I agree on all counts. Very easy to deploy and update via WSUS, and the client software seems to work fine--doesn't overtax the workstations or cause weirdness. The MOM console is, indeed, "a smidge complicated." I'd go further than that and say that it's just plain badly-designed, and not at all user-friendly.
Roger mentioned false negatives. I've faced that with the "SecurityTools" malware. Microsoft's argument is that whoever makes SecurityTools is regularly modifying the executable just enough to make it undetectable with FCS's definitions. So one version of the malware comes out, Microsoft modifies defs to detect it, then another slightly different version comes out. The malware always seems to be a step ahead of FCS. Now, I should mention that we run our machines tightly-locked. Not a single one of our users runs with admin rights, and our students run with software restriction policies on top of that. Plus, our e-mail antivirus is quite effective, and our machines stay full-patched. So our layered approach to security probably helps reduce our odds of being infected with malware regardless of the AV product we use. And on those occasions where we did get infected (i.e., with SecurityTools) there was no real damage and cleanup took about 30 seconds. John Hornbuckle MIS Department Taylor County School District www.taylor.k12.fl.us -----Original Message----- From: Joseph L. Casale [mailto:[email protected]] Sent: Thursday, March 25, 2010 7:53 PM To: NT System Admin Issues Subject: RE: Forefront Client Security I use it. Its trivial to deploy, choose an OU and it sets up the GPO's. It just runs:) The mom console is a smidge complicated, but I can tell you I have never had an issue with false positives or blue screens or any bs like that. It just runs, properly. -----Original Message----- From: Joseph Heaton [mailto:[email protected]] Sent: Thursday, March 25, 2010 5:10 PM To: NT System Admin Issues Subject: Forefront Client Security Anyone using this? I know some of you are using Forefront, but I was wondering if anyone is using the Client Security to manage it. I've seen the console, and it's pretty barren. How is it to actually use, and deploy to clients, etc? ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ NOTICE: Florida has a broad public records law. Most written communications to or from this entity are public records that will be disclosed to the public and the media upon request. E-mail communications may be subject to public disclosure. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
