MAT wide antivirus solutions

[Ditto]

I struggled to find the best forum, but hopefully this is good. I'm interested to understand from those of you that are in MAT environments how you have decided to tackle the situation of anti-virus solutions across the MAT schools. Have you settled on a particular supplier? How do you mange new schools that join your MAT that maybe have a existing deals in place? What are the key points to consider from a MAT wide perspective?

[yac2016]

SCCM and WIndows defender if you have an Education OVS Subscription?

[Michael]

I agree with the above, makes complete sense.

[localzuk]

We purchased Bitdefender to cover the whole trust here, as I dont feel the windows defender service is good enough, especially in the era of ransomware.

 

Though, since doing this, the ratings for Defender have improved. There are other reasons we went with Bitdefender though - we use device control and it manages device encryption nice and easily also (though it uses bitlocker to do this).

Edited November 23, 2018 by localzuk

[atcoates]

We chose Trend AV as it does the clients, can integrate into office 365 or G-Suite and protects against data loss, encrypted emails etc etc..

[supportman]

We purchased Bitdefender to cover the whole trust here, as I dont feel the windows defender service is good enough, especially in the era of ransomware.

 

The latest defender in windows 10 has very good ransomware protection as far as I know. I don't think I would trust 3rd party solutions these days, had some nightmares in the past with dodgy upgrades or whatever. I much prefer Microsofts inbuilt solution.

[yac2016]

The latest defender in windows 10 has very good ransomware protection as far as I know. I don't think I would trust 3rd party solutions these days, had some nightmares in the past with dodgy upgrades or whatever. I much prefer Microsofts inbuilt solution.

I agree, we support a number of schools who had different "Enterprise" anti-virus/anti-ransomware software and they still had issues.

 

If you have a good backup strategy and a robust setup you should be fine, from what we have seen the Windows Defender sites have had no issues so far.

 

Everyones needs are different though.

[Blue_Cookeh]

SCCM managed Windows Defender here.

 

If you're buying BitDefender, NOD32, whatever else there is thinking it's providing you more protection than straight up Windows Defender then your security strategy is completely wrong. You need to look at things like AppLocker, Defender ATP etc and use them in conjunction with your A/V to cover all your bases.

 

EDIT: This page goes through all the Microsoft technologies you should look at using, albeit it is marketing material: https://www.microsoft.com/en-us/windowsforbusiness/windows-atp

Edited November 23, 2018 by Blue_Cookeh

[keyboards]

We've got Sophos, installed everywhere with group policy and a script

 

In sophos central you can group computers/users etc, so we just create a group for each school going by the prefix of the machine

[1TF0rward]

We have Sophos too. Works pretty well. We have had some false positives and uninstalling the software has caused me hours of looking for solutions. So just don't uninstall it after you have installed it.