We utilize System Center Endpoint Protection to safeguard all desktops on the network with a centralized antivirus, ransomware protection, and toolkit protection system developed by Microsoft. It works from the SCCM admin console and deploys automatically to all systems it can see and manage.
Pros
Easy administration.
Centralized management, patch deployment, and reporting.
Easy auto-patch updating from Microsoft.
Microsoft antivirus app with no special licensing required.
Cons
Some advanced options that 3rd party's have are not available.
Some advanced set customization is difficult from the SCCM console.
Some of the latest Windows 11 security settings are not yet fully integrated into the SCP pages in the SCCM console.
Likelihood to Recommend
If an organization is all Windows-based Active Directory systems, then System Center Endpoint Protection is worth deploying and using. If it's a hybrid of operating systems, then an alternative solution is best.
VU
Verified User
Administrator in Information Technology (201-500 employees)
It is being used across the whole organization. There are managed (for organization/domain computers) and un-managed SCEP clients (for non-organization/domain computers) that are deployed. It addresses the problem of having a good endpoint protection or antivirus/antimalware solution that is easy to use and configure, along with being able to easily deploy. Also, it addresses the problem of having an endpoint protection solution that is good at catching/preventing malware from infecting systems in the organization.
Pros
It is easy to use and configure. This is a benefit, not just for the IT/Admin team, but also for the end-user, as they can easily set how and when to run scans.
It is good a identifying threats and removing these threats. When looking for a product such as this, it is important to really look at these two areas to really see how the software will work in a real-world environment. SCEP is one such product that does really well at both of these things.
Cons
The product could improve in the area of having better mechanisms in place with how the SCEP client is deployed/installed from the server on the management side. We have run into this firsthand with the client not installing on an endpoint, and then having to take the time to investigate why it was not installing.
A second improvement that can be made is to keep trying to improve the products detection rate for finding malware/viruses. The case can be made that there are some products out there that do a better job at this and have a higher detection rate.
Likelihood to Recommend
It is well suited in environments that want a simple AV product/solution that, for the most part, can be easily deployed to client endpoints. It is also good for environments that want something that is easy to use by end-users, and also doesn't use a whole lot of system resources.
It is less suited for environments that want an AV solution that is more robust feature-wise, or has more configurable options for the end-users. It is also less suited for those organizations that want an AV product to have the highest detection rate in the industry.
VU
Verified User
Supervisor in Information Technology (1001-5000 employees)
Microsoft System Center Endpoint Protection was our primary threat protection for many years at our organization. We have recently implemented a NGAV (Next Generation Anti-Virus), but still have SCEP running to help provide an extra layer of protection. This is utilized across all lines of business (except on our Macintosh computers).
Pros
Microsoft System Center Endpoint Protection offers exceptional threat protections for signature-based "known" threats.
The signatures are constantly updated and management of this application is super easy with the use of Microsoft SCCM.
The application is very much a "set it and let it" type of deployment. Once you install it, there are very little configuration or changes that need to be made.
Cons
Not so much a limitation on the software itself, but the fact that is primarily only "signature" based, it cannot detect threats that have mutated.
This software provides virtually no protection against zero-day threats.
The System Center Endpoint Protection does not offer protections based on behavioral analysis.
Likelihood to Recommend
Microsoft System Center Endpoint Protection works very well for the vast majority of threats that exist, especially older threats that like to make a comeback. If you are trying to stop emerging threats or threats that mutate, you would be better served going with a Next-generation Antivirus solution over Microsoft System Center Endpoint Protection.
VU
Verified User
Analyst in Information Technology (1001-5000 employees)