RabbieBurns Posted September 19, 2011 Posted September 19, 2011 Getting a bit confused with all the different types of ForeFront. Is the antivirus solution called Forefront Endpoint Protection? If so, does this require SCCM to work? Im thinking of ditching sophos and going with Forefront due to it being included in our EES agreement, but unsure if I need to set up a whole SCCM environment as well?
pritchardavid Posted September 19, 2011 Posted September 19, 2011 You only need SCCM to monitor remove virus/spyware from the SCCM console, you can see do this on the client computer (not recommended) Its a big shame they didn't release its own console plus the option of using it with SCCM, for the people they already have it. Basically it would be like Security Essentials, if you didn't have SSCM
SYNACK Posted September 19, 2011 Posted September 19, 2011 Yes the latest version only works with the 60,000 pound gorilla that is SCCM. The did initially develop it with its own console like the original but according to the it was not what their customers (the three big US conglomerates it actually cares about) wanted so they scrapped that development and integrated its controls into SCCM. End result is that you really need a whole extra server just to run AV if you were not already using SCCM. This little irritiation is exactly why I dropped all intentions of using it and went with another product instead.
jamiesev Posted September 19, 2011 Posted September 19, 2011 In complete contradiction to the above reply no you do not need SCCM to run the latest version of Forefront Endpoint Protection. I am running it on our school domain, and it works like a treat. You do need SCCM to use full functionality of the product, reports etc, but I configured the client’s to save to a txt file on the local C drive, so I can just look at that should the need arise. You can configure updating locations, scanning times and security settings via group policy. Overall I am extremely impressed with the software!
plexer Posted September 19, 2011 Posted September 19, 2011 In complete contradiction to the above reply no you do not need SCCM to run the latest version of Forefront Endpoint Protection. I am running it on our school domain, and it works like a treat. You do need SCCM to use full functionality of the product, reports etc, but I configured the client’s to save to a txt file on the local C drive, so I can just look at that should the need arise. You can configure updating locations, scanning times and security settings via group policy. Overall I am extremely impressed with the software! Sounds good care to elaborate on this a bit more? Is there an msi to deploy for the client? Ben
jamiesev Posted September 19, 2011 Posted September 19, 2011 Sounds good care to elaborate on this a bit more? Is there an msi to deploy for the client? Ben No, there is no MSI but only took a matter of minutes to knock up an MSI and roll it out. You can setup other features in GP such as how much memory and CPU to utilize during specific times of day, when to run a full scan etc, its easy to setup and manage.
eejit Posted September 19, 2011 Posted September 19, 2011 After years of attempts and failures it finally forced me to get a grip with SCCM and I'm so glad that I did. You'll get everything you need on this site: how can I install SCCM 2007 sp1 in Windows Server 2008 - www.windows-noob.com
john Posted September 19, 2011 Posted September 19, 2011 No, there is no MSI but only took a matter of minutes to knock up an MSI and roll it out. You can setup other features in GP such as how much memory and CPU to utilize during specific times of day, when to run a full scan etc, its easy to setup and manage. Where did you get the GPOs from for it?
TheScarfedOne Posted September 19, 2011 Posted September 19, 2011 I rather like FEP... and since Im a System Centre lover anyway it kinda made sense. Its good becuase its one of those set it up and leave it too it jobs. It can auto install as part of windows updates, gpo or SCCM. Set up your email triggering and it'll tell you if it wants something. Plus - licence wise, its as cheap as chips. And, System Centre is cheaper if you buy the pack on EES....
glennda Posted September 19, 2011 Posted September 19, 2011 anybody know roughly how much it is a year extra on schools agreement to get FEP? (without system center)
john Posted September 19, 2011 Posted September 19, 2011 Nothing as its now part of the Core CAL Pack and has been since August
TheScarfedOne Posted September 19, 2011 Posted September 19, 2011 No go sadly. FEP requires SCCM.... will check back what the guide costs where...
sonofsanta Posted September 20, 2011 Posted September 20, 2011 SCCM isn't that pricey is it? I just bought it to go with SCVMM and it was only £73 one off including the full SQL licence it needs. OpsMgr and the Server Mgmt Suite were another £32/31 each, so less than £140 all told, as a one off fee... certainly cheaper than the £2k a year it costs for Symantec EP, so once the new servers are up and running, I will be taking a very good look at FEP.
jamiesev Posted September 20, 2011 Posted September 20, 2011 Where did you get the GPOs from for it? You can download an extractor from Microsoft that pulls the GPOs from server setup.exe. its just a case then of importing them into the correct OU 1
plexer Posted September 20, 2011 Posted September 20, 2011 I got this pricing from Ramesys: System Centre Configuration Manager Server 2007 R3 Licence £72.43 System Centre Configuration Manager Ent Management 2007 R3 Licence £53.81 System Centre Configuration Manager Std Management 2007 R3 Licence £19.04 System Centre Configuration Manager Client Management 2007 R3 Licence £5.26 Installation disk £25 No idea which version I need now. Ben
plexer Posted September 21, 2011 Posted September 21, 2011 Apparently the version I need for deploying FEP is: You will only need the standard licence for Forefront. Ben
inventorysoftware Posted September 30, 2011 Posted September 30, 2011 Microsoft security essentials has done the job for us and personal PC's. However, with Microsoft often being a target for hackers --> Norton Anti-virus does the job.
sven Posted December 12, 2011 Posted December 12, 2011 You can download an extractor from Microsoft that pulls the GPOs from server setup.exe. its just a case then of importing them into the correct OU Any chance of a link to this?
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now