Microsoft Defender Antivirus Vs Symantec Endpoint Protection

Question

Microsoft Defender Antivirus Vs Symantec Endpoint Protection

andreas bright 581

Hi,

We are looking into replace Symantec Endpoint Protection with Microsoft Defender and have some questions.

Our environment is as follow

100 servers (Windows Server 2003, 2008 R2, 2012 R2, 2016 and 2019)
100 clients (Windows 7 Ent, Windows 7 Pro, Windows 10 Ent, Windows 10 Pro)
No internet connection, as of today we have one Symantec Endpoint Protection server that has Internet that all the clients get the update from
We have SCCM, and that server has internet access so all clients download update from this

So can we implement MS Defender ?
Are all the windows versions supported ?
How will the clients/servers get virus definitions ? Is it through SCCM ?
Since the environment is onprem only, how about management of the Microsoft Defender ? With MS365 you have a portal to work with, but since this is onprem and no internet connection how is it then managed ?

Thanks for any reply.

/Andy

Accepted answer

0 additional answers

Your answer

Answer 1

Reza-Ameri 17,346 Volunteer Moderator

For Windows 10 and Windows 8.1 devices you could manage Windows Defender which already installed in those versions of Windows and you just have to uninstall Symantec.
You could manage and monitor them using SCCM.
Take a look at:
https://learn.microsoft.com/en-us/mem/configmgr/protect/deploy-use/monitor-endpoint-protection
https://learn.microsoft.com/en-us/mem/configmgr/protect/deploy-use/endpoint-configure-alerts
https://learn.microsoft.com/en-us/mem/configmgr/protect/deploy-use/endpoint-antimalware-policies
https://learn.microsoft.com/en-us/mem/configmgr/core/clients/manage/manage-clients
https://learn.microsoft.com/en-us/mem/configmgr/protect/deploy-use/endpoint-protection-site-role
https://learn.microsoft.com/en-us/mem/configmgr/protect/deploy-use/endpoint-protection-configure-client

andreas bright 581 Reputation points

2021-01-05T16:44:43.317+00:00

Hi,

Thanks for reply.

So we can use SCCM to monitor these, do you have some links to screenshot of how this is monitored ? I did google it, but not sure if I found the right pictures.

We have another customer that uses MS Defender and M365 ATP, I guess these can not be compared ? I must say with M365 ATP and MS Endpoint protection you get very good information, and good overview over what happens if you for example get a ransomware attack etc. Do you have the same visibility with SCCM and MS Endpoint Manager ?

Rgs
Andy
Reza-Ameri 17,346 Reputation points Volunteer Moderator

2021-01-06T17:47:15.563+00:00

Yes, you may use SCCM to monitor them, you may look at the following video:
https://www.youtube.com/watch?v=V7_ehDL9paI
It is a bit old but you will get the idea.
Microsoft 365 ATP is different product and you have additional functionality and it is cloud-based.
For ransomware protection, take a look at:
https://learn.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/controlled-folders

Share via

Microsoft Defender Antivirus Vs Symantec Endpoint Protection

0 additional answers

Your answer