I have no issues with Kaspersky and would have no problem keeping it in my environment.
That said, I currently use Webroot in ours, which is about 1k users with some laptops around the country and world like yours and its ok. I dont like the management of it and its a little buggy at times but I cant argue with MDR. What im going to be implementing is Carbon Black defense. Combining AV with EDR is really cool and the streaming tech they have to catch non-malware breaches is pretty cool. ________________________________ From: [email protected] <[email protected]> on behalf of Michael Leone <[email protected]> Sent: Thursday, September 14, 2017 11:31 AM To: [email protected] Subject: [NTSysADM] Dropping Kaspersky Av, who to replace it with? We use Kaspersky for our AV needs, and to be honest, it's worked out well for us. It's certainly caught things that McAfee, our previous AV solution, didn't. However, they have this slight problem with being a covert arm of the Russian government, apparently .. So we need to drop them, as the federal agencies are doing. There are lots of reviews, such as av-test.org, that we are looking at. But tell me, who do you have? And - more importantly - if you had your say in the matter, would you keep them? We're an sort of enterprise level organization, maybe 1K users, bunch of laptops issued to remote users. So far, all Win 7 for workstations, but obviously that will change in the future. Servers are all Win 2008/2012 R2 (so far). So we need something with a centralized console, to push out rules, updates, etc. We use Proofpoint as an email gateway, so it does mail scanning. We have Checkpoint firewalls for managing that sort of traffic. Thoughts? I know I've heard good things about ESET and Sophos, among others. Just soliciting some real world opinions, along with our own research. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ The information contained in this communication and all accompanying documents from Coilcraft may be confidential and/or legally privileged, and is intended only for the use of the recipient(s) named above. If you are not the intended recipient you are hereby notified that any review, disclosure, copying, distribution or the taking of any action in reliance on the contents of this transmitted information is strictly prohibited. If you have received this communication in error, please return it to the sender immediately and destroy the original message or accompanying materials and any copy thereof. If you have any questions concerning this message, please contact the sender.

