Re: Managed deployment of System Center Endpoint Protection (SCEP)

["Davis, Michael" <MichaelDavis () LETU EDU>]

Howdy Doug,

Like many things in SCCM, numerous settings can also be controlled in Group Policy. We’ve opted to deploy the WDEG in 
and Firewall Policies in GP.

We do set our Antimalware Policies through SCCM though. We have exclusions setup for our SCCM site servers per 
Microsoft’s recommendations here: 
https://blogs.technet.microsoft.com/systemcenterpfe/2017/05/24/configuration-manager-current-branch-antivirus-update/

Microsoft also maintains an exclusion list recommended for other products here as well: 
https://social.technet.microsoft.com/wiki/contents/articles/953.microsoft-anti-virus-exclusion-list.aspx

Then, we have a separate set of Antimalware policies deployed to desktops/servers.

Feel free to contact me directly and we can bounce ideas around.

Michael A. Davis
Director, Information Security
Director, User Support & Engagement
[w] 903.233.3500 | [f] 903.233.3501
[l] LinkedIn/michaeldavis<http://www.linkedin.com/in/michael-davis-b042b84> | [t] @mdavis332<twitter.com/mdavis332> | 
[s] Skype for Business<sip:michaeldavis () letu edu>

[cid:image001.png@01D4AC03.6721BA50]


From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Douglas Stinnette
Sent: Monday, January 14, 2019 11:37 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Managed deployment of System Center Endpoint Protection (SCEP)

Hi there,

This is my first post and am asking for insight.
SCEP supports the following policies for protection.

  *   Antimalware Policies
  *   Windows Defender FireWall Policies
  *   Windows Defender Exploit Guard
  *   Windows Defender Application Guard
I'm just now testing deployment of antimalware policies and have started internet research on the others listed above.

I would like to know if others have deployed any of the SCEP solution in a managed manner. Also I would like to share 
questions and thoughts about the solution as well.

Thanks,
Doug

--



Doug Stinnette

VCU Technology Services

Endpoint Security Specialist

Virginia Commonwealth University

827-0933



Don't be a phishing victim - VCU and other reputable organizations will never use email to request that you reply with 
your password, Social Security number or confidential personal information. For more details visit 
http://go.vcu.edu/phishing<https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fgo.vcu.edu%2Fphishing&data=02%7C01%7Cmichaeldavis%40LETU.EDU%7C284a516a7d494e45ae0c08d67a485069%7C97a5855489f64d5a9806dd0ee085d235%7C1%7C1%7C636830848342079628&sdata=lRgPE9AL2U8Z6VpFIUzZ8H2wqHWj8QGpQXKF7H%2BXNVM%3D&reserved=0>
 or 
http://phishing.vcu.edu<https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fphishing.vcu.edu&data=02%7C01%7Cmichaeldavis%40LETU.EDU%7C284a516a7d494e45ae0c08d67a485069%7C97a5855489f64d5a9806dd0ee085d235%7C1%7C1%7C636830848342079628&sdata=IlZLaeXVbu5kRRt0fLfGgWbmu1jI63EHdb%2F%2FF3p6Suk%3D&reserved=0>.