In our testing of 10 endpoint security products, we found that no one product does everything. You will have to make compromises depending on what other security tools you already have installed and the skill levels of your staff. A few of the products we tested dont require endpoint agents, but the trade off is that you will need to setup LDAP or clean up your Active Directory domain and make use of network switch SNMP management. The upside of the agentless approach is that the product can track endpoints that might be used to compromise your network.”]
Source: https://www.csoonline.com/article/3091709/how-to-buy-endpoint-security-products.html