Centralized AV for Server 2012


Recommended Posts

Hello folks,

I'm just wondering if there is a AV product out yet that is designed for Server 2012 environments. I'd like to be able to deploy AV clients to Windows 7, Vista, and XP machines on my LAN via my Server 2012 box. Based on the small amount of reading I've done, FEP doesn't yet support Server 2012. Are there other alternatives?

Link to comment
https://www.neowin.net/forum/topic/1135814-centralized-av-for-server-2012/
Share on other sites

FEP is now System Center 2012 Endpoint Protection and does have support in System Center 2012 SP1 for both Win8 and Server 2012.

I haven't installed System Center yet, so I can't say how well it works or licensing for System Center itself. We have an EES Agreement for MS, so it's not bad for us.

I can't speak for alternatives. We just got Server 2012 installed around the first of the year and haven't got too in-depth yet.

Hello,

I would think that just about any anti-malware vendor that has a Microsoft Windows 8 compatible product out has a Windows Server 2012 compatible product out, or at least one that is going through the certification process right now.

Regards,

Aryeh Goretsky

Kaspersky Endpoint Security 10 for Windows (for file servers) supports Server 2012

http://support.kaspersky.com/kes10fs#requirements

Just go with Kaspersky.

Symantec Endpoint Protection 12.1.2 is also compatible (also a lot cheaper than Kaspersky)

http://www.symantec.com/business/support/index?page=content&id=TECH195325

http://www.symantec.com/connect/articles/latest-symantec-endpoint-protection-releases-symantec-endpoint-protection-121-ru2

ESET has solutions for server core, server, client, gateway etc supports the latest windows editions with remote administration and update mirroring.

please go with a better program than system center. I am testing out system center and I see it as a very unintuitive pain in the rear package. ease of use as well as ability to protect your systems should be your goal, and from what I am reading it can't protect your systems and it isn't very easy to use (initially).

please go with a better program than system center. I am testing out system center and I see it as a very unintuitive pain in the rear package. ease of use as well as ability to protect your systems should be your goal, and from what I am reading it can't protect your systems and it isn't very easy to use (initially).

Huh? How exactly is SCEP or FEP more complicated than any other antimalware package that has centralized control and reporting over multiple platforms? I've been using it since before it was integrated with SCCM 2007 R3, and SCEP/FEP itself is pretty damn easy to manage. You don't even require SCCM if you don't want centralized reporting, you can use a GPO instead (mind, I haven't bothered doing a GPO for it since SCCM 2012 was released).

I currently have SCEP deployed to over 500 systems running Mac OS 10.8, Mac OS 10.7, Windows 8 & 2012, Windows 7 & 2008 R2, and Red Hat Enterprise Linux. I'm extremely happy with it now that it supports every platform I also support. Any entity supports many platforms should definitely give SCEP consideration.

I won't deny that Configuration Manager as an entire entity is a beast, but I'd say the Antimalware components of it are pretty damn easy, and very powerful from an Administrative viewpoint.

FEP is now System Center 2012 Endpoint Protection and does have support in System Center 2012 SP1 for both Win8 and Server 2012.

I haven't installed System Center yet, so I can't say how well it works or licensing for System Center itself. We have an EES Agreement for MS, so it's not bad for us.

I have the EES Enterprise Agreement. If you are on this tier of the EES already, SCEP is extremely cheap to implement for desktops. You?ll probably just need one System Center Suite Standard or Datacenter license, and you can then use all aspects of System Center against your desktops. Costs may go up a fair bit however if you plan to support servers with it, as it?s highly unlikely your existing agreement covers server management CAL's unless some aspect of your infrastructure is already supported by System Center.

It?s been a very long time since I was on the EES Standard Agreement, but if you are on that agreement, you may find you only have partial desktop management coverage. It may cover part of System Center, but is unlikely to cover all of it. Either way, talk to your vendor to discover the limits of your existing agreement.

it is the sccm as a whole. it really is a pain...

Lets go into deploying a client...where is the verification in the admin console that it has been pushed successfully, it has been installed successfully, or if it failed for that matter. Lets go into managing a client that may or may not have the client pushed, how do you tell it was pushed, how do you tell it wasn't, how do you tell if it is in the process of. Lets go into attempting to view anything...connection fails because of a firewall issue..all the ports are open, hell the firewall is disabled...how can it be a firewall issue???

Just about every other management console based software has a way to monitor deployments from start to finish and have a way to be able to tell exactly what is stopping them for the admin to fix the issue. I have used many, kaseya, altiris, level platforms, and labtech and all of them you can tell what is going on at any given point during just about whatever you are doing and you get things like logs and error codes. If ms would just steal one of these management suites it would be beneficial to the rest of us.

If you care to prove differently I have a nice test environment that shows otherwise and would be more than happy to give you a brief tour of what I am complaining about.

  • 3 weeks later...

it is the sccm as a whole. it really is a pain...

Lets go into deploying a client...where is the verification in the admin console that it has been pushed successfully, it has been installed successfully, or if it failed for that matter. Lets go into managing a client that may or may not have the client pushed, how do you tell it was pushed, how do you tell it wasn't, how do you tell if it is in the process of. Lets go into attempting to view anything...connection fails because of a firewall issue..all the ports are open, hell the firewall is disabled...how can it be a firewall issue???

Just about every other management console based software has a way to monitor deployments from start to finish and have a way to be able to tell exactly what is stopping them for the admin to fix the issue. I have used many, kaseya, altiris, level platforms, and labtech and all of them you can tell what is going on at any given point during just about whatever you are doing and you get things like logs and error codes. If ms would just steal one of these management suites it would be beneficial to the rest of us.

If you care to prove differently I have a nice test environment that shows otherwise and would be more than happy to give you a brief tour of what I am complaining about.

Windows already has a gigantic servicing engine that logs just about anything, and an SCCM task sequence can monitor this - in addition, a task sequence that uses MDT integration offers even more (logging and TS customization). As someone who's used most of the deployment products out there at this point, SCCM is in fact at least as powerful and configurable, and the fact it's a lifecycle management product (versus just an OSD product) makes it (and SCEP) worth the price when coupled with the other products in the suite. If you need a management console to troubleshoot for you, you're already behind the 8 ball as you're trusting information from someone or something that may or may not be the OS making judgement calls on failures. Any SCCM OSD should have pre-flight checks so that if failures are going to occur, you catch (and log) them before you start touching the client machine to be (re)installed.

I'd put SCCM and SCEP (+DCM, NAP, and DA) up against any lifecycle management product any day of the week - heck, you get licensing to SCOM and Orchestrator as well with your System Center purchase, which also means endpoint monitoring, reporting, and automation as desired based on things like performance data, event logs, and DCM / NAP configuration.

Honestly, most environments that fail to get the most out of the System Center suite (especially with the 2012 version) comes down to the admins not knowing how to set it up and manage it properly, rather than the software.

We mainly use sccm for the remote control feature, a simple feature that any of these products support. Sccm fails at connecting almost 40 percent of the time. Some random error about firewall or network connectivity. I can connect with any other software pushing clients to the computer even connecting with rdp, but sccm ha an issue. This is random, sometimes it connects and sometimes it doesn't. If it can't do something this simple we cannot trust it to do anything else.

Firewall is not an issue, we completely disabled it as a test, Dns isn't an issue we can connect to the computer many different ways, network connectivity isn't an issue see previous comment. It doesn't give an error to properly troubleshoot this. We cannot trust a product like this but my predecessor decided this was a good product to go with and we are stuck with something that works half assed.

For craps and giggles, I created a 2012 sccm server in a test environment, that same issue may or may not be there but after I push there is no status on the console to tell you what/where the install is or if it failed or succeeded. He'll I can push to a pc that has been retired, no error no status, nothing. And you probably will see this as no problem....while this is a small environmental test of around 50 live, the production is several thousand some are turned off in the it closet that won't be deployed. The push from sccm is very poorly designed. I would even say the the remote tools also fall in that category. I wouldn't trust this for a proper inventory or to push packages out.

I deal with environments of 100,000 PCs or more, and setting up reporting (real time and otherwise) isn't that hard. Push works fine, and reporting does too. If you're seeing retired machines still in SCCM, or having issues pushing packages, that would be an issue to be investigated. Perhaps it's easier for me because I do it for a living and know how to use SQL reporting and SQL in general.

It is very easy for me to recommend other utilities because I too do it for a living and have been exposed to many tools not just given one package and told to deal with it. I see it from the user side, the admin side, and the tech side. I can't say with 100% certainty that this package is good or worth the money. I have seen many packages from initial testing to production roll out and have trained many. I can tell you in this environment this system doesn't work properly. it is my first go at sccm which was preinstalled to me coming in and dealing with it. From what I see this is a very cumbersome, unfriendly, and near hostile piece of software. For a tool that is supposed to help you it does a lot of fighting against you and makes you job counter productive.

I can honestly say the Sophos, still, by far was the easiest to setup and configure. I have been busy testing AV suites over the past few days and I still vote for Sophos for large networks.

Sophos might be easy to set up, but it's performance impact compared to just about any other A/V product is pretty horrible. There's more to an A/V product than how easy it is to manage.

For what it's worth, other than FEP/SCEP, the very latest Symantec A/V release (12.1.2) actually has a very light performance impact for a good A/V product.

Sophos might be easy to set up, but it's performance impact compared to just about any other A/V product is pretty horrible. There's more to an A/V product than how easy it is to manage.

For what it's worth, other than FEP/SCEP, the very latest Symantec A/V release (12.1.2) actually has a very light performance impact for a good A/V product.

That was the opposite for my setup. Mine was very low resource usage.

  • 2 weeks later...

Hello folks,

I'm just wondering if there is a AV product out yet that is designed for Server 2012 environments. I'd like to be able to deploy AV clients to Windows 7, Vista, and XP machines on my LAN via my Server 2012 box. Based on the small amount of reading I've done, FEP doesn't yet support Server 2012. Are there other alternatives?

That's because FEP was pretty much replaced by System Center Endpoint Protection (it's the same product, actually) - it's why I'm having to get my feet wet with SCCM for my virtualization test lab. The test lab will have a mixed bag of Windows and Linux clients (I'm adding a Sabayon 11 client right now as I type this). I'm hoping to not need to do a kitchen-sink; preferably, I'll only need CM/EP and VMM along with their prereqs. I have SQL Server 2012 Express SP1 installed with the defaults (it will only be used by System Center). Now I'm trying to figure out the proper settings for SCVMM to link to the SQL Server Express DE - for some reason, I get no warnings, yet the install always bombs connecting to the DE.

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • I notice how you dodged the questions I had about the racism shown by ignorant, gullible, cowardly people when the Poles, like your partner, were the immigrants. Ahem. I wonder how you'd feel if native born Brits suddenly treated you as "dirty crooked immigrant" for being half Trump-American? If they ordered you to leave and "go back to your corrupt country" (on the other side of the Atlantic), would you go? The truth is based on facts as supported by evidence. As requested in your previous posts, I have used the facts in your own post to show everyone the truth.
    • US citizens are paying to their government, who could use that to fund healthcare and tuition and relieve the costs of these for citizens instead of making tax breaks that overwhelmingly favor the rich. I'm not saying that tariffs are the correct solution, but what else would they be used for? What else could Trump have in mind for wanting them, if he hasn't figured out that labor costs are higher in the US?
    • I’m in need of a new chair and it sounds like the backrest cannot be locked? I also sat on a Herman miller and was devastated that it couldn’t be locked also, what is going on with chairs. I want to be able to lock the backrest into any position but not even the Herman’s do that
    • Sihoo Doro C300 Pro V2 Ergonomic Office Chair review: The Ikea of chairs by Steven Parker I've reviewed a few gaming chairs over the past three years or so and generally found them to score well in our reviews. SIHOO reached out asking if I was interested in taking a look at their flagship chair, the Doro C300 Pro V2. I never got the chance to check out its predecessor, but the V2 is described as an "Adaptive Ergonomic Chair." It became available to buy in April of this year. Let's get things rolling with a closer look at the specifications and features. Specifications Doro C300 Pro V2 Model Ergonomic Materials Mesh Back and Seat; Soft PU Coated Armrests Height adjustability 45.5 - 53 cm / 17.5" - 20.9" Seat (w+d) 52 x 43 - 47 cm / 20.5" x 16.9" - 18.5" (adjustable) Backrest 52 – 60 cm / 20.5" - 23.6" (adjustable) Lumbar support Mesh built-in (adjustable) Armrest adjustability 8D Bionic Armrests Rocking angle 105°, 120°, 135° (fixed) Neck support Mesh built-in (adjustable) Net weight 27.3 kg / 59.64 lbs Weight support 150 kg / 330 lbs Colors Black, White Warranty 5 years (upon registering) Price $499.99, $539.99 Introduction At first glance, it looks like a chair that in another life wants to be a Herman Miller; It certainly looks like my Aeron Remastered, but the Doro C300 Pro V2 has quite a few more features and costs quite a bit less. SIHOO says that it is made up of a "DynaCore" system that tracks your movement and synchronizes the headrest, backrest, lumbar support, and armrests as you shift, twist, or recline. They also say that the "SyncroFlex Backrest" molds to your spine, which kind of describes how the mesh fabric works in most ergonomic chairs, but anyway. Below are the meat and potatoes measurements for the chair. Here is the same tech sheet, but in inches. Durability I would be remiss to not talk about the various durability testing this chair underwent before coming to market, as this is claimed on the product page. First of all, the chair is BIFMA-, SGS-, and TÜV-certified. As for durability, the tests undergone were: 100,000 Castor cycles tested 120,000 Armrest cycles tested 120,000 Recline cycles tested 120,000 Gas lift cycles tested 60,000 Armrest durability cycles tested 120,000 Rotation cycles tested Nothing about weights testing, though. Now that's all disclosed, now onto my own personal findings. Assembly The Doro C300 Pro V2 came in two large boxes (1) (2), and everything was packed very well, protecting the different parts of the chair. In the box, there is a folded sheet that explains the 12 steps to assemble it; they are: Remove the bottom cover on the aluminum base; Insert the five legs into the aluminum base and use ten screws to fasten them; Insert the castors into the legs; Replace the bottom cover on the bottom of the aluminum base; Place the Class 4 Hydraulics gas cylinder into the aluminum base; Screw the bottom part of the arm rests, taking care of the orientation using two screws on each side; Use three torx screws to fasten the footrest to the bottom of the seat; Fasten the backrest to the seat using four torx bolts; Fasten the armrests to the backrest using four Torx bolts (two on each side), taking care to note the orientation; Place the chair onto the Class 4 Hydraulics gas cylinder; Insert the headrest into the top of the backrest; Use two torx screws to fasten the headrest to the backrest. There's also an online guide you can refer to. Carefully unpacking the two boxes took around 15 minutes because almost everything is wrapped in plastic and protective foam; the chair assembly itself took around an hour. I say in the above assembly steps to take note of the orientation, because it's not obvious which way around the bottom portion of the armrests go, and although there is an L and R on the bottom of the armrests, it also wasn't clear from the instructions which was actually left or right, facing the chair, or in the seated down orientation? Anyway, I ended up putting the bottom portions on the wrong sides, and after securing one of the armrests, I discovered that although it was on the correct side, the armrest base could rotate a full 360°, but not when bolted to the chair, so I had to remove it, rotate it, and then bolt it back on. Truly an Ikea experience! Also, to complicate things further, although all the parts are labeled from A to X (yes, that's 24 parts) unhelpfully, these letters do not appear on the parts themselves or the package with the bolts, screws, and washers. There's also a pair of protective gloves in the box, but I think they were made for much smaller hands than I have. Even my friend, who is 5.1, had difficulty putting them on. Once assembled, I needed to sit down. Anyway, as I said, it looks quite similar to my Herman Miller. And here is the back of it. If you look at the product page and on Amazon, it seems like a lot of thought has gone into the chair itself and what it's capable of, but there is no mention at all about the castors, and this is an area where I think the chair trips up quite quickly. I found it difficult to move the chair in any direction. I asked a friend who came to visit me earlier this week to test my findings, and she said that the wheels were "no good," so it definitely isn't just me. I am 6'2 myself and a big guy, I work from home and gained a few pounds from mostly staying in and the hell away from other people. However, the Doro C300 Pro V2 is rated for up to 150kg (330lbs), which in my case is used well within its max rating. Ergonomics The number of adjustments you can make, right up to setting it in nap mode — which I haven't fully tested yet — is what you'd expect from a premium chair. Yes, you can go up and down (max 7.5 cm adjustment), rock back and forth (with tilt adjustment), and lock the chair between three stages of 105°, 120°, 135°, which is not quite as flat as the AndaSeat I tested at 160°. Some thought has also gone into the "8D" armrests, too, which are cushioned but quite firm; you'll only know it if you press hard into the PU-covered tops, which give about half a centimeter, but it's enough to ensure your skin won't get awkwardly stuck to it in warmer (or sweatier) conditions. It almost feels like plastic and is very easy to keep clean. However, the armrest positions move far too easily, and I am not sure what that "elbow" function is. Maybe it is good for a short person with short arms, anyway, I never used it and kept it flat at all times. There are eight levels of adjustment for the armrests, they are: backwards, forwards, swing left/right, height up and down, tilt, and 360° rotation, which can be handy for desk clearance. As I said, the armrest pads shift far too easily, which could give off an ergonomic vibe, but who wants the armrest sliding when you are shifting weight? The height adjustability does lock into place when lifting and adjusting. Comfort This is ultimately what it boils down to at the end of the day, right? Quite a lot of reviews praise the comfort of this chair, and I don't disagree that the mesh seating is quite comfortable. I am used to the material from my daily Herman Miller. However, the backrest cannot be locked into place, and this is actually a feature; as you shift or recline yourself on the chair, the backrest moves with your body. It took some getting used to. The lumbar gives ample support, but I would have preferred an adjustable one built into the seat base, as this causes the backrest to move up and down at will. Again, as with my previous chair review, this chair is also rated for tall people, but nowhere in the product documentation does it say how tall. Being 6'2 myself, I'm happy to say that the backrest is tall and wide enough, and thought has been given to being able to adjust the neck rest, but as others have mentioned in their reviews, people as tall as 6.2ft is about the limit for the neckrest. Conclusion What I didn't like The footrest is rated for 15kg (33 lbs), which to me seems a bit light, and after looking online, it seems like a chair footrest for adults must be at least twice that rating. In all honesty, they are just hollow metal tubes, so it is not recommended to let a kid sit on them. I also feel like it doesn't really go out far enough for my height, so that kind of puts the dampener on me being able to use it regularly. I'll just have to continue to use my subwoofer as a footrest! I do not like the armrests being able to shift around as easily as they can, and they are a little too forward-positioned in the chair to comfortably sit close to my desk, because even in the lowest height position, they don't allow me to go under the desk like is possible with my Herman Miller. I also feel like this chair could have been delivered partially constructed, especially the armrests on the seat, and why the aluminum base wasn't already pre-constructed (without the castors) is baffling, considering it would have fit in one of the two boxes that way. The instructions also need to be clearer. On the pamphlet, there's an A to X listing (which is also used in the steps), but none of the physical parts use this lettering system! What I did like I'll be honest, I haven't used it for very long, just one week, and seating comfort is subjective after all! Any spills wiped straight off it, the stitching, and the lines look great, not a fray to be seen or stitch out of place. It looks kind of cool, too. My favorite feature of these seats is the nap mode. While you're not lying completely flat, it leans far back enough to make you easily doze off after a heavy gaming or working session. Overall, this chair offers plenty of comfort features. The MSRP does vary quite a bit depending on the region, at £549.99 in the UK, and €580 in Europe, and $599 before tax in the U.S. However, shipping is free, which is a bonus for such a heavy item. Is it worth it, though? At three years' warranty, I think it's a decent deal. Another firm out of Germany sent me a free replacement hydraulic gas spring for a chair that failed after almost four years, so it was well outside its two-year warranty. My advice is to always try, as you might have the same luck I did. If I could fault it at all, it would be the constant shifting of the armrests and backrest. Where to buy Although the footrest variant normally costs $539.99, it has been discounted to $469.99 on the official website in Black or White. In fact, the non-footrest variant is only $40 cheaper. On Amazon, it currently costs more at $499.99 links below. Sihoo Doro C300 Pro V2 for $469.99 (official website) Sihoo Doro C300 Pro V2 for $499.99 at Amazon US SIHOO provided a free sample without any review or pre-approval. Good to know This Amazon link is U.S. specific, and not available in other regions unless specified. We only use first-party seller links (at the time of article publishing); ensure that you purchase from a first-party seller link only. Check out Today's Deals on Amazon | or our recent tech deals. Become a Prime member (for Students or SNAP) via Neowin Get Prime Access - Prime for half price (for qualifying Medicaid, EBT, SNAP) Subscribe to Prime Video, Audible Plus, Music Unlimited or Kindle Unlimited via Neowin As an Amazon Associate, we earn from qualifying purchases.
  • Recent Achievements

    • Conversation Starter
      jessse3334 earned a badge
      Conversation Starter
    • Reacting Well
      JuvenileDelinquent earned a badge
      Reacting Well
    • One Month Later
      Excellence2025 earned a badge
      One Month Later
    • Week One Done
      Excellence2025 earned a badge
      Week One Done
    • Week One Done
      flexorcist earned a badge
      Week One Done
  • Popular Contributors

    1. 1
      +primortal
      506
    2. 2
      +Edouard
      207
    3. 3
      PsYcHoKiLLa
      151
    4. 4
      Steven P.
      73
    5. 5
      macoman
      62
  • Tell a friend

    Love Neowin? Tell a friend!