Recommended Anti-Virus?

[Gongalong]

Hi folks,

 

We've just had a major virus issue (Agent-AKJF) on our Windows network, while using Sophos. There was some problem with Sophos vs. the server console, but even so the console isn't particularly great, it's expensive, and with this and the virus incident I'm not that impressed. (There was also the infamous time where it quarantined its own software in 2012.)

 

I hear polar opposite opinions about MS Endpoint, which I can deploy with SCCM. It's very cheap but difficult to control with SCCM. Some people say it's great, others awful.

 

I would like something straightforward to control, clear on reporting, and of course effective.

 

What are others using and can recommend, or not?

 

TIA

[synaesthesia]

It's not particularly difficult to control, it's very much set and forget; especially as it's already part of SCCM. I'm also almost certain we've had that particular infection try and fail on one of our workstations, and wouldn't have gotten any further than MS SCEP. We've not had a single infection since it's use in over 2 years.

[Gongalong]

From what I remember of my SCCM training it just gets deployed to everything with a CM client, no choice? Do you know if it plays well with Hyper-V? I'm hoping so, because it's MS software.

[snagrat]

It plays well with HyperV but you need to set the files for it to ignore, for example the vhd files. http://social.technet.microsoft.com/wiki/contents/articles/2179.hyper-v-anti-virus-exclusions-for-hyper-v-hosts.aspx

 

All these settings are controllable via SCCM console so very much set and forget.

 

It doesn't have to be deployed with the client, depends if you want it or not.

[Gongalong]

In the SCCM training I just remember an option for deploying it and no other choice :-/

 

In related news http://www.edugeek.net/forums/mis-systems/146410-virus-corruption.html

[FN-GM]

In the SCCM training I just remember an option for deploying it and no other choice :-/

 

That is not correct. Its controlled with a Client Policy. You enable it in a client policy then deploy that to a collection of choice.

[Jobos]

One of my schools uses Kaspersky and the other has Eset and Eset wins hands down for ease of use and not slowing down the machine. The price of Eset was very reasonable at £3 per machine for a 3 year licence and when the Kaspersky finishes next April I'll be replacing it with Eset. Just hope they haven't increased the price too much when the time comes.

[Gongalong]

That is not correct. Its controlled with a Client Policy. You enable it in a client policy then deploy that to a collection of choice.

Heh, so much for the expert trainer! This seems like a reasonable guide for setup, although it's more involved than I'd like. I guess this is why it's cheaper using System Center 2012 Configuration Manager - Part 6. Adding the Endpoint Protection role, configure Alerts and custom Antimalware Policies. - Configuration Manager 2012 - www.windows-noob.com

[MatthewL]

One of my schools uses Kaspersky and the other has Eset and Eset wins hands down for ease of use and not slowing down the machine. The price of Eset was very reasonable at £3 per machine for a 3 year licence and when the Kaspersky finishes next April I'll be replacing it with Eset. Just hope they haven't increased the price too much when the time comes.

 

Cannot fault both. Have used Eset in the past at home and the only thing that put me off was renewal been tight with money. One of my partner organisations I used to work with swore by it. As for Kaspersky not heard a bad word about it, seems to be good although no personal experience of it.

[Edu-IT]

Used Vipre for a few years now. Seems to do the trick and doesn't cost the earth.

[Gongalong]

Does anyone use Sophos? Good or bad experiences with it?

[ColinP]

Moved from Kaspersky to Sophos the console is a million times better - it also integrates with the Sophos web filter so even if installed on a laptop it protects browsing without going through a proxy or vpn

[Gongalong]

Just to update, turns out the virus we have is a zero day attack as far as Sophos are concerned, so particularly nasty. Resolution continues...

[difinity]

Have you found the original infection ? If your infection is a dropper, i'd be worried about it downloading other malware, particularly cryptolocker type stuff.

[cpjitservices]

I quite like Avast.

[3s-gtech]

We have had good results with Sophos (so far) over the last eight years. However, we do have many other protection systems in place via GP etc so we don't rely on it alone. Not a great comparison though, as it's centrally licensed via the LEA and cheap as a result.

[Gongalong]

difinity: I'm not sure. Sophos are putting significant effort into identifying it, and are "narrowing down the source".

[Gardinho]

We went from Sophos to ESET. It's been a great move.

 

It's so light on system resources, yet deals with viruses etc brilliantly.

 

They gave us a rip and replace installation procedure that automates deployment and removes old antivirus installations. Couldn't be easier.

[Gongalong]

How good is the administrative side of ESET, clear and straight-forward?

[Gongalong]

We have had good results with Sophos (so far) over the last eight years. However, we do have many other protection systems in place via GP etc so we don't rely on it alone. Not a great comparison though, as it's centrally licensed via the LEA and cheap as a result.

We paid a lot for Sophos (£5k over 3 years IIRC), but the renewal was due just when I started here and I didn't feel I was in a position to make huge change at that time.

 

Their support has been good though.

[Gardinho]

ESET was just over £2k for us. We have it on over 1000 devices.

 

As for management, you can install the management console on your desktop. From there you can change policies, deploy to machines etc.

 

To be honest the install was so straight forward that we've had very little maintenance to do on it.

 

It's by far the best AV we've had.

[Edu-IT]

Does anyone have the ESET v5 setup they can send me? Can only find v6 on their site now.

 

Edit: Actually just found it. Typical!

Edited May 10, 2015 by Edu-IT

[sacabonos]

Avast has a really good antivirus engine and it's free. recently they've launched a cloud service to make able to control all your antivirus installs.. worth a shot. I've also used Kaspersky.. very good AV and I didn't have problems after installing it.. But the management console isn't really great.

[davephs]

Another Vote for ESET here, I have used it across two schools, one of which I converted from Kaspersky (Which essentially turns your PC into a snail and makes it unusable) The management side of ESET is ok (Its requires little maintenance, just install and forget)

 

- All views are my own, from personal experience .

Edited May 15, 2015 by davephs

[Lexie]

Another "plus one" for ESET from me.

For a free solution, BitDefender free takes some beating, but lacks a management console, AFAIK.

 

I've also had to support Sophos, Norton, MacAfee, and Panda (rated from best to worst, IMO). ESET and Bitdefender knock spots off them all.