Endpoint Protection Advice

Danp

We ran Vipre for years, but it's effectiveness seemed to suffer when they were sold to GFI. FWIW, we switched to Webroot several years ago and have been satisfied with it.

NerdyDad

They keep drinking the Cisco juice around here. We have Cisco AMP on desktops and servers.

Minion Queen

Another vote for Webroot here.

scottalanmiller

Webroot has been good. We went there after Vipre.

QuixoticJeremy

@scottalanmiller said in Endpoint Protection Advice:

Webroot has been good. We went there after Vipre.

Oh Vipre...

Dashrender

@ndc said in Endpoint Protection Advice:

I am seriously considering adding software white list(s) deployed via GPO to the mix.

Good luck with the pain.

NDC

@dashrender said in Endpoint Protection Advice:

@ndc said in Endpoint Protection Advice:

I am seriously considering adding software white list(s) deployed via GPO to the mix.

Good luck with the pain.

Which pain? Implementation, upkeep? Is it not worth the trouble in your experience?

Dashrender

@ndc said in Endpoint Protection Advice:

@dashrender said in Endpoint Protection Advice:

@ndc said in Endpoint Protection Advice:

I am seriously considering adding software white list(s) deployed via GPO to the mix.

Good luck with the pain.

Which pain? Implementation, upkeep? Is it not worth the trouble in your experience?

Nope, not worth the trouble. Windows has so many things you have to white list it's insane. Also, when things are updated, you have to update the list, because, at least the time I tried it, it used a hash to know what you were allowing, and updated exes have new hashes. If you simply allowed exe's by a specific name to be run, then clever users/hackers could easily bypass your whitelisting by renaming their exes to say chrome.exe - ta da, malware works like a champ.

dbeato

I have deployed Webroot, Malwarebytes, Kaspersky and Avast and out of them Webroot is the most customizable of them all and easier to manage through the Web Dashboard.

wrx7m

I was thinking about deploying applocker as I migrate toe Windows 10 Ent. Is anyone using whiteltisting, successfully? What about 3rd party application?