Configuration Manager 2007 provided Endpoint Protection as an add-on. In the newest release of Configuration Manager 2012 and 2012 R2, this is a built-in feature. Endpoint Protection allows IT administrators to monitor and control the security state of the client workstations from one console and perform easy administration tasks.
Integrating client management and client security in one console cuts down costs. IT administrators now focus on end-to-end security tasks and manage, report, and react to issues with clients from a common console. The best features of Endpoint Protection are as follows: