Block writing to USB instead an anti-malware protection though, it's DLP. Just because Microsoft didn't include a specific feature in their anti-malware that a vendor did doesn't mean Microsoft can't do it. Don't compare apples to beef here. Group Policy absolutely has the ability to restrict USB access - it may not be as robust as the Symantec capability, but it is there.
J From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Martinez III, Luis Sent: Wednesday, September 10, 2014 3:57 PM To: mssms@lists.myitforum.com Subject: [mssms] RE: System Center Endpoint Protection Interesting to hear everyone's feedback. The company I'm working for at the moment uses Symantec Endpoint Protection for AV and some policy restrictions (such as blocking write access to USB). Symantec isn't cheap however. May have to give SCEP a look since we are on 2012 now. From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> [mailto:listsad...@lists.myitforum.com] On Behalf Of Nash Pherson Sent: Wednesday, September 10, 2014 1:46 PM To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com> Subject: [mssms] RE: System Center Endpoint Protection SCEP is the easiest product to successfully manage, and of course you have already paid for it (not cheap... its actually horribly expensive... but you've already paid for it). While Kaspersky may have incrementally higher detection rates, the conversation really needs to be centered around whether or not Kaspersky is so much better that it warrants paying for two antivirus products. With almost every customer I've worked with, the business decision has been to go with SCEP and I have yet to see an unhappy customer. From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> [mailto:listsad...@lists.myitforum.com]<mailto:[mailto:listsad...@lists.myitforum.com]> On Behalf Of SCOTT Nick D Sent: Wednesday, September 10, 2014 15:42 PM To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com> Subject: [mssms] RE: System Center Endpoint Protection Thanks, I'm debating whether to rollout the new Kaspersky client or this once we go to ConfigMgr 2012. Kaspersky has had great detection rates for us and I'd hate to go with something that's just okay. From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> [mailto:listsad...@lists.myitforum.com] On Behalf Of Gerlak, Matthew Sent: Wednesday, September 10, 2014 1:37 PM To: 'mssms@lists.myitforum.com' Subject: [mssms] RE: System Center Endpoint Protection Same here it's a lot cheaper and the guys that do our pen test say it's better than the McAfee product we had. One thing I don't like is no way to see active file scans like you can in McAfee but no complaints at all. Love the product and easy of management and rollout. From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> [mailto:listsad...@lists.myitforum.com] On Behalf Of John Aubrey Sent: Wednesday, September 10, 2014 4:26 PM To: 'mssms@lists.myitforum.com' Subject: [mssms] RE: System Center Endpoint Protection We moved 4 years ago and haven't looked back. Works as well if not better than the Symantec. From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> [mailto:listsad...@lists.myitforum.com] On Behalf Of SCOTT Nick D Sent: Wednesday, September 10, 2014 4:24 PM To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com> Subject: [mssms] System Center Endpoint Protection I'm curious what everyone's thoughts are on SCEP. How does it compare with other anti-virus products? I'm curious to see if it's worth implementing and moving away from other anti-virus products. Nick Scott
