Endpoint Protection

Which antivirus software is better for enterprise protection and client antivirus management. Symantec Endpoint Protection or TrendMicro Antivirus ?

Hi,

to be honest I don't think you will get a totally fair comparison here... of course you can find a lot of complains about our products in this forum because this is the main role of a company forum: listen customers, show the intent to help them and put in communication the community around our products.

Our Endpoint Protection 11.0, like any other big software, is not perferct  but it is becoming rapidly better and better and it is extremly scalable and flexible (it is very reach of options and features in fact, to meet the small companies requirements, we released the simplified version 12 dedicated for this market).

You can try SEP 11 with the trial version in a test environment and be aware that you CAN'T upgrade it to the full version, therefore don't use it in your production machines.

You could not get all the good points in one product but as for me SEP 11 might not be perfect but it is getting there. What also rocks is the open talk we have in the forum about how to make things done.

The product is good, after service is better but this forum is the best.
We try to help each other employees and clients alike.

I am not a Symantec Employee but a client using SEPMv11 so I could fairly say that as long as they provide us with good after service then there is no need to jump ship.

Just my thoughts. 

Nel Ramos

There are some good websites out there that test AV products.

Virus Bulletin is one that  I use.
http://www.virusbtn.com/index

Look at the historical test results for both products and you be the judge.
There are few AV products that perform as well as Symantec.

Cheers,

Thomas

i think SEP rocks,except for the few flaws.

even those few flaws are soon gonna disappear.

Whell, as a Symantec consultor, I can say that is a tone of people migratin from Trend and McAfee to SEP, not just becousa AV functions, but the application and Device Controll.

Avery day I see them learning and using funcions like Firewall to free their appliences from block or allow websites and use just for security.

I don't think that SEP will fix all problems becouse every time you fix something, other think that was hidden will be showed.

I'd like to suggest you consider discussing possible "feature sets" or "functionality" that you prefer with SEP vs. a competitor - it will keep the dialog focused and provide useful information to users who may be interested in 1 feature vs. another.

Thank you for your support!

Eric

We have the ServerProtect for the servers and the Symantec Antivirus(To SEP very soon) for the clients.


1) We prefer a mixed environment for the eggs and basket rule.
2) The notifications with Trend is as good as with SEP.
3) The logs are also good and give detailed information about the action taken.
4) There is no GUI for the server, Just the StoPP.exe as a process and does not consume much CPU
5) It has the AV and IPS, No firewall, No other feature, So we prefer it for the servers and not the workstations.
6) Web console for trend is as good as for SEP
7) The hierarchy for Trend is that the Information Server distributes the pattern file for the regional Normal Servers. You can also update the pattern with the built in tool in case it does not get updated automatically.
8) Vendor(Trend) is also competetive enough and web support for the cases is good as well. There is very less email communication and more of the web exchange at the portal.
9) Symantec has excellent support, Much better than any other vendor. Luckily we have very knowledgeable TAM's for both the technologies.
10) Patch deplyment with Trend can take a while and requires reboot often, That has to be scheduled.
11) The tasks can also be scheduled with trend like distributing the pattern, collecting the logs...
12) Often Trend has released the definitions quicker than Symantec after we submitted the sample and the reverse way around for Symantec is also true. We have a script that maps the remote machines drives for a full scan in these situations.
 13) The AV parent servers have the Auto Proect off on them with no scheduled scan and Trend is running on them.
14) We have SAV on the x64 exchange boxes as some issue was found with the service and Trend during the QA long time back. I am not sure what the real reason is. These servers get updated by LUA as 64 bit machines cant be updated by the parent servers.


 

I prefer everytime tecnical help support. When i buy something i ask to myself if it will be "out of order" who can help me? symantec is very big company and as you well know very much person write in here about tecnical problems as soon as posible. this is the first thing for me.
sometimes you buy programme or another thing after that you can find no one for ask a question. Thats why I love this forum. ı can search or write people who knows my problem.
we have more than 1000 computers and 30 servers. yes i have problems too. but i am working for fix them. I love report console. I can take schuled reporst from server . thats why i can know what's happening in background. ( ı have reports problem already and write it in forum)
you can choice SEP because Help is important.

I'm a consultant and Symantec partner (infer bias as you will)

My opinion is that SEP gives you the best feature set out there. 

Up until MR3 there were enough issues that it was a toss up as what I would recommend.  MR3 fixed enough issues that I don't recommend anything else now.  You won't find another company that provides the proactive, rootkit removal, IPS, and app/device control.  The firewall is as good as I've seen out there (client firewalls are almost a commodity by now though) and the AV/AS as good as any.

If you are going off old reviews or someone who installed the SEP RTM release (THAT sure was fun), ignore them. Reviews in the last 6-8 months or so are the only ones worth listening to.

I love the presentation out there correlating IPS def increases to AV incident decreases.  They can basically show that the increase IPS incidents (due to an IPS def update) directly correlates to a drop in AV incidents over their customer base.  That type of protection (and being able to back it up with numbers) is huge.  This is where client protection software is going.  Trying to craft a just-in-time def signature for EVERY polymorphic, compressed, encrypted variant out there is a losing strategy.  Symantec gets this, that's why you see all the 'other' technology, not just plain AV in SEP.

There are still some thing I'd like to see improved, but I find myself nit-picking at this point, rather than discussing major feature enhancements or revisions.

Another factor we can consider is the familiarity, popularity and ui of the product. For me i have been very familiar with Symantec Products so we didnt change ever since.

It won't be fair enough to compare between TrendMicro and Symantec. Bot of them are leading in the market shares. Trendmicro's OfficeScan Corporate edition 10 has come up with the Smart Protection Network which is really good and non other has this feature. But again Symantec has got good inbuilt firewall as well as several policies can configured for the better protection.

You will be right person to judge it becuase ultimately you will be using it.

Last but not the Lease Symantec Tech Support is the best.

Ajit

We use Kaspersky Business Space Security and we're very happy, excelllent virus detection ratio, easy deployment over our domain, and very good administration console. I also worked with Symantec Endpoint and Eset (Nod32) products and they are good products also.

Look for an integral solution, that at least have antivirus, antispyware, mail protection and firewall.

Avoid CA Antivirus, former eTrust.

Well, I know I am answering to an old thread, but I have to say SEP is one of the worst products I ever saw. In our corporation it produced more damage than all the malware I saw in my life.

I work in IT for 15 years now and I have a long experience in the security segment. The product idea is good: Antivirus, Anti-malware and Firewall in a single product is a nice i+dea, but SEP is a resource hog, pretty bogus and flawed from design. It loads itself even in safe mode, so when it fails (and it happens, often) you are not able even to boot in safe mode, go figure... So, to recover some unusable computers, I had to boot them, leave SEP to hung the Windows UI, and then kill the services and wipe the product folders (different folders, thousand of files and more than 5000 registry keys) over the network to recover the PC without reinstalling Windows, gross....It usually happens after the product detects a virus/worm/whatever and hangs violently.
For the corporate admins it may attract for its policy system, but SEP Manager is another beast which uses Java, Apache Tomcat and MS IIS making inefficient use of all of them, an authentic Frankie. Complexities do not scare me, but bloat does and Symantec has a long way producing bloated software.

Unfortunately we have to survive with SEP by now, but it is a nightmare for the support team, almost worldwide, but if you can choose, avoid Symantec by all means....

Just my opinion...

-SEP is far from resource hog. Might be the most "lightest" complete security solution for workstations/laptops/servers in market at the moment.

-Have seen plenty of damage done with SEP.

For example, have seen more than few places where some "worked all my life on IT business" had configured SEP without firewall protection, end-customer thinking that "-yea now we have a great FW solution, everything works just fine, just fine!"

-Have seen problems with SEP, earliest versions was crab and everyone knows that. Yea, some damage done in past for reputation, but if there's nothing to fix, it would be just very boring:) Still some problems with SEP, but honestly, show me the competitor which doesn't have problems.

-SEP, quite easy to get started with it, quite easy to configure, but still very flexible. Thousands of computers, tens of networks, https from internet, easy to upgrade and deploy... show me competitor doing same things with only one Management server?

-AV/AS/FW/IPS/Application control/NAC.... All in one client? Yes, with SEP. Might be something to point out when having problems/bugs, is there too much in one client?


I know that this might sound like bullshit and marketing speak, but no it's not. I've been some kind of specialist with Trend Micro's OfficeScan and that antique ServerProtect, have worked with Mcafee and F-secure, so i do know little about what I'm talking.
My main area and focus on IT is securing data, have been for some years. I know something about today's security area, what are difficulties and solutions and so on.

Still, you need to find out what is the best product for your use and only you will make that last decision. Sometimes it's price, sometimes marketing people's words, sometimes what you have read from internet...