Anti Virus - Which one is the best?

[newpersn]

With everything going on... We may look at changing our AV to something more manly...

 

What do you guys use?

[mavhc]

They're all terrible, but Windows Defender is free and not annoying

[Sam_Brown]

Funnily enough, I've been doing this the last couple of days myself. We've currently been using Sophos Cloud Control which Gartner have cited as a market leader but we're interested in seeing what else is out there. Currently doing a review with Symantec, Sophos and Bit Defender. No issues with Sophos over the years and since moving to their cloud offering very easy to manage and maintain endpoints. Be interested to see what everyone else comes back with.

[mjk]

With everything going on... We may look at changing our AV to something more manly...

 

What do you guys use?

 

Chromebooks.

[Dos_Box]

Moving to Enterprise Software.

[localzuk]

The ones coming out top, from what I've seen, appear to be (not in order):

 

1. Kaspersky

2. Bitdefender

3. Seqrite

4. Symantec

5. Vipre

 

Sophos appears to haves slipped unless you add in the new Intercept X stuff.

[Sam_Brown]

The ones coming out top, from what I've seen, appear to be (not in order):

 

1. Kaspersky

2. Bitdefender

3. Seqrite

4. Symantec

5. Vipre

 

Sophos appears to haves slipped unless you add in the new Intercept X stuff.

 

What's happened with Sophos? Not heard anything bad and latest Gartner research still suggests they are a market leader. We're looking to potentially re-new with Sophos so if there's any reason not to that I'm unaware of then would obviously love to know!

[localzuk]

What's happened with Sophos? Not heard anything bad and latest Gartner research still suggests they are a market leader. We're looking to potentially re-new with Sophos so if there's any reason not to that I'm unaware of then would obviously love to know!

Gartner looks at sales etc... Not specifically AV performance. Don't get me wrong, they're still pretty darn good, but not at the top of the pile - https://www.av-test.org/en/compare-manufacturer-results/

[6Foot2]

System Centre End Point Protection. Free with SCCM. We haven't had a problem since moving from Sophos over a year ago.

 

[Now sitting with eyes tightly closed hoping that having said that there are no problems that none occur now!]

[JordanT91]

ESET for clients and System Center Endpoint Protection for servers.

[mdrabble]

Currently using Kaspersky for both client and exchange filtering. When the license is up for renewal next year I would have moved over to Windows 10 using Defender with SCCM and migrated to Office 365 with online protection - just trying to decide if I should get the Azure ATP server to enhanced Defender reporting or stick with SCCM reporting.

[Blue_Cookeh]

System Centre End Point Protection. Free with SCCM. We haven't had a problem since moving from Sophos over a year ago.

 

[Now sitting with eyes tightly closed hoping that having said that there are no problems that none occur now!]

 

This guy knows what's up

 

+1 for SCEP

[skell]

Using ESET here.

 

Loving it.

[Boredguy]

We're moving to SCEP once I work out which SCCM licence I need to buy for the server install. Currently on Sophos

[Sam_Brown]

Gartner looks at sales etc... Not specifically AV performance. Don't get me wrong, they're still pretty darn good, but not at the top of the pile - https://www.av-test.org/en/compare-manufacturer-results/

 

Ah ok I was worried there was something big about Sophos that I'd missed over the recent weeks. Cheers for the link. I've already used it recently. To be honest doesn't seem much in it in terms of detection rates and as we're already with Sophos so was curious if there was some major flaw I was missing that would be worth looking at. What do you use out of curiositty?

[localzuk]

Ah ok I was worried there was something big about Sophos that I'd missed over the recent weeks. Cheers for the link. I've already used it recently. To be honest doesn't seem much in it in terms of detection rates and as we're already with Sophos so was curious if there was some major flaw I was missing that would be worth looking at. What do you use out of curiositty?

We're currently using the free Avast for schools license, but this ends soon so I am looking at options. I've requested pricing for:

 

Bitdefender,

Sophos + Intercept X

Kaspersky

Symantec

 

So, we'll see which comes in best value (though not cheapest, as features will come into play here).

[Sam_Brown]

Of course. Interested in what you end up thinking about Bit Defender. Looks really good from what I've seen but not sure worth the hassle moving from Sophos when it's already rolled up and set up :/

[mukz]

We are looking mcafee - apparently they have rewritten alot of the code to recreate the product and has a all in one solution for av + ransomware

[DalekSec]

*cough cough*

[2ilent8cho]

*cough cough*

[ATTACH=CONFIG]43204[/ATTACH]

Be careful, they got nasty with Edugeek a few years back...

Edited May 15, 2017 by 2ilent8cho

[psydii]

Without looking into it, I've got to say that not rolling intercept x into their standard endpoint protection client seems a rather myopic decision, even without the benefit of hindsight from the last few days.

 

I used to know someone who had family/business connections to Kaspersky. They were very impressed with Sophos 3.x. It did a sterling job of blocking real world, as seen on the coalface, threats. From the general derision thrown at it recently it does seem to have slipped. Still way better than the names that were big in the early 2000's though.

 

Think back, Sophos used to block anything that behaved in a dodgy way (odd complier, zipped data and apps contained within the PE, straNge memory tricks or calls etc) I wonder why they didn't keep up the development of the behaviour engine. More recently I suspect that people haven't enabled (or even perhaps pro actively blocked) their live protect engine, it was protecting against wanacrypt 2 a coupe of hours before the .ide's were released.

 

Final thought: Sophos support for XP is now much like Microsoft's. As of May 2017, pay them enough and it will be provided.

 

Final final thought:LGfL obviously agree that InterceptX should be included in core, as all LGfL sites can now get it with the rest of the Sophos EndPoint.

[localzuk]

Think back, Sophos used to block anything that behaved in a dodgy way (odd complier, zipped data and apps contained within the PE, straNge memory tricks or calls etc) I wonder why they didn't keep up the development of the behaviour engine. More recently I suspect that people haven't enabled (or even perhaps pro actively blocked) their live protect engine, it was protecting against wanacrypt 2 a coupe of hours before the .ide's were released.

 

We used to run Sophos 10 years ago. I stopped when I discovered its penchant for saying "hey, you've got a virus... enjoy". Things have changed since then though!

[witch]

This^

Moved to ESET

Not had a problem (yet?)

[caffrey]

Kaspersky here moved from ESET before that Sophos, I don't think there's one solution that I particularly like - they all have some quirks. When we eventually move to windows 10 I'll probably just end use using Microsoft Endpoint Protection

[JordanT91]

We're currently using the free Avast for schools license, but this ends soon so I am looking at options. I've requested pricing for:

 

Bitdefender,

Sophos + Intercept X

Kaspersky

Symantec

 

So, we'll see which comes in best value (though not cheapest, as features will come into play here).

 

Out of interest, why aren't you considering ESET? I must admit I'm not overly keen on the Remote Administrator agent and the fiddly deployment but it seems to be working a lot better than Sophos did, and it uses a lot less RAM.