Trend Micro OfficeScan Renewal Coming Up - Replacements?
-
Hi. I check this out every year and have almost jumped ship from Trend Micro OfficeScan (currently running 11 SP1) a couple of times; once to Vipre, but that was just after GFI took over and from what I can tell, I am glad I didn't. I see that Webroot is pretty popular these days (despite their issue in April that caused some decent headaches).
I am looking to protect 20 Windows Servers (almost all VMs), a couple Linux servers and about 115 Windows 7 (migrating to 10) desktops and remote laptops. I would love to have some sort of reliable centrally-managed application whitelisting. Would a 3rd-party endpoint firewall be better than Windows' own?
-
@wrx7m said in Trend Micro OfficeScan Renewal Coming Up - Replacements?:
Hi. I check this out every year and have almost jumped ship from Trend Micro OfficeScan (currently running 11 SP1) a couple of times; once to Vipre, but that was just after GFI took over and from what I can tell, I am glad I didn't. I see that Webroot is pretty popular these days (despite their issue in April that caused some decent headaches).
3rd party security tools are starting to be questionable (Symatec opening more holes than an otherwise standard Windows install is the one I'm thinking of specifically.) Webroot is my very short list of things I'd actually pay for.
I am looking to protect 20 Windows Servers (almost all VMs), a couple Linux servers and about 115 Windows 7 (migrating to 10) desktops and remote laptops. I would love to have some sort of reliable centrally-managed application whitelisting. Would a 3rd-party endpoint firewall be better than Windows' own?
UNIX/"Linux" wise, traditional AntiVirus isn't really how you normally secure it. Yes, it can be important if in the same network as Windows, but generally not the primary way of securing a machine. You want a state monitoring system like rkhunter.
Network wise, you want an IDS of some sort. I've used AlienVault's open source offering OSSIM, and you can always use SNORT.
The more layers of security, the happier an admin I am.
You can do application whitelisting through Windows itself and Group Policy (weather you have a domain or not, just need to apply the GP manually if you don't.)
Been a long time since I worked with anything that I needed a centralized management console just for the anti-virus bit, so I don't know on that front.
(almost all VMs)
Why only almost all? Hosts themselves? That might be a whole other thread tho.
-
@travisdh1 Thanks for the info. I have two physical servers left- an RDS server and an Exchange server. I have virtualized everything else in the past several years. I am planning on migrating the RDS to a VM later this year and the Exchange server to Office 365 within the next 6 months.
-
@wrx7m said in Trend Micro OfficeScan Renewal Coming Up - Replacements?:
@travisdh1 Thanks for the info. I have two physical servers left- an RDS server and an Exchange server. I have virtualized everything else in the past several years. I am planning on migrating the RDS to a VM later this year and the Exchange server to Office 365 within the next 6 months.
Good for you!
-
@wrx7m said in Trend Micro OfficeScan Renewal Coming Up - Replacements?:
Would a 3rd-party endpoint firewall be better than Windows' own?
Not likely. I won't touch a third party firewall. That's an integral part of the OS. Sure don't want to rip out the enterprise firewall that MS has in there with all that research and testing for some little third party job.
-
No AV for UNIX systems. Windows and Mac only.
-
Webroot is still my go to choice for third party AV.
-
@scottalanmiller Which of these are you using/recommending? I assume endpoint protection but what about the network and internet-related ones?
-
@scottalanmiller said in Trend Micro OfficeScan Renewal Coming Up - Replacements?:
Webroot is still my go to choice for third party AV.
You have a preferred vendor to buy Webroot through?
-
@donaldlandru said in Trend Micro OfficeScan Renewal Coming Up - Replacements?:
@scottalanmiller said in Trend Micro OfficeScan Renewal Coming Up - Replacements?:
Webroot is still my go to choice for third party AV.
You have a preferred vendor to buy Webroot through?
No, lol.
-
@wrx7m said in Trend Micro OfficeScan Renewal Coming Up - Replacements?:
@scottalanmiller Which of these are you using/recommending? I assume endpoint protection but what about the network and internet-related ones?
I agree with Scott that Webroot really has a great product. It's super light weight on clients too but really effective. They have added several features it seems since the SpiceCorps we had last year where @Nic presented on all the new features.
Is the Internet / File / Mobile stuff like a buffet where you pick the features you want? The web classification and reputation looks helpful. I had heard them talking about adding web filtering but was not sure what that would become. The real-time anti-phishing could be mighty helpful if you have no IPS / IDS.
-
@donaldlandru said in Trend Micro OfficeScan Renewal Coming Up - Replacements?:
@scottalanmiller said in Trend Micro OfficeScan Renewal Coming Up - Replacements?:
Webroot is still my go to choice for third party AV.
You have a preferred vendor to buy Webroot through?
We had really good pricing from SHI when I was in charge of IT Purchasing at my last company.
-
@scottalanmiller said in Trend Micro OfficeScan Renewal Coming Up - Replacements?:
@donaldlandru said in Trend Micro OfficeScan Renewal Coming Up - Replacements?:
@scottalanmiller said in Trend Micro OfficeScan Renewal Coming Up - Replacements?:
Webroot is still my go to choice for third party AV.
You have a preferred vendor to buy Webroot through?
No, lol.
Umm yes!! GroveMarketPlace!!!
-
@networknerd said in Trend Micro OfficeScan Renewal Coming Up - Replacements?:
@wrx7m said in Trend Micro OfficeScan Renewal Coming Up - Replacements?:
@scottalanmiller Which of these are you using/recommending? I assume endpoint protection but what about the network and internet-related ones?
I agree with Scott that Webroot really has a great product. It's super light weight on clients too but really effective. They have added several features it seems since the SpiceCorps we had last year where @Nic presented on all the new features.
Is the Internet / File / Mobile stuff like a buffet where you pick the features you want? The web classification and reputation looks helpful. I had heard them talking about adding web filtering but was not sure what that would become. The real-time anti-phishing could be mighty helpful if you have no IPS / IDS.
That is what I am trying to determine. I would like to have something that does web filtering, especially for remote users. Anyone who is using webroot, what products/features are you using?
-
Also, does anyone know if webroot requires internet access on each system that it is installed on?
-
@wrx7m said in Trend Micro OfficeScan Renewal Coming Up - Replacements?:
Also, does anyone know if webroot requires internet access on each system that it is installed on?
If you have no internet, you don't need a 3rd party AV program.
-
@jaredbusch I don't think that is a thing. No network connection, yes.
Edit - Plus what about USB flash drives? You would have to disable that capability too.
-
Is anyone using any of these Webroot products?
https://www.webroot.com/us/en/business/threat-intelligence
And The DNS product appears to be in beta but seems interesting. Kinda like OpenDNS.
https://www.webroot.com/us/en/business/dns-protection -
@wrx7m said in Trend Micro OfficeScan Renewal Coming Up - Replacements?:
Is anyone using any of these Webroot products?
https://www.webroot.com/us/en/business/threat-intelligence
And The DNS product appears to be in beta but seems interesting. Kinda like OpenDNS.
https://www.webroot.com/us/en/business/dns-protectionHaven't tried those, but Webroot Endpoint Protection is the jammy jam. Zero problems, lightweight, great support, blah blah blah....
10/10, would buy again.
-
