOS, and Linux endpoints against known malware, zero-day threats, fileless attacks, and ransomware - all from a single agent. Integrated ransomware protection includes file rollback via VSS.
What editions of Malware Protection Plus are available?
Two: a Free Edition (fully functional for up to 25 endpoints, no time limit - includes behaviour detection, exploit protection, ransomware protection, and threat investigation) and Enterprise Edition (the paid edition, licensed by endpoint slab with workstations and servers priced separately). There is no Professional tier for this product - Enterprise is the sole paid edition.
Is there a free edition of Malware Protection Plus?
Yes. The Free Edition covers up to 25 endpoints with the full core feature set (behavioural detection, exploit protection, integrated ransomware protection, threat investigation) and no time limit. It's separate from the 30-day trial - either path lets you evaluate the product without paying.
How is Malware Protection Plus licensed?
By managed endpoint count, with separate slabs for workstations and servers - not combined. Workstation slabs: 50, 100, 250, 500, 1,000, 2,500, 5,000, 10,000. Server slabs: 10, 25, 50, 100, 250, 500, 1,000, 2,500, 5,000. Each licence includes one technician login; additional technician packs sold in 1, 2, 5, 10, 25, or 50. Offered as Annual Subscription or Perpetual with annual maintenance and support, on-premises or cloud.
What is the difference between Malware Protection Plus and Ransomware Protection Plus?
Malware Protection Plus is a full next-generation antivirus (NGAV) platform - it covers all malware categories (viruses, trojans, worms, spyware, exploits, fileless attacks) with ransomware protection included as one component. Ransomware Protection Plus is a specialized ransomware-only layer designed to sit alongside an existing antivirus or EDR. Pick Malware Protection Plus if you want a full AV replacement; pick Ransomware Protection Plus if you already have AV/EDR you're happy with and want a dedicated ransomware layer on top.
Can I replace my existing antivirus with Malware Protection Plus?
In many environments, yes - it's positioned as a full NGAV replacement, not an add-on. Optrics can help assess your current stack to determine whether replacement or complementary deployment makes more sense for your situation, especially if you have compliance obligations tied to specific security tools.
What add-ons are available for Malware Protection Plus?
Four: the Secure Gateway Server (for reaching remote endpoints without VPN), the Multi-Language Pack (adds language support beyond English), the Failover Service (three tiers: under 1,000 computers, 1,001-5,000, and above 5,000), and Training (three tiers: 3-hour web-based, 4-hour web-based installation + setup + training, or onsite training).
How do Canadian buyers get pricing for Malware Protection Plus?
ManageEngine publishes list prices in USD. Optrics Engineering, ManageEngine's Canadian partner since 2010, quotes and invoices in Canadian dollars at the RBC daily rate on the quote date, with local tax handling. Request a quote or call 1-877-430-6240.
System Requirements
Endpoint agent requirements depend on operating system version. Confirm against ManageEngine's current documentation before deploying - this is an overview only.
Supported Endpoint Operating Systems
Server Component
A central management server is required to push policies, view alerts, and manage agents across the endpoint fleet. Optrics can recommend a sizing approach based on your endpoint count and update frequency.
Documentation
Datasheets, deployment guides, and configuration documentation for Malware Protection Plus are available from ManageEngine directly, or by request through Optrics Engineering.
Malware Protection Plus Pricing in Canada
Malware Protection Plus is licensed in two editions - Free (up to 25 endpoints, no time limit) and Enterprise (paid, licensed by endpoint slab). Workstations and servers are licensed on separate slabs. As Canada's authorized ManageEngine partner since 2010, Optrics quotes in Canadian dollars at the daily RBC exchange rate, delivered on a Canadian invoice with local tax handling.
Licensing Information
- Listed in USD by ManageEngine; Optrics quotes and invoices in CAD.
- Both Annual Subscription (renewable) and Perpetual (with annual maintenance and support) are offered - both appear on ManageEngine's public store.
- Available on-premises or cloud.
- Licensed by endpoint count; workstations and servers are separate slabs - not combined.
- Each licence includes 1 technician login; add technician packs of 1, 2, 5, 10, 25, or 50 for more operators.
- The sole paid edition is called Enterprise Edition - there is no Professional tier for this product.
Editions
Free
- Full core feature set for up to 25 endpoints
- Behavioural detection
- Exploit protection
- Integrated ransomware protection
- Threat investigation
- No purchase required
Enterprise
- Everything in Free, at scale
- AI/ML behavioural detection
- Signature and heuristic scanning
- Memory and fileless attack scanning
- Centralised management console
- Forensic and MITRE TTP reporting
- On-premises: subscription or perpetual. Cloud: subscription, billed monthly or annually
Slabs (Enterprise Edition)
Workstations and servers are licensed separately. Pick the row closest to each count.
Workstations
| Slab |
|---|
| 50 workstations |
| 100 workstations |
| 250 workstations |
| 500 workstations |
| 1,000 workstations |
| 2,500 workstations |
| 5,000 workstations |
| 10,000 workstations |
Servers
| Slab |
|---|
| 10 servers |
| 25 servers |
| 50 servers |
| 100 servers |
| 250 servers |
| 500 servers |
| 1,000 servers |
| 2,500 servers |
| 5,000 servers |
Add-ons
- Secure Gateway Server: Reaches remote endpoints without VPN or exposing your internal network.
- Multi-Language Pack License: Adds language support beyond the default English console.
- Failover Service: High availability for the Malware Protection Plus server. Three tiers: under 1,000 computers, 1,001-5,000, and above 5,000.
- Training: Three tiers - 3-hour web-based training, 4-hour web-based installation + setup + training, or onsite training.
Related products
- Ransomware Protection Plus: Sister product focused specifically on ransomware. Consider Ransomware Protection Plus if you're keeping an existing AV/EDR and want a dedicated ransomware layer on top; consider Malware Protection Plus if you want a full NGAV replacement (ransomware protection is included).
- Endpoint Central: Full UEM platform. Consider Endpoint Central if you also need patching, software deployment, remote control, and MDM alongside endpoint protection.
- Vulnerability Manager Plus: Vulnerability scanning, misconfiguration detection, and CVE-driven patching. Complementary - VMP shrinks the attack surface; Malware Protection Plus catches what still gets through.
- Patch Manager Plus: Automated patching across OS and 1,100+ third-party apps. Removes many of the vulnerabilities malware exploits.
- Log360: SIEM with UEBA. If you need centralized log correlation across endpoints, servers, and network devices, Log360 sits at the layer above endpoint antivirus.
Top 5 Reasons to Choose ManageEngine Malware Protection Plus
If signature-only antivirus is no longer keeping up with what shows up on your endpoints, Malware Protection Plus is built for exactly that gap.
1. Behavioural + Signature Detection Together
You don't have to choose between catching known threats and catching new ones. AI/ML behavioural analysis runs alongside traditional signatures so both are covered.
2. Catches Fileless and In-Memory Attacks
Modern malware increasingly avoids disk entirely - running in memory or through scripts. Memory-aware scanning catches what disk-only AV misses.
3. Ransomware Coverage Included
Integrated ransomware behavioural detection and file rollback come in the box - not as a separate license or add-on module.
4. Forensics That Speak the Same Language as Your SOC
Alerts come correlated to MITRE TTP categories, so post-incident investigation lines up with how your security team already thinks about adversary behaviour.
5. Light on Endpoints, Backed Locally
Around 1% bandwidth usage on the agent, with CAD pricing, Canadian time-zone support, and deployment help through Optrics Engineering.
