Jump to content
RESET Forums (homeservershow.com)
Hanzoy

Antivirus software for Server 2012 Essentials

Recommended Posts

Joe_Miner

I haven't had any luck with System Center Endpoint Protection yet either.

 

I got ForeFront to load following Tinkererguy's instructions HERE

 

Basically:

 

1. set windows update to windows and other microsoft products.

 

2. load (mount): en_forefront_client_security_x86_x64_cd_x13-62435.iso and open it in file explorer

 

3. Highlight the folder CLIENT and open it in file explorer

 

4. Highlight the folder x64 and open it in file explorer

 

5. Execute the file MP_AMBITS.MSI

 

6. You're done and it does update -- I've done it twice on S2012E.

Share this post


Link to post
Share on other sites
Jason

Has anyone tried the Trend Micro trial for WS20122 yet?

Share this post


Link to post
Share on other sites
LoneWolf

Has anyone tried the Trend Micro trial for WS20122 yet?

I have not, but we are switching away from Trend at work for a reason. Its detection rate is okay, but management is lousy, and it can be hard to uninstall, and it's clunky and breaks sometimes. After using both Officescan and Worry-Free Business Security, I've not been impressed, and we're getting our clients off both as their licenses expire.

 

Just an FYI: Symantec Endpoint Protection will run as an unmanaged client just fine on WS2012E. I'd run that any day before Trend; while I don't care for Symantec's home products, the enterprise stuff has a reasonable detection rate and is better designed.

 

There used to be a few AV products designed for WHS inexpensively; perhaps updated versions might be available for WS2012E (I recall Avast! and possibly AVG). If you want non-commercial, you can run ClamWin, but I don't think it does realtime scanning; you may have to create periodic manual scans using Task Scheduler.

Share this post


Link to post
Share on other sites
Jason

Thanks Lonewolf. Which version of SEP supports WS2012E? I tried an early version of SEP 12 and it was incompatible, rendering my WS2012E box unusable. Had to restore from backup.

Share this post


Link to post
Share on other sites
LoneWolf

I can confirm that Small Business Edition v.12 works. Note that this was using the SEP client in unmanaged mode, not the management console, etc.

Share this post


Link to post
Share on other sites
Jason

I can confirm that Small Business Edition v.12 works. Note that this was using the SEP client in unmanaged mode, not the management console, etc.

 

I tried SEP 12.1.2 in unmanaged mode but it interfered with Anywhere Access, particularly VPN. even with the network firewall disabled. back to normal after uninstall. now back to microsoft forefront client.

Share this post


Link to post
Share on other sites
LoneWolf

I have not installed the Network Protection module, just the Antivirus. Note that the network module is not something I would recommend, I'd rather get that protection from other sources. I suggest not even installing it and disabling it, as a custom install can ensure it is never put in.

 

I haven't been working much with the VPN, but Anywhere Access works. The VPN isn't working quite right for me, but I believe that's because my clients aren't domain-joined; I have to do that first and I haven't tried it yet.

Edited by LoneWolf

Share this post


Link to post
Share on other sites
Jason

LoneWolf - great suggestion. I've since reinstalled SEP 12.1.2 without the network protection module. As you mention, I get that protection from my pfsense firewall. Only the antivirus, malware protection and it seems to be working great. In fact, it doesn't require a reboot after install unless enabling the network protection either. I noticed there's another component called proactive threat protection. I disabled that on custom install as well - do you use that?

Share this post


Link to post
Share on other sites
LoneWolf

ProActive protection is heuristic scanning; protection from 0-day threats, things that virus definitions haven't caught up to yet. I honestly don't know how effective Symantec's (or anyone's for that matter) is, and heuristics also have a higher potential for false positives, as they're looking for what the vendor defines as virus-like behavior.

 

I usually hit the middle ground with Symantec: I don't enable the Proactive protection, but I set the AV client to check for updates every six hours (so, four times a day) for the latest definitions, so if a virus hits the AV industry's radar, I'll get definitions for it relatively quickly.

 

EDIT: After doing a little searching out of curiosity, I found that the proactive protection appears to be unsupported on server operating systems; it looks like Symantec may disable it (it is showing as installed but disabled on my WS2012E box). This is according to Wikipedia reference, and the Symantec article it references is a broken link, so I don't know if this has changed.

Edited by LoneWolf

Share this post


Link to post
Share on other sites
tinkererguy

Interesting article:
http://support.microsoft.com/kb/2758685?wa=wsignin1.0

Excerpt below:

Update adds Windows 8 and Windows Server 2012 support to Forefront Endpoint Protection 2010 clients



Article ID: 2758685

 

This article describes an update that adds Microsoft Forefront Endpoint Protection 2010 client support to Windows 8 and Windows Server 2012.

After you install this update, you can install the Forefront Endpoint Protection 2010 client on a computer that is running Windows 8 or Windows Server 2012.

  • Like 1

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now



×
×
  • Create New...