ManageEngine Ransomware Protection Plus
Ransomware Protection Plus at a glance (for Canadian buyers)
- What it is
- ManageEngine's specialized endpoint security product for ransomware. Uses behavioural analysis and machine learning (not signatures) to detect ransomware activity, isolates affected endpoints automatically, and restores encrypted files from Windows VSS snapshots. Complements existing antivirus and EDR - not a replacement.
- Editions
- Free (fully functional for up to 25 machines, no time limit) and Enterprise Edition (paid, licensed by endpoint slab). No Professional tier - Enterprise is the sole paid edition.
- Licensing
- Per endpoint, with separate slabs for workstations and servers. Workstation slabs: 50, 100, 250, 500, 1,000, 2,500, 5,000, 10,000. Server slabs: 10, 25, 50, 100, 250, 500, 1,000, 2,500, 5,000. Each computer range includes 5 technicians; extra technician packs sold in 1/2/5/10/25/50. A cloud edition is also available, billed monthly or annually.
- Term
- Annual Subscription (renewable) or Perpetual (with annual maintenance and support). Both appear on ManageEngine's public store.
- Canadian pricing
- Listed in USD by ManageEngine; Optrics quotes and invoices in CAD at the RBC daily rate on the quote date.
- Who to talk to in Canada
- Optrics Engineering, ManageEngine's Canadian partner since 2010. Call 1-877-430-6240.
A Layer Built for the Ransomware Problem Specifically
Most ransomware that gets through to endpoints today does so by bypassing signature-based detection - either through file modifications that don't match known patterns, or through fileless techniques that never touch disk in the way traditional antivirus expects. ManageEngine Ransomware Protection Plus is built around this gap: instead of looking for known signatures, it watches how files and processes behave and flags activity consistent with encryption-based attacks.
What It Does
Where It Fits in Your Stack
Ransomware Protection Plus is designed to complement existing endpoint security tools - not replace them. Antivirus and EDR remain valuable for what they do well; this product adds a specialised behavioural layer focused on the ransomware family of threats and provides the recovery tooling that signature-based products typically don't.
Who It's For
A Note on Expectations
No endpoint security product can guarantee a ransomware-free environment - the threat landscape moves too fast for absolute claims to be honest. Ransomware Protection Plus is a layered control: it improves detection of novel attacks, automates the most time-sensitive containment steps, and helps recover affected files - all of which reduce the impact and recovery time of an incident when (not if) one occurs.
Frequently Asked Questions
What is ManageEngine Ransomware Protection Plus?
Ransomware Protection Plus is ManageEngine's specialized endpoint security product for ransomware specifically. It uses behavioral analysis and machine learning - rather than signatures - to detect ransomware activity, automatically isolates affected endpoints from the network, and restores encrypted files from Windows Volume Shadow Copy Service (VSS) snapshots. It complements existing antivirus and EDR tools rather than replacing them.
What editions of Ransomware Protection Plus are available?
Two: a Free Edition (fully functional for up to 25 machines, no time limit) and Enterprise Edition (the paid edition, licensed by managed endpoint count). There is no Professional tier for this product - ManageEngine uses "Enterprise" as the sole paid edition name.
Do I need this if I already have antivirus or EDR?
Yes - this isn't a replacement. Signature-based antivirus and EDR focus on broader threat categories; Ransomware Protection Plus adds a dedicated behavioural layer for ransomware specifically and provides the file-recovery tooling those products typically don't. It sits as an additional layer, not a rip-and-replace.
Is there a free edition of Ransomware Protection Plus?
Yes. The Free Edition covers up to 25 machines with the full feature set (behavioural detection, endpoint isolation, VSS-based file recovery) and no time limit. It's separate from the 30-day trial - either path lets you evaluate the product without paying.
How is Ransomware Protection Plus licensed?
By managed endpoint count, with separate slabs for workstations and servers - not combined. Workstation slabs: 50, 100, 250, 500, 1,000, 2,500, 5,000, 10,000. Server slabs: 10, 25, 50, 100, 250, 500, 1,000, 2,500, 5,000. Each computer range includes 5 technician logins; additional technician packs sold in 1, 2, 5, 10, 25, or 50. Offered as Annual Subscription or Perpetual with annual maintenance and support.
How does file recovery work?
Ransomware Protection Plus leverages Windows Volume Shadow Copy Service (VSS) snapshots, taken automatically every three hours on protected Windows endpoints. When a detected ransomware attack encrypts files, pre-attack versions are restored from the most recent shadow copy. VSS must be enabled on the protected endpoints for this feature to work.
What add-ons are available for Ransomware Protection Plus?
Four: the Secure Gateway Server (for reaching remote endpoints without VPN), the Multi-Language Pack (adds language support beyond English), the Failover Service (three tiers: under 1,000 computers, 1,001-5,000, and above 5,000), and Training (three tiers: 3-hour web-based, 4-hour web-based installation + setup + training, or onsite training).
How do Canadian buyers get pricing for Ransomware Protection Plus?
ManageEngine publishes list prices in USD. Optrics Engineering, ManageEngine's Canadian partner since 2010, quotes and invoices in Canadian dollars at the RBC daily rate on the quote date, with local tax handling. Request a quote or call 1-877-430-6240.
System Requirements
Endpoint agent system requirements vary by operating system version. Always confirm against ManageEngine's current documentation before deploying - this overview is a starting point only.
Supported Endpoint Operating Systems
Server Component
A central management server is required to administer agents, view alerts, and configure policies. Confirm hardware sizing against your endpoint count - Optrics can help with a tailored sizing recommendation.
Documentation
Product documentation, datasheets, and deployment guides for Ransomware Protection Plus are available from ManageEngine directly, or by request through Optrics Engineering.
Ransomware Protection Plus Pricing in Canada
Ransomware Protection Plus is licensed in two editions - Free (up to 25 machines, no time limit) and Enterprise (paid, licensed by endpoint slab). Workstations and servers are licensed on separate slabs. As Canada's authorized ManageEngine partner since 2010, Optrics quotes in Canadian dollars at the daily RBC exchange rate, delivered on a Canadian invoice with local tax handling.
Licensing Information
- Listed in USD by ManageEngine; Optrics quotes and invoices in CAD.
- Both Annual Subscription (renewable) and Perpetual (with annual maintenance and support) are offered - both appear on ManageEngine's public store.
- Licensed by endpoint count; workstations and servers are separate slabs - not combined.
- Each computer range includes 5 technician logins; add technician packs of 1, 2, 5, 10, 25, or 50 for more operators.
- A cloud edition is also available, subscription only, billed monthly or annually.
- The sole paid edition is called Enterprise Edition - there is no Professional tier for this product.
Editions
Free
- Full feature set for up to 25 machines
- Behavioural ransomware detection
- Endpoint isolation on detection
- File recovery via VSS
- No purchase required
Enterprise
- Everything in Free, at scale
- Root cause analysis
- Exploit prevention
- Forensic reporting
- Role-based administration
- Available as Subscription or Perpetual
Slabs (Enterprise Edition)
Workstations and servers are licensed separately. Pick the row closest to each count.
Workstations
| Slab |
|---|
| 50 workstations |
| 100 workstations |
| 250 workstations |
| 500 workstations |
| 1,000 workstations |
| 2,500 workstations |
| 5,000 workstations |
| 10,000 workstations |
Servers
| Slab |
|---|
| 10 servers |
| 25 servers |
| 50 servers |
| 100 servers |
| 250 servers |
| 500 servers |
| 1,000 servers |
| 2,500 servers |
| 5,000 servers |
Add-ons
- Secure Gateway Server: Reaches remote endpoints without VPN or exposing your internal network.
- Multi-Language Pack License: Adds language support beyond the default English console.
- Failover Service: High availability for the Ransomware Protection Plus server. Three tiers: under 1,000 computers, 1,001-5,000, and above 5,000.
- Training: Three tiers - 3-hour web-based training, 4-hour web-based installation + setup + training, or onsite training.
Related products
- Malware Protection Plus: Sister product for the broader malware category (not ransomware-specific). Consider running both if you want a full behavioural-detection layer alongside signature-based AV/EDR.
- Endpoint Central: Full UEM platform. Consider Endpoint Central if you also need patching, software deployment, remote control, and MDM alongside ransomware protection.
- Vulnerability Manager Plus: Vulnerability scanning and misconfiguration detection. Complementary - VMP reduces the attack surface ransomware uses; Ransomware Protection Plus responds when something gets through anyway.
- Endpoint DLP Plus: Data loss prevention across cloud, email, USB, print, and clipboard. Complementary for organizations that need both ransomware protection AND data exfiltration control.
- Patch Manager Plus: Automated patching for OS and 1,100+ third-party apps. Removes many of the vulnerabilities ransomware exploits to enter.
Top 5 Reasons to Choose ManageEngine Ransomware Protection Plus
Ransomware is the threat where existing tools fail most often and recovery is most painful. Ransomware Protection Plus is built around exactly that gap.
1. Behavioural Detection, Not Just Signatures
Modern ransomware mutates fast enough that signature-based tools miss it. Watching file and process behaviour catches attacks that haven't been seen before.
2. Recovery Built In
Volume Shadow Copy integration means encrypted files can often be restored from pre-attack snapshots - reducing recovery time from days to minutes.
3. Containment Happens Automatically
Once an endpoint trips the detection threshold, it's quarantined from the network without waiting for a human to react - which is the difference between one infected machine and a hundred.
4. Works Alongside Your Existing Stack
Designed to complement antivirus and EDR rather than replace them. No rip-and-replace project - it sits as an additional protective layer.
5. Canadian Pricing and Support
Optrics quotes in CAD, supports in Edmonton time, and helps with deployment planning, sizing, and renewals.
