Endpoint Protection Replacement

[Prometheus_3]

Hello,

 

I am investigating alternatives for Sophos Endpoint Protection. Our subscription is due to expire next year and I just want to throw it away. Its detection rate certainly isnt the best and its ability to remove detected threats is appauling. Almost all items detected require manual removal and users will not bring in their laptops for cleanup unless I disable their accounts first.

 

A collegue has recommended ESET although I have read some mixed reviews. Symantec and Bitdefender seem like good alternatives.

 

Does anyone use any of these products or can anyone please recommend alternatives?

[jamin100]

We use Microsoft Endpoint through SCCM. Really good so far

[FN-GM]

We use Microsoft Endpoint through SCCM. Really good so far

 

And included as no extra with EEES.

[markwilfan]

We use SCEP through SCCM too. Breeze to setup and no problems since we started using it 9 months ago. Some people don't rate it though. On a course I went on the tutor was amazed we were using it.

[cpjitservices]

ESET. Fantastic Product

[john]

MS's protection historically was good but look at it now - https://www.av-test.org/en/antivirus/business-windows-client/ it is the bottom of the list all the time, they themselves have even said they are not really doing much effort into it but its more its something better than nothing.

 

The Avast seems to be getting quite a bit of praise on here as a freebie for business so worth having a read on here.

 

I use Symantec and no just no It scores highly but is so labour intensive the most recent updates do not roll out following the settings reliably so I've had PCs and Servers reboot during the working day which isn't acceptable! so its very random and its also late on getting the protection, it gets them but some things like the Cryptolocker its been 2 or 3 days after many other big names. We are looking to move to Kaserpsky so well worth having an evaluation of it

[truebluesteve]

We use Symantec Endpoint Protection and its been pretty good over the years. Never had any real issues configuring or maintaining it either. I read somewhere that the very best AV is only around 60% effective so I guess you have to bear that in mind whatever system you choose!

[disk]

We moved to MS Endpoint Protection in 2011 from Sophos. It not only saved us money as it was included in our campus agreement, but it has served us better than Sophos did (At least back then). We have over a 1000 PC's though that must run an extremely old and vulnerable Java plugin. To help bolster security we used the money we were saving on our regular antivirus solution and put it towards licensing Malwarebytes for Business. It is designed to provide additional on-access protection that works in conjunction with regular antivirus solutions.

 

https://www.malwarebytes.org/business/antimalware/

 

Since employing this strategy we have seen the number of malware tickets drop to almost zero. The ones we do see now usually don't require a reimage of the machine either.

[synaesthesia]

With a combination of SCEP and decent policy our non-automatically cleanable infection rate in the last 3 years is quite literally zero. A couple of my primaries run Sophos, and whilst I find it OK generally, I prefer SCEP

[markwilfan]

We had kaspersky before scep and it made me and my team want to gouge our eyes out with a rusty spoon

[Prometheus_3]

Thank you for all of the replys. I forgot to mention that we have OSX and Linux clients as well. That was one of the reasons I didnt I had not considered Microsoft SCEP even though we are licensed for it in our campus agreement.

 

Management asked me why we needed to protect our OSX devices as they were under the illusion that "Macs dont get viruses". I had to explain to them that in reality they can get infested with viruses and malware just like Windows and Android clients.

[Norphy]

There is a Mac version of SCEP as well. It can't be managed by ConfigMgr but your EES license covers it.

[witch]

ESET. It just works

[mrwoberts]

BitDefender

 

Seems to top the AV testing charts quite regularly.

av-test.org

[Disease]

I am thinking of moving from ESET to Bitdefender.

[PyROm]

Were using ESET, switched to V6 at the beginning of October. The earlier versions of V6 were a headache but since the latest client came out it seems to be working well.

[localzuk]

I used ESET at my last school, worked very well. Now using SCEP and a thorough Windows Firewall policy and we've had no real virus issues in 2 years. Only issue we've had was someone bringing something in on a USB stick, but SCEP spotted and squashed it before it did any damage - we're resolving this infection vector soon by blocking USB sticks!

[gshaw]

We're in the same boat with Sophos, turned on a setting to block malicious websites recently and it's now drowning our DC's with DNS traffic so that'll have to be turned off. Cleanup is poor and the management console is 10 years out of date (and hasn't changed in all that time). However we may be stuck with it as the license renews in February and that's an awful time of year to change software on nearly 3000 machines