Best enterprise AV....

Since starting work for a new company I look after around 6 clients with ESET NOD32 varying from 10 to 100 clients computers and several servers. My experience has lead us away from it due to all kinds of issues.

Their "Server" products have caused BSOD's on several different servers with different patch levels etc even after setting up as per recommendations from their support and documentation.

Client side issues include the email scanning somehow wiping out email content on random emails which is actually modified on the Exchange server copy, not just a view issue leading to very irate people! It's been known for the Outlook plug-in to cause email to appear in the "sync issues" folder in Outlook for every sent email unless it is disabled.

Also the server side management bits are pretty poorly designed for automated roll-out to client PCs, overall I have had MUCH better results with McAfee and EPo and am therefore going to be moving my clients to something which won't cause them grief as and when the renewals come up.

I used to really like ESET and have used it on my personal computers for years but I definitely wont be using it in businesses anymore.
 
Last edited:
Just a note. Never had a problem with McAfee and EPO is the reason we continue to use it.

Get it setup correctly and you rarely ever have to touch it.
 
We use Microsofts FEP and I can't say I've had any issues with it.

A vote also for Symanted Endpoint, as I've managed that before and it never gave me any issues.
 
We have sophos and nod32 at different clients and I prefer the sophos interface over nod32 but both work ok. I like sophos application control and web control modules, allow for application restrictions and basic web filtering on the dns level and both work well.
 
Previously used Symantec Endpoint v11 with no issues, now upgraded to v12, although we do use Sophos on some of our other clients, but i prefer Symantec :)
 
Last place used MS Forefront, got next to no viruses, current place uses McAffee and a fair bit of malware and Virus get through.

Anecdotal, I know, but I would give MS a try, it is really lightweight (resource wise) compared to McAffee and quick easy updates.

ePO is very useful from an admin point of view, but the actual client and agent on the workstations are a bit crap imo.


rp2000
 
Sophos for me too. Great product and the additional functions like Application Control and Data Control and are really great to use. AD integration is a great asset too. Also use the SharePoint protection too. They also hold some great functions at there HQ in Abingdon.

Our new owners are trying to push us over to Symantec, seems OK but they have had issue rolling it out to us. Good for me as I can keep my Sophos running :)

I use NOD32 at home and find its great home product. Did have Sophos but our new owners stopped us having home installs. So far so good, simple and clean to use on my desktop and laptop.
 
Moved from ESET to Sophos nearly a year ago and wish we hadn't, hasn't been very functional or practical since we had it. We currently manage around 2k clients and the roll out was a nightmare due to the removal program as it had no entries for NOD32 and Sophos helpdesk pretty much gave us no help!

Since the rollout Sophos picks up so many false positives and taken us a lot of time to tune it down to produce anything close to the NOD solution.

AD integration is pretty stupid as it only applies down to computer objects and nothing else, not useful when you manage a lot of computers and need to adjust polices to specific users, user groups would be ideal!!

All in all, NOD32 never missed a beat whilst Sophos has been a right pain so far, not what the sales man said!!
 
We switched from Sophos to Forefront as our MS license is a lot cheaper. The integration into SCCM is nice but it lacks decent reporting.

Straight off the bat I noticed a lot more naughties getting through even though FEP was reporting that they'd been nuked off. I tweaked the policies to be very aggressive which has helped but some were still getting through. I've just finished deploying applocker to our machines and this has dropped the hit rate to practically zero, well worth looking into alongside AV.
 
Just in the process of upgrading one of ours clients from nod32 4 to 5 and i have to say that i realy hate nod32 and i would not recommend it for a second. The software is far more complicated than it needs to be and the update mechanisms does not work. The kb on push issues is like 5 pages. How does this software even get released in its current state, no wonder it is super cheap.
 
probably user error :P

Trying to move servers that is why. I upgraded the current 4 to 5 quite easily but moving the clients to another server is not working as well as upgrading end points from v4 to 5 is problematic so far. Also more problems like the policy does not work. Make changes to it and the client settings do not change. The entire interface is crap imo.
 
Last edited:
I called up their support and they were quite useless.

Basically when you update end points to v5 the new policy does not copy over the old settings so it has a blank server address. So effectively after updating it wipes all the server settings from all the clients. So they can't connect the server and the version details do not update on the server thus the new policy does not take effect. So you add the server detail but the policy won't update because it doesnt know the clients are v5. what a load of crap software. So now i am setting the server settings and reinstalling all the end points to see if that is the correct solution.
 
Back
Top Bottom