Anti Virus - Which one is the best?

[localzuk]

Out of interest, why aren't you considering ESET? I must admit I'm not overly keen on the Remote Administrator agent and the fiddly deployment but it seems to be working a lot better than Sophos did, and it uses a lot less RAM.

Looking at av-comparitives and av-test, they've dropped down the list a bit. There are clear better products out there now.

[JordanT91]

Looking at av-comparitives and av-test, they've dropped down the list a bit. There are clear better products out there now.

 

That's interesting. I'll take a look at the results again when the renewal is up.

[Pappy]

Another vote for ESET

 

Loving it ... never had a problem...

[NB9457]

We use Avast, the quote was extremely cheap and in the AV tests it scores well. So far we are very happy with it!

[john]

Disclosure I am talking global corporate entity not a school.....

 

We are moving from Symantec (which has in recent times been late to the party with definitions for latest malware etc) to Kaspersky as its been first to the Party in most cases and has some much more intelligent items in it in particular around Cypto protection which is something that obviously is high on everyone list. I am sure other firms do it as well but that for us jumped out it also has some good ways of doing 3rd party application patching which is nice and will move to that from Secunia and handles Hyper-V and VMware protection neatly as well.

 

We have used @Net-Ctrl for Kaspersky for us and they have been great

[AlanD]

Don't get me wrong, they're still pretty darn good/[/url]

 

Actually...I think they are all generally awful. Symantec caused a server BSOD after a distributing a definition ...And we use Symantec mail security...and to be honest its interface and lack of flexibility is out of the ark. Well overdue for a major makeover. I would chane, especially if I could reduce the thousands a year it costs us, but have not seen anything that makes me think it's worth the effort of change.

 

In the early days of migrating to win10 so perhaps we'll go with defender ....although the cost and learning curve of sccm is a dark cloud on that horizon.

[Knil92]

 

They are all pretty much crap, and are only used to grab low hanging fruit in terms of viruses. Considering you can make a keylogger that e-mails keystrokes to yourself in VB6 and it won't get detected should be worrying to everyone.

[ataylor]

This^

Moved to ESET

Not had a problem (yet?)

 

Same here

[staylor1972]

I've just had a our Sophos renewal through - its nearly double what we paid for it 3 years ago. Were still on windows 7 for the moment so the Microsoft endpoint protection isn't something we could consider yet.

 

I've had a good quote through from ESET and am looking at getting pricing for Bitdefender and Kaspersky. Anyone have a list of pros and cons for these av's?

[Boredguy]

MS Endpoint protection installed happily on our Windows 7 stations

[staylor1972]

Thanks for the quick reply - I read that the version of defender in Windows 7 didn't have as many features in that the version of Windows 10 did. that's why I held off looking at the endpoint protection till we moved to Windows 10.

[AlanD]

We currently use Symantec - but price increases of over 200% in last 3 years are making us look elsewhere now that renewal is due. To be honest - their email filter probably hasn't had any development for over 8 years - or only tiny largely cosmetic changes. I tried on to write a rule to detect those email spammers that send mail "on behalf of" and discovered it didn't work. Contacted their support and they agreed its not possible to detect that phrase as its not in the normal "sender" or "message" part of the email and so can't be used in any filter. Pathetic. But maybe other stuff is no better.

[mavhc]

Just test if the sender header is different to the from header

[NB9457]

We currently use Symantec - but price increases of over 200% in last 3 years are making us look elsewhere now that renewal is due. To be honest - their email filter probably hasn't had any development for over 8 years - or only tiny largely cosmetic changes. I tried on to write a rule to detect those email spammers that send mail "on behalf of" and discovered it didn't work. Contacted their support and they agreed its not possible to detect that phrase as its not in the normal "sender" or "message" part of the email and so can't be used in any filter. Pathetic. But maybe other stuff is no better.

 

Spam Titan is good for email filtering, cloud based too.

[Guest Guest]

I've just had a our Sophos renewal through - its nearly double what we paid for it 3 years ago. Were still on windows 7 for the moment so the Microsoft endpoint protection isn't something we could consider yet.

 

I've had a good quote through from ESET and am looking at getting pricing for Bitdefender and Kaspersky. Anyone have a list of pros and cons for these av's?

Do you use SWGfL to purchase your licences?

[staylor1972]

Do you use SWGfL to purchase your licences?

 

No we don't we go direct to Phoenix software. Thanks for the heads up - I'll see what pricing they can do for us.

[Guest Guest]

No we don't we go direct to Phoenix software. Thanks for the heads up - I'll see what pricing they can do for us.

Here's the link https://www.phoenixs.co.uk/swgfl-sophos/

[gshaw]

Sophos aren't even in the AV Comparatives rankings now after their detection rates were shocking in the last test (end of 2016).

 

We're stuck with it for now but on detection alone I'd say Kaspersky or ESET.

 

Also see if any throw in anti-ransomware features as part of the product. Sophos don't and the price to add it on is ridiculous.

[staylor1972]

Do you use SWGfL to purchase your licences?

 

I'm not eligible for the SWGfL pricing as were a sixth form college :-( so I've decided to look at SCCM 2016 and use endpoint protection. I've got it installed but was wondering if anyone knew of a good guide on how to configure it!

[MYK-IT]

Sorry to old thread...

 

Currently using Sophos, and have been for many years but the renewal is due soon; so this thread along with other discussions has made me think do we continue with Sophos, or look at an alternative?

 

Of course, I have been sent Sophos renewal quotation(s), along with those from ESET and Bitdefender (although i admit, just quotes at this stage, I have not seen the alternatives in action etc.)

 

Additionally, Microsoft End Point Protection has been suggested to us. Especially as we have an MS OVS-ES Licence that includes System Centre etc (would have to check if additional CALs(?) are required for MS Endpoint Protection) but would also involve setting up System Centre, SQL servers etc as we currently only use MS VMM & DPM elements of System Centre.

 

Any advice; either to which AV solution to use / research further, or indeed how to setup/configure System Centre Endpoint Protection (as I believe System Centre is a pain to setup, but great once working).

 

Also, any downside of using MS Endpoint Protection vs Sophos (or other dedicated AV solution) too.

 

Many Thanks,

Edited September 13, 2017 by MYK-IT

[caffrey]

We're using Kaspersky here as it was the cheapest. It was painless to change from ESET (We have been Sophos > ESET and now Kaspersky). When that runs out we will probably be site wide windows 10 and then I'll probably just use Windows Defender configured via GPO

 

I'm trying to avoid the talk / conspiracies about the fact that Kaspersky is based in Moscow and companies in America have been advised not to use it

 

Anyone using Windows Defender ATP ?

[mavhc]

How many viruses do AV programs catch for you, and what groups do they fall into?

 

Would your SRP etc policies stop them anyway? If your email is hosted by Google/MS they're running AV on that anyway. So you're left with USB drives and web browsing.

 

Macros are disabled so well it's rare anyone is able to enable them even if they wanted to.

[speckytecky]

With Ransomware and the likes being a constant worry we upgraded Sophos EC to their Cloud variant with Intercept X etc. So far, we are absolutely delighted with it and going, by the way, the Sophos share price has almost doubled in the past six months many, many more people are as well.

[HBPS]

i use spohos and intercept x so far it has stopped 6 Ransomeware attacks since april

[DGardiner]

i use spohos and intercept x so far it has stopped 6 Ransomeware attacks since april

 

how did you convince them to buy interceptx? last time i had it quoted it cost a small fortune