Symantec’s Endpoint Protection 11 has everything that a business needs to protect their computer system. It is a host-based intrusion prevention system that uses TruScan proactive threat scanning to prevent zero day attacks and at the same time only allows authorized applications to run. Its device control regulates the copying of files to USB devices. It has antivirus and antimalware features to safeguard your system against malicious attacks. Included is a firewall to protect your network from threats. The author is glad to report that with all its features, Endpoint Protection 11 does work as it you might read it on paper. He recommends it for business networks with 25 to 50 users.