Microsoft Endpoint Protection 2010 for Mac

[johnnasset]

Our school district recently eliminated Altiris for PC client management and Trend Micro for AV (yay!!). We are using Casper for our Macs and now SCM for the PC's. Trend Micro was a major PITA, especially for the Macs. With our EES agreement, we now have the option to install the MS Endpoint Protection for Mac. Does anybody have any feedback on this AV client as far as deployment with Casper, reliability, system resource impact, etc?

[putnajoe]

I have deployed System Center Endpoint Protection 2012 for Mac using Munki and it deployed smoothly and works well as an AV client. I am assuming that the software deployment in Casper is similiar in concept.

[jrippy]

@putnajoe - do you have any feedback from the client on each machine? I want to push SCEP 2012 SP1 and I see that JamF has an extension attribute for it for a couple of different feedback options but they only have the Windows scripts in place. Does SCEP have a command line interface to get some of this information back to the JSS or at least a log to read and parse?
I know you said you were using munki but even with that, I assume you would script to get this feedback.

Thanks

[putnajoe]

SCEP for the Mac does not offer much in the way of feedback. Microsoft states that there is no remote management for SCEP on Mac. I am hopeful that this will change in the near future.

[mikeh]

I'm not holding my breath for any improvements to SCEP for Mac. There are enough similarities between SCEP and ESET's NOD32 Antivirus for Mac offering that I kind of doubt that Microsoft wrote ANY of SCEP for Mac. Dig deep enough in the SCEP package, you'll find plenty of references to ESET. (Interesting, though, that ESET's package offers remote management. MS must have paid a pittance for access to the code.)

I'd just be happy to find a way to turn off the notifications for all users after installation!

[dooley_do]

Has anyone deployed SCEP 2012 for Mac using casper? I tried using the DMG I got from MS and it reports as being installed in the Casper logs but does not appear to be on the system.

UPDATE Worked this out, just needed to right click the install alias to show the original installer.pkg, imported this directly into casper admin and is now working.