We run SEP v11 on our network and I'm finding the default level of protection seems to be allowing a good deal of malware on our systems.

I read a few other threads about people having the same issue with SEP and the suggestion was to lock down SEP tighter.

I'm a noob to SEP, but as far as I can tell I guess the setup is considered "managed". That being said, what do I need to do to tighten down the security on the clients?

I read about there being higher degrees of false positives, but being able to add exceptions (if your security policy allows it).

I want to get these machines setup so we don't have so many issues with malware, so would appreciate any feedback.

Thanks,

C.