Endpoint Protection

Can you please advice me (at minimum cost) which license/products to purchase for my company? The below are the computer system environment.

1. All client desktops, laptops and server are all running Microsoft Windows.

2. Total of 4 client computers and all are running only Windows XP professional and joined ActiveDirectory.

3. Alll those client computers have "already" purchased and installed "Norton Internet Security 2009". So, we can ignore to buy to buy SEP licenses.

4. Only one server (Windows Server 2008 Standard Edition) and it roles are :
 a) file/printer b) ActiveDirectory c) Primary domain controller d) Microsoft SQL 2005 Standard, e) Terminal services f) Microsoft Dynamics AX application

5. This server do not have any antivirus software installed yet.

Planning to get Symantec EndPoint Protection instead of Multi-Tier, since the server is not mail server, it also do not act as proxy server.
Until all client computers' Norton Internet Security expired, we will remove the Norton, and to install the EndPoint client software.

Since the server is running Windows server 2008, only be installed with Symantec Antivirus Corporate Edition (SAV), because SEP cannot run on this server.

If we decided to buy SEP, can we get/download the SAV instead of SEP for this server ?

What is the best cost saving of purchase antivirus license ?

Can we not to buy Multi-Tier Protection licences for this environment ?

Please advisel. Thank you.

1. If you buy SEP you will get only SEP
2. SEP 11 would be the basic one.
3. I think there are more features if you buy Multi-Tier Protection and I am sure they only target a specific number of clients [company workstation size]

On your notes

I think SEP 11 can run on Windows Server 2008

I think its better to talk to Symantec Sales.

Ophs... I should indicate the below for my forum post - instead of stating the Server 2008 incompatible to SEP.

I have an advice from the application consultant, the server is better to run Symantec Antivirus Corporate Edition (SAV), because SEP have some issues which cause their software plug-in execution restricted and also the SEP is very resourceful, which can degrade the server performance a lot.

Is it OK for us to buy SEP (and not Multi-Tier), so Can we download, downgrade and install the SAV instead of SEP for this server ?

Please advise, Thank you.

Hi, yes I think you can buy only SEP, but you have an existing SAV on the Server 2008. But you are correct, SEP is somewhat resource hog with a little help on optimization, tweaking it can still be usable. What services are you running on Server 2008?

You won't need MultiTier, only SEP as Paul said earlier.

Regarding SEP on server 2008 (supported since MR4, which was released in january), it will work fine, but possibly needs some tweaking like scanning only on modification of files i.o. accessing & mod, etc. And by the way, only install AV/AS feature on your servers!

Many thanks for you all advices. I am not sure the details for what services are running in the windows server 2008 standard edition 32-bit. however, i may able to provide the roles and what functions are loaded into this server.
1)  Primary Domain Controller (running ActiveDirectory) --- experience slow down when assign resource permission on clients (win XP)
2)  File and printer server (provide sharing files & printing amongst users (Win XP users)
3)  Terminal Server for remote clients
4)  Application server (Microsoft Dynamics AX - small scale ERP software)
5)  DHCP & DNS
6)  Microsoft SQL 2005 Standard
Please advise. Thank you.

Hi, based on the roles I guess it's ok but you should take note on items 2,3,4,6. check peak times of the server.