Microsoft System Center Endpoint Protection

Throughout the day, we are constantly under attack from malware. An email attachment from an unknown source, a hidden file on a flash drive, or a download from a less-than-reputable website can all give your computer malware. Malware – viruses, worms, Trojans, spyware, etc. – makes your computer behave strangely; they can slow down your computer or steal personal information. In the worst cases, they can destroy your precious data and even “brick” your computer. According to IT at Johns Hopkins, “Even careful and conscientious users can have malware on their computers.” So what steps can you take to avoid losing your homework, notes, and other valuable data?

I would wash my hands after using the computer if I were you.
http://www3.pcmag.com/media/images/317665-computer-malware.jpg

In the past, IT @ JH has provided Symantec Endpoint Protection to students as a way to protect against malware, but this has changed recently. Hopkins students are encouraged to uninstall Symantec and download Microsoft System Center Endpoint Protection instead. The links for downloading the proper anti-virus software can be found here. Simply click on the option that applies to you, and when you are prompted, enter your JHED and the password you use for the Portal. I use Windows, so the next steps may or may not apply to you. Once the download is complete, unzip the file and run “SCEPInstall.exe”. The installation wizard should pop up, and will give you other instructions. Make sure to check the box that turns on Windows Firewall if you don’t have a firewall already turned on. Finally, click “Install”, and then “Finish”. At this point System Center will begin its first scan of your computer. This can take a while, so do some homework while it runs.

Or go watch a movie. It takes A WHILE.

Once that is done, you should make sure that Symantec is uninstalled. The Windows version automatically removes prior Symantec, McAfee, and TrendMicro products, as well as Microsoft Forefront Client Security / Endpoint Protection AV agents, but if you are having trouble, or installed System Center for a different OS, you can find help here.

IT @ JH also suggests further steps to protect your computer, such as updating Adobe Acrobat Reader, Adobe Flash, Java, and Microsoft Office. Updates patch up weaknesses that can be exploited by newer forms of malware. You should also consider using a second anti-malware tool, since some threats may get ignored by the first one. There are many options, but my personal favorites are AVG, HitmanPro and MalwareBytes. HitmanPro is unique in that it is specifically geared towards being a “second opinion” anti-malware tool. And according to their website, “If nothing is found (and we sincerely hope so), then you will never need a license. When a virus is found, then you will receive a free 30-day license to remove the threat.” MalwareBytes, on the other hand, is critically acclaimed for its ability to find deeply entrenched malware and remove them for you. However, its free version is not great as a stand-alone anti-virus software, which is where AVG Free excels. Downloading and running it is easy, and two scans are better than one.

Nowhere is safe for viruses now

For the most part, the switch from Symantec to System Center won’t affect your daily life. Both are powerful, fast solutions for endpoint protection. From Microsoft’s website, System Center “protects against both known and unknown threats with a combination of highly accurate signatures and behavioral detection techniques. It has been highly ranked in independent third-party tests, such as those by AV-Comparatives and VirusBulletin, with special distinction for its low false positive rate.” According to Symantec’s data sheet for version 12.1.2, “Endpoint Protection detects more threats then [sic] do products from McAfee®, Trend Micro™ or Microsoft®¹ […][and outperforms] all products in its class in scan speed and total performance impact.²”

System Center was most likely chosen because of its superior support for management of a large enterprise like Johns Hopkins. The System Center website also claims to reduce “IT management and operating costs” by using a single integrated infrastructure. While Symantec may have been a slightly faster and more dependable anti-virus solution, I can understand why the choice was made. Beggars can’t be choosers; I’ll take my free endpoint protection without complaints.

¹AV-Test.org, “Real World Testing.” For Endpoint Protection, August 2012

²Enterprise Endpoint Protection Performance Benchmarks, PassMark Software, August 2012