Forefront Endpoint Security?

C

CiscoInside

Gawd
Joined
Mar 26, 2010
Messages
546
Thoughts on this for PCs as well as on servers? Is the protection offered from this product up there with MSE?

Thanks
 
From the looks of it, at least from what I have seen so far its more of a centralized solution for a network, where as MSE is standalone clients on each machine.
 
Yea it appears to install an endpoint client on each pc, talking with the console server. I am not to sure, I just started reading up on this as I wanted to play around. I am more used to Vipre Enterprise where you have a console, then the clients are installed on the PCs and report back. Apparently Endpoint is built on the same engine as MSC, so I wanted to give it a whirl.
 
So you can get alerts from the clients and the clients get updates fron that server like wsus?
 
Assuming so, I am installing it right now on a test server to play with it. I will keep you updated.
 
Forefront Endpoint Security is a Virus/Malware protection application for Servers and Workstations. It integrates into WSUS. There is a management tool. As far as I know though it doesn't offer a port 80 filter which is something I like having.
 
FEP is the enterprise version of MSE. It uses the exact same antimalware engine. It's management is handled by an SCCM (system center configuration manager) extension. Updates are handled via wsus (which SCCM is highly hooked into) / microsoft update / smb fileshare. You can specify the fallback order. So if for some reason your wsus server is down it will goto microsoft update instead, and then if for some reason you dont have internet but have intranet it will use the fileshare. There are various reports with fancy graphs and what not. There are also alerts for things like: computer gets infected, computer encounters many infections, and many infections of the same kind on the network. All of these can have different severities that you can set. You wouldnt really want to be emailed when a computer runs into something it instantly cleaned. It is substantially better than the first version FCS.

Something to keep in mind is that SCCM is no joke. It takes a good deal of time to get running and is very complex. It is the backbone to a good number of extremely large corporations. So for very small shops who do not use an enterprise level management tool there is an extremely large learning curve ahead. A good analogy to the gaming world is the learning curve for eve online.

This is not a new version of ISA server. that would be Forefront Threat Management 2010. I have not used that product but I hear its decent. The exchange and sharepoint hookins (forefront protection 2010 for <product>) are very good though.
 
Last edited:
blue fox runs this :) I tried it and i was kinda lost LOL! still have it installed, just not using it.
 
I am going to work on it today. Cleaning up the lab, maybe mounting my 1131 finally, and working on this. I was at the step of install SQL until I realized, I should have this installed on my file server instead. So I will play with it.
 
CiscoInside said:
I am going to work on it today. Cleaning up the lab, maybe mounting my 1131 finally, and working on this. I was at the step of install SQL until I realized, I should have this installed on my file server instead. So I will play with it.
Click to expand...

You're putting SCCM and SQL on your file server?
 
this will work, just make sure the sccm server computer account has local admin access to the fileserver.
 
You must log in or register to reply here.
Back
Top