End Point Protection

BouncyNinja

BouncyNinja

Executive Member
Joined
Oct 15, 2009
Messages
5,225
Reaction score
2,522
Hi


Can anyone recommend a decent end point protection system, ie, that will include the likes of disabling usb ports, control of the pc?
 
Apps like symantec endpoint or trend av can do all that. Best way would be is to create a GPO, but get ready for major headaches, in the end almost not worth it.
 
I have to agree, GPO is the way to go. We manage pretty much everything via logon/start-up scripts called from GPO, and it works just fine.

Unfortunately I also have to agree about the headache part. Until you get it right it's pretty much hit and miss, and unless you have a sandbox to play in, until you get it tweaked the way you like it, you will probably annoy your user community.
 
srothman said:
Unfortunately I also have to agree about the headache part. Until you get it right it's pretty much hit and miss, and unless you have a sandbox to play in, until you get it tweaked the way you like it, you will probably annoy your user community.
Click to expand...

Let's face it though, they'll probably get annoyed anyway when they can't use their flash drives anymore:twisted:
 
I hate Symantec Endpoint Protection (as an enforced end user), but I have to admit that it's pretty effective
 
Hi There,
I have heard only good reports about Kaspersky. I understand the need for it but it can be incredibly frustrating for the end users.
The software is also not the cheapest around so you need in my opinion to have a really good reason to use it.

Regards

Tim
 
I tried the eset nod endpoint protection(30 day trial) and it was far from user friendly, when the client installations worked, it was a absolute mission to get it to talk to the server


We currently have the Symantec endpoint , and while its controls are easy to setup, the previous IT company (before i started ) somehow broke it, and it hasn't updated itself or the clients since last June
 
Tim the Techxpert said:
Hi There,
I have heard only good reports about Kaspersky. I understand the need for it but it can be incredibly frustrating for the end users.
The software is also not the cheapest around so you need in my opinion to have a really good reason to use it.

Regards

Tim
Click to expand...

Will contact them and see if they will give me a trail
 
Disable app installations and autorun for removable devices via GPO, users will still be able to use their flash drives, just not infect their PC's with their dirty sticks.
 
ijacobs3 said:
I tried the eset nod endpoint protection(30 day trial) and it was far from user friendly, when the client installations worked, it was a absolute mission to get it to talk to the server


We currently have the Symantec endpoint , and while its controls are easy to setup, the previous IT company (before i started ) somehow broke it, and it hasn't updated itself or the clients since last June
Click to expand...

For Eset create a settings XML file that has all the settings you want in it and then just import it to the clients or deploy them straight from the RA console.
 
Application and Device Control frequently aren't integrated with A/V, IPS, and layered endpoint protection. So, it can get pretty cumborsome to deploy and manage all the layers necessary to defend against known and unknown malware. I was discussing Symantec Endpoint Protection with a security user yesterday, and they couldn't say enough good about having application and device control integrated with malware protection makes their life so much easier.
 
 
Chetan said:
@Jacobs3

Hi,

I am Chetan Savade from Symantec Technical Support team.

Here are a few 3rd-party resources that should help to make the decision.
http://www.symantec.com/content/en/..._MQ_endpoint_protection_platforms_17Dec10.pdf

http://www.symantec.com/content/en/...ion_2011-performance_testing_ent_OR.en-us.pdf

http://www.symantec.com/content/en/...ces/b-remediation_testing_report_OR.en-us.pdf

You can refer these Symantec connect threads as well:
https://www-secure.symantec.com/connect/forums/sep-121-compare-kaspersky-ect
https://www-secure.symantec.com/connect/forums/sep-12-vs-forefront-compare-sheets
https://www-secure.symantec.com/connect/forums/compare

A condensed version of some of these findings is available at http://go.symantec.com/challenge

Hope this helps.
Click to expand...

Our renewal is coming up next month, if I could get the definitions to update i would most likely renew, the interface is simple, and straight forward

Can I call in to a tech department and chat to someone, as to why the updates are not working?

If all else fails,

I'm going to re-download the installation media tomorrow ( disks are missing) and build up a new server just for the anti virus.
 
Hi,

Can I call in to a tech department and chat to someone, as to why the updates are not working?

--> If you have active subscription with Symantec then yes you can either call to Support or even can log a case through web portal.

How to create a new case in MySupport
http://www.symantec.com/docs/TECH58873
How to Create and Validate a SymAccount for using Symantec's MySupport
http://www.symantec.com/docs/HOWTO31127

Currently we don't chat support but you can always start a new thread at Symantec connect site.
https://www-secure.symantec.com/connect/node/add/sc-forum?add_context=691&add_context_product=1403

To start new thread one time registration is required & its free. Here you will get much faster replies.

Meanwhile I would also like to assist you. All the clients are available means are they showing with green dot? Do you have Symantec Endpoint Protection Manager console?

If yes you can refer this article to troubleshoot further.

Symantec Endpoint Protection: Troubleshooting Client/Server Connectivity

http://www.symantec.com/business/support/index?page=content&id=TECH105894&locale=en_US

*http://www.symantec.com/docs/TECH141536

Symantec Endpoint Protection: LiveUpdate Troubleshooting Flowchart
http://www.symantec.com/business/support/index?page=content&id=TECH95790&locale=en_US

Regards,
Chetan Savade
 
Last edited:
Good luck with Symantec support. My problem only took 3 1/2 months to fix, that was only because I have a mate in Symantec and he escalated to the UAE big boys.
 
I built a new server, and started reinstalling, got about half of the clients done, and it's working like a charm
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X