Skip to main content
Question

macOS Endpoint Protection

  • May 8, 2018
  • 18 replies
  • 97 views

Forum|alt.badge.img+6

We are currently evaluating new Anti-Virus options for our University. We are currently using McAfee with ePO. I have seen other discussions about this subject, but, many seem dated. I am curious about what other enterprise companies and higher ed schools are using for Anti-Virus and why.

Thanks!

18 replies

easyedc
Forum|alt.badge.img+16
  • Esteemed Contributor
  • May 8, 2018

We currently use McAfee and ePO as well. Our decision is based on the fact we deploy it to 65K winPCs so we tack on the Mac versions to keep things reporting to a single pane.


Forum|alt.badge.img+3
  • New Contributor
  • May 8, 2018

Crowdstrike and McAfee.


Forum|alt.badge.img+3
  • New Contributor
  • May 8, 2018

We are using sophos endpoint protection


Forum|alt.badge.img+7
  • Contributor
  • May 8, 2018

We use MalwareBytes Endpoint Protection.


iJake
Forum|alt.badge.img+23
  • Contributor
  • May 8, 2018

A mix of McAfee on ePO and Cisco AMP for Endpoints currently but will be moving whole Mac fleet to Cisco AMP this quarter.


Forum|alt.badge.img+7
  • Contributor
  • May 8, 2018

McAfee Endpoint Protection for both Macs and PCs, and both support sides HATE it.

McAfee Mac support is pretty useless.

Heard Sophos is good.


Forum|alt.badge.img+6
  • Contributor
  • May 9, 2018

We are using Microsoft System Centre Endpoint protection , for both Mac and PC fleet . Only downside is that the Mac (and Linux) client is standalone and isn't manageable by SCCM.


Forum|alt.badge.img+12
  • Contributor
  • May 9, 2018

We use Cisco AMP.


Forum|alt.badge.img+1
  • New Contributor
  • May 9, 2018

We use Sophos endpoint protection.


Forum|alt.badge.img+17
  • Valued Contributor
  • May 9, 2018

Sophos Cloud, before that Sophos local (Cloud was affordable and one less server to maintain), before that Microsoft System Center Endpoint Protection (it missed too much), before that McAfee (some versions were frustratingly buggy, and SCEP was cheaper).

ClamX AV was also used on a case by case basis before AV clients were comprehensively deployed. MalwareBytes was considered and rejected for widespread deployment but is still sometimes used as an alternate cleanup method.


Forum|alt.badge.img+13
  • Valued Contributor
  • May 9, 2018

Microsoft System Center Endpoint Protection here. I wouldn't recommend it as new versions are not released until months after a new OS comes out, and central management leaves something to be desired.


Forum|alt.badge.img+11
  • Valued Contributor
  • May 10, 2018

Palo Alto Traps here


Forum|alt.badge.img+4
  • Contributor
  • May 10, 2018

CB Defense / Cisco Umbrella


afarnsworth
Forum|alt.badge.img+8
  • Contributor
  • May 10, 2018

We use Crowdstrike and haven't looked back


damienbarrett
Forum|alt.badge.img+19
  • Honored Contributor
  • May 10, 2018

We use Sophos Cloud. Was OnPrem years ago, but Cloud became affordable. I've only seen a few issues with it on our fleet.

Pros:
• one It's relatively low CPU overhead
• Clients keep themselves up-to-dates
• three Sophos has been more aggressive (recently) about detecting common Mac malware and Adware (MacKeeper, Geneio, etc.)

Cons
• I want a way to automate the cleanup of a Potentially Unwanted Applications (PUA). The way it's built now, I have to go into the Alerts log in Sophos Cloud and check a box to get Sophos to act on the cleanup
• If you don't stay on top of clearing your Alerts log -- acting on those Alerts -- then it quickly becomes unwieldy. And there are not great controls for sorting by Alert type, or multiple selecting all of one type of Alert (like "select all PUAs").
• Also, with a recent change in Sophos 9.7.x, the end-user can't act on an alert. Quarantine Manager is gone. So it appears that the only users who can trigger Sophos to clean up a PUA or malware is an Administrator of the Sophos Cloud console. Bleh.


Forum|alt.badge.img
  • New Contributor
  • May 11, 2018

Bitdefender have pretty nice Mac integration, but I haven't run it on very many Mac. Good feature set on Windows as well, and can integrate with Windows 10 Advanced Threat Protection, if you're using that for PCs.


Chris_Hafner
Forum|alt.badge.img+27
  • Jamf Heroes
  • May 15, 2018

Cylance here. Works great! I prefer it over Sophos Cloud which is what we were using (Good product!). That said, I'm actually contemplating a real deep look at Malware Bytes, instead. Cylance is some really serious protection, but it, along with many of the major players are focused on non-mac stuff first. The things that get my users are generally silly browser plugins and the like. In my experience, Malware Bytes is a little more, mac centric.


Forum|alt.badge.img+1
  • New Contributor
  • May 15, 2018

Cylance ftw