Educause Security Discussion mailing list archives

Re: Anti-Virus/Malware Enterprise Options


From: "Burke, Ian R." <iburke () MIDDLEBURY EDU>
Date: Wed, 8 Jun 2016 16:17:00 +0000

We have been using Sophos for a few years now and are switching to their cloud solution. We have considered switching 
to the MS platform but have not yet taken the plunge. Sophos seems to work fairly well but is a bit cumbersome to 
manage when it comes to the stale system side of things. It will be interesting to see if the cloud platform helps 
solve this issue any.

I still believe that all of these AV solutions only stop a small percentage of the threats and that a broader solution 
involving a fuller spectrum of protection, including user education, is critical.

Ian

Ian Burke
Information Security Administrator
Information Security – ITS
http://go.middlebury.edu/infosec
Middlebury College

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Garmon, 
Joel
Sent: Wednesday, June 8, 2016 12:11 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Anti-Virus/Malware Enterprise Options

We have been using Microsoft’s System Center Endpoint Protection for a while now.  It does a decent job at detecting 
virus.  But I agree that you really need a competent SCCM team to use it.

Contact me directly if you want more information.


Thank you,

Joel Garmon
Director Information Security
Wake Forest University
336-758-2972

http://infosec.wfu.edu/

On Wed, Jun 8, 2016 at 11:42 AM, Brian Griffith <griffibw () whitman edu<mailto:griffibw () whitman edu>> wrote:
Hey Doug. We recently made the switch from McAfee to SCEP. In our somewhat limited testing, they performed similarly. I 
feel slightly better about McAfee (leftover bias against Defender from the early days, perhaps?), but not enough to 
justify the cost. We feel like the central administration of SCEP is better/easier (IF you already have SCCM up and 
running), and you get prettier reports out of the box. I'm also excited about the MS APT product as we transition to 
Windows 10.

Brian Griffith
Information Security Officer
Whitman College



On Jun 8, 2016, at 8:32 AM, Doug Brooks <dbrooks () PARKLAND EDU<mailto:dbrooks () parkland edu>> wrote:
We are currently using McAfee as our AV solution but are evaluating other options.  We are upgrading to the latest 
McAfee Endpoint Security version for our enterprise but also want to consider other products including Microsoft’s 
System Center Endpoint Protection/Defender platform.  The latter would save us money but I’m not yet confident that it 
is a viable enterprise solution.

I’d appreciate any feedback on McAfee, Microsoft or other enterprise-grade solutions that you are using.

Thanks,

Doug
Parkland College
dbrooks () parkland edu<mailto:dbrooks () parkland edu>

________________________________
Email to or from Parkland College employees may be subject to disclosure under the Illinois Freedom of Information Act. 
This communication is the property of Parkland College and is intended only for use by the recipient identified. If you 
have received this communication in error, please immediately notify the sender and delete the original communication. 
Any distribution or copying of this message without the College’s prior consent is prohibited.


Current thread: