Hello,

in the past, there was an integration for an (third-party?) antivirus solution on the roadmap. When i'm right it isn't anymore...not good for windows environment.

Some customers make their decission because of the antivirus-integration in microsoft sccm. With sccm there comes some API with it, what the normal windows defender let be a very good antivirus solution called "SCEP - System Center Endpoint Protection".

I've read and heard, that the scep is not bad in comparison to a payed third party antivirus client, maybe better than the third party vendors in feature, because microsoft knows how to protect their own product, better than the other. Some it-security specialists are talking about a third party av-client which is compromised. In this case the av client becomes a very high security risk, nothing can stop it.

So let's take the windows integrated (zero cost) defender from microsoft and let it manage via ZCM Bundles or Policies. There are some official well documented command lines from microsoft. Would be very helpful if there are policies/bundles for windows defender out of the box in zcm (plan weekly scans, centralized reporting and mail notification, set scan exclusions, load av defintion updates centralized,...)

For ZCM product management: very easy to implement, very good pro-argument for a battlecard against other vendors ;)
For ZCM customers: No costs for clientside antivirus anymore, next step to one-single-pain-of-glass

Comments

  • Maybe something for ZENworks Endpoint Security...

  • From what heared AV integration is being worked on, but I suspect it be a cross platform solution.