Endpoint Protection

 View Only
  • 1.  Default Recommendations on installing the SEP client to protect server?

    Posted Sep 08, 2009 10:01 AM
    Hi all,

    I have been scouring the install/admin/client guides to see if there are any recommendations from Symantec on installing the SEP client on a server. I am not asking about installing the manager, but just the SEP client. I am unsure if there would be issues with using the Proactive threat protection and network threat protection, I really am trying to avoid any kind of server slow down.

    Thanks!


  • 2.  RE: Default Recommendations on installing the SEP client to protect server?
    Best Answer

    Posted Sep 08, 2009 10:12 AM
     Well...Security is invesely propotional to performance...
    So if you go for performance --Just Antivirus and Antispyware protection is good.

    If you want more security then go with AV n Aspy and Network Threat Protection--
    here your server will be protected from DDOS attacks and other Malicious attacks using Intrusion prevention system. You may or may not use the firewall..

    If you want ultimate security then only go for Proactive threat Protection(PTP)--coz on the server PTP Scan will be off...the only thing that will work is Application and Device control ( if your server is 32 bit )

    Everybody has there own Best Practise..depending on their requirement more security or performance...

    So now its ur Call..


  • 3.  RE: Default Recommendations on installing the SEP client to protect server?

    Posted Sep 08, 2009 10:14 AM
    on server machines ,

    we have 3 protection tech to install

    Antiviurs and Antispyware
    Procative threat protction
    Network threat protection

    Install just Antiviurs and Antispyware for servers (recomended) 

    Procative threat protction will not work on server OS but will work on XP, so you need not have to install this.

    Network threat protection is the firewall component.. usually none installs this on server OS,


  • 4.  RE: Default Recommendations on installing the SEP client to protect server?

    Posted Sep 08, 2009 10:16 AM
    I think vikram covered all the possible scnarios for your business needs from a server.

    If you want to avoid any slowdowns, then only AV/AS is the best choice.

    Cheers,
    Aniket


  • 5.  RE: Default Recommendations on installing the SEP client to protect server?

    Posted Sep 08, 2009 10:19 AM
    In our organization, we only install the Antivirus/Antispyware component on our servers.  Proactive Threat Protection isn't supported anyway, and I've never never been a fan of software firewalls on a server.


  • 6.  RE: Default Recommendations on installing the SEP client to protect server?

    Posted Sep 08, 2009 10:27 AM
    Thanks a lot, you all provided a lot of helpful information!


  • 7.  RE: Default Recommendations on installing the SEP client to protect server?

    Posted Sep 08, 2009 10:56 AM
    We throw it ALL on, but proactive threat protection won't even run in Server2003 or 2008 so it will show as not running.
    Haven't really noted a performance hit from the firewall - the hit we see is from the A/V protection, so in my calculations, it didn't matter if the firewall was there or not, when the A/V is what slows it down (a bit not a lot)