Home Network AV

[endlesslyonline]

I am looking for a anti-virus solution for my home network.

Currently I have :

2xPC's (Windows 7)
2xHTPC's(Windows 7)
Wifes Laptop (Windows 7)
My Laptop (Windows XP)
HP Micro Server (Server 2008)

And all of them have Security Essentials Installed (Except server), so my problem is just, that is 6 PC's connecting to the internet to download the same update, 6 times.

So i am looking for AV software that will be able to be installed on the server, get the updates and deploy to the clients.

I am familiar with Symantec Endpoint, but it is a bit of a resource hog, so, any suggestions?

 

[vinodh]

Install WSUS on the server and then setup the clients to get their updates from the server. You can also configure WSUS to only download the updates you want to minimise bandwidth. This also means that Microsoft Security Essentials will get its updates from the server as well. I did this on Windows Home Server 2011 a while back and it worked a treat. I have the WHS 2011 book that shows you exactly how to configure WSUS. I'll post an excerpt from the WSUS chapter here if you need it.

 

[endlesslyonline]

I have actually installed wsus before for normal updates, never even thought of it for security essentials, thanks.

Quick question though, wsus us configured in the GPO, is that enough for security essentials, or should I set it somewhere in security essentials itself as well.

 

[vinodh]

From what I remember, you don't have to configure anything for Security Essentials. Make sure that you approved the definition updates on WSUS.

 

[vinodh]

If you get stuck, try this. I found it on the Technet forums:

enable the "Definition Updates" classification Also, an automatic approval rule for the MSE product category and "Definition Updates" classification is highly suggested. This will ensure that the def updates are immediately available to the client systems upon arrival. Finally, you should also enable the policy setting for "Allow Automatic Updates immediate updates", which will allow the WUAgent to install the MSE definition update immediately upon detection, and you might also want to set the client Detection Frequency to a value around 6-8 hours, so the def updates can be obtained in a more timely manner. Otherwise, the updates will be scheduled for installation, and that may not be before the MSE engine goes looking for a def update online.

 

[endlesslyonline]

Quick question, on the classifications, there is two options under MS Security essentials, the is security essentials and ms security essentials. Should both be chosen? Or is it for different versions?

 

[vinodh]

Quick question, on the classifications, there is two options under MS Security essentials, the is security essentials and ms security essentials. Should both be chosen? Or is it for different versions?

I have no idea. Can't remember what I selected when I set it up back then. I would just choose MS security essentials and test it.