Educause Security Discussion mailing list archives

Re: Microsoft Forefront


From: "Fisher, Matthew C" <FisherMC () WOFFORD EDU>
Date: Wed, 29 May 2013 18:25:10 +0000

IMO it does pretty good as far as catching things but still lets some stuff slide here and there. As far as resources 
it consumes; it's no better or worse than some other big names AVs I have used/tested. Deployment and maintenance is a 
breeze and almost hands-off once you get it all setup and going. I have some reports emailed to me on a schedule and 
unless I see something out of whack in them I never even bother with it cause it runs itself. I also use WSUS for the 
definition updates (along with all other updates) since it's a little easier and more hands off than using SCCM for 
updates...at least in my opinion.

That said there have been some occasions where the Help Desk has had a machine that was in bad shape and needed to use 
another tool like malware bytes to remove some things that SCEP didn't catch.

If you use SCCM you can setup some custom configuration baselines to help monitor certain things that will help 
troubleshoot a SCEP client that is not working correctly as well so this is another plus to having it with SCCM .

Matt

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Greg 
Schmalhofer
Sent: Wednesday, May 29, 2013 11:14 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Microsoft Forefront

Also, can anyone give any comments as to how effective Microsoft Forefront endpoint solution is as an antivirus 
solution (in addition to performance, deployment, maintenance...) ?

Thanks,
Greg

Greg Schmalhofer
Information Security Coordinator
Millersville University


From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of 
Santabarbara, Angelo
Sent: Wednesday, May 29, 2013 10:06 AM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>
Subject: Re: [SECURITY] Microsoft Forefront

We also have switched to SCEP and SCCM.  It seems to work better than our previous solution and is a lighter weight 
client.  SCCM took longer to setup than ePO, but even so it wasn't that big a deal to do.


Angelo D. Santabarbara
Director of Networks & Systems
Siena College
518-782-6996
ASantabarbara () siena edu<mailto:ASantabarbara () siena edu>

***Siena ITS staff will NEVER ask for your password or other confidential information via email.***

CONFIDENTIALITY NOTICE: This e-mail, including any attachments, is for the sole use of the intended recipient(s) and 
may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is 
prohibited. If you received this e-mail and are not the intended recipient, please inform the sender by e-mail reply 
and destroy all copies of the original message.

On Wed, May 29, 2013 at 9:53 AM, Fisher, Matthew C <FisherMC () wofford edu<mailto:FisherMC () wofford edu>> wrote:
We use SCEP with SCCM and it works well. The price is great and its really easy to manage using SCCM. With SCCM you  
have good built in reports and it allows you to create custom reports as well if you like to look at reports.

Matt

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () 
LISTSERV EDUCAUSE EDU>] On Behalf Of Shaun Gray
Sent: Tuesday, May 28, 2013 1:56 PM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>
Subject: [SECURITY] Microsoft Forefront

Greetings Everyone,

Does anyone currently use the new Microsoft Endpoint 2012 product in their environment? If so can you share your 
thoughts on the product in terms of performance, deployment, maintenance, etc. The price point (free) makes it a pretty 
enticing option to replace Symantec Endpoint Security which has been less than stellar.


Shaun L. Gray, GSEC
Network Engineer
Medford Township Board of Education
P / 609-975-6159<tel:609-975-6159>
[MCITP(rgb)_1084]


________________________________
Medford Township Public School District email is provided to staff for the purpose of professional communication. 
Please be aware that messages sent via email may not be secure and that network administrators may have to review 
communications to maintain network integrity and ensure the responsible use of the system. This electronic transmission 
and documents transmitted as attachments contain information from the Medford Township Public School District that may 
be proprietary, confidential and/or privileged under state or federal law. The information is intended for the sole use 
of the individual(s) or entity named above. The individual(s) or entity named above as the receipt of this information 
is expressly prohibited from disclosing this information to any other party unless required to do so by state or 
federal law or regulation. If you are not the intended recipient, be aware that any disclosure, copying or distribution 
or use of the contents of this electronic transmission and any document attachments is expressly prohibited. If you 
have received this electronic transmission in error, please notify the sender immediately by replying to the address 
listed above and delete or destroy all copies of the original electronic transmission.


Current thread: