Symantec, tired of you!
Today is an important day for me, my company just bought the license for Kaspersky. We tested massively Kaspersky and I can assure everyone that a product is much, much higher than the SEP. I feel happy to know that I will not have to wait for the MP99 for simple bug fixes.What will not need to worry about the bandwidth, or for vaccines, either for upgrades. That will not have to worry about moving clients from one group to another manually, because Kaspersky does this automatically based on subnet. What can I create installation tasks on a scheduled basis, always respecting the bandwidth of my slow link. And of course, will not need to uninstall the SEP because Kaspersky does this automatically. In short, we are a global company with 22,500 endpoints, with more than 80 remote sites and 500 servers, which are simply abandoned by Symantec does offer a product with a minimum quality. Symantec, tired of you! Goodbye Symantec!
PS: I hope that does not erase this post.
Hope those left ...
Comments
Hi Vortec, Thank you posting
Hi Vortec,
Thank you posting your opinion on the Symantec Forums.
I would like to know what version of the SEP product were you using. I see that your previous post in the forums was about 19 weeks ago.
Please let us know about your experience while using the product.
Did you contact tech support if you were having any issues?
Aniket
Most of the people I run into
Most of the people I run into complaining about SEP, have it configured wrong. I bet in your case, you are no different.
Anyone assuming that the default policies are sufficient are in for a very frustrating experience. And the "high security," policy is worthless in its current RU5 iteration. Anyone that thinks they dont need NTP, or application blocking, good luck. SEP was created in 2007, before many of the current threats existed, and the default policies are severely lacking. I hear RU6 will change this with effective policies that are truly more aggressive and applicable to today's threats. But time will tell...
Frankly, SEP is very complex, and often even support doesnt have all the recommended settings down (it's not their job anyways IMO, they fix, not offer security hardening services). More than 80% of the complaints I run into and fix, are all configuration issues.
I'm glad you found a product that works for you, SEP is not for everybody. It takes time to tweak, tune, and setup. Kaspersky, McAfee, etc are no different. Where Kaspersky may excel in limited testing, their own flaws will come to light soon enough on a deployment such as yours. Such is life in a large deployment with any product. Flaws only get amplified over time...
BTW, SEP uninstalls competitor products too, this is not a unique feature to Kaspersky, all the vendors do it. auto-assigning to groups could have been done too, via some initial steps, and bandwidth controlled with the Altiris integration component.. But of course you knew this and I guess it wasnt enough and Kaspersky did it better.
There is an online portal, save yourself the long hold times. Create ticket online, then call in with ticket # in hand :-) http://mysupport.symantec.com "We backup data to restore, we don't backup data just to back it up."
We use RU5, when I contacted
We use RU5, when I contacted the support team of Symantec always answered, that does not change the fact that the product is bad. We work with Symantec products for over 12 years, I think that is over the field of anvitvírus. Although we use the netbackup v6.5 but this is an excellent product.
I can guarantee that we use ALL the features of the SEP, optimizations were made continuously and are still missing a number of features. I know the method of uninstalling the SEP competitors, used for two years and I sucked! Kaspersky and Panda is even much better, and just works with minimal effort. How to control the bandwidth, only in 2009 it was inserted in the GUP and only for updates and not to upgrade, other manufacturers do this forever. I accept that deny the need to use the SEP in conjunction with Altiris to be able to control something so simple.
That sounds good and all
That sounds good and all unless you can't use all the parts of the software becuase that is what is causing the issues. I too have found a lot of issues with using the software both with the out of the box configuration and with changes being made.
About 3% of our machines suffer from the constant popups off and on about threats being found when while nobody was logged in. might might every day for a week straight then nothing for about a month then it comes back. We have some machines that the can't run the application control as it automatically blocks certain programs that we need to run and will not let us unblock them no matter what is done. So that is a feature that we can't utilize. I have some computers that like to go crazy trying to install updates and bring the machine to its knees for awhile after installing the newest virus definitions. About once a month or two the software decides that the new virus definitions are actually a virus and will have about 15 - 20 detections on every machine and quaretine the definitions it just installed. I didn't find NTP useable for anything before RU5.
I will say that RU 5 is much better than the eariler builds, but it still has a lot of issues in my opinion. Hoping the next release fixes a lot of issues that i see, other i might be looking for a different program also in the future.
I don't think I should have to spend months or years configuring the software for it to work. Out of the box all features should just work together and not kill my computers. Sure i should need to adjust the level of protection for it to the best possible job protecting the network. But it should be usable out of the box. I shouldn't have to keep uninstaling and reinstalling with less and less features to find the combination that will cause the least amount of disruption.
All i can say is that I know where the orginal poster is coming from in his frustration.
Auto-Assigning groups
BTW, SEP uninstalls competitor products too, this is not a unique feature to Kaspersky, all the vendors do it. auto-assigning to groups could have been done too, via some initial steps, and bandwidth controlled with the Altiris integration component.. But of course you knew this and I guess it wasnt enough and Kaspersky did it better.
- Can you tell me more about how he could have gone about auto assigning groups, I mean other than via ADS. Would help me for sure.
------------------------------------------------------------
MR99 will fix it all.
I guess you gave up too
I guess you gave up too early..I don't think there isn't a workaround/solution for any issue in SEP however sooner or later you will find that kaspersky as a products might be similar..but when support is required they cannot match the support provided by symantec ( including forums )
VMWARE-- SEP 12.1 vs McAfee vs Trend Micro
We tested the Kaspersky in
We tested the Kaspersky in more than 3,000 endpoints for more than a year on a trial basis, we had 10% of the problems presented by the SEP we use since 2007. The product was extremely stable, not to mention the rate of detection of threats much, much higher than the SEP.
I just asked on another post
I just asked on another post if Symantec has webinars to show examples of good practices and how-to configurations for all the features. Because I'm just starting to phase into deploying SEP to replace SAVCE clients. And it's pretty much out-of-the box. The only configuration I did was similar to what was done with our SAVCE - and that was to lock-down the interface to prevent users from making changes.
I'm using the Antivirus, Antispyware and TruScan Proactive Threat Scan installed features. I'm not using the Network Threat Protection installed feature or policy, nor the application blocking. Should I have these installed, configured, and running? I know we all have diverse environments, but frankly I don't understand the many complex settings in NTP, for example. On this forum we know it would certainly take time to test all of our applications to see if NTP or application blocking would break them. And guess what, I'm swamped with having to do more with less time and people.
Does Symantec have webinars to show examples of good practices and how-to configurations for all the features?
https://www-secure.symantec.c
Symantec is having a webnair on how to stop FakeAVs on April 8th.
https://www-secure.symantec.com/connect/events/usi...
Mike
I do agree with you that
I do agree with you that there were lots of issue with SEP when it was initially released in 2007 but I do feel & I think even you will agree that the product has become stable compare to what it was in 2007. And I am sure that are next releases will make it much more stable and reliable. Just compare the false positive chart for Symantec and any competitor you will understand why Symantec is one of the leaders in Antivirus.
Would you like to reply?
Login or Register to post your comment.