Recommended Antivirus Solutions

Discontinuing Kaspersky Antivirus

  • Both campus feedback and the Antivirus Service team have recommended discontinuing Kaspersky antivirus when the three-year renewal expires on February 28, 2017.
  • OIT was unable to negotiate a one-year license agreement to provide campus with more time to facilitate a smooth transition.
  • The antivirus protection currently provided by the operating system vendors has improved, while the endpoint threat model has evolved.
  • The AV Service team met on Nov. 29, 2016, and recommended using MS Endpoint Protection for Windows and that better alternatives for Mac devices be explored.  MS Endpoint Protection will be used as a temporary solution for Mac devices.  
  • A final decision to move forward was made during the week of December 5, 2016. 

Microsoft Endpoint Protection License Overview

  • Microsoft Endpoint Protection is licensed under the university’s CAL EES with Software Assurance, so all of the following university-owned devices are covered:
    • Devices with Windows 7, 8, 8.1, and 10
    • Devices with macOS 10.7 through 10.12,
    • Devices with Red Hat Enterprise Linux 5, 6, 7; SUSE Linux Enterprise 10, 11, 12; CentOS 5, 6, 7; Debian Linux 5, 6, 7; Ubuntu Linux 10.04 –  14.04; Oracle Linux 5, 6, 7.  Please note that this client has not yet been tested.
    • Servers with Windows Server 2008, 2008R2, 2012, 2012R2, and 2016.
  • Going forward, the university will not be providing licenses for any personally-owned devices. See Recommendations for Personally-Owned Devices (below).

Recommendations for University-owned Devices

Windows Devices

  • Microsoft recommends upgrading older versions of the Windows operating system to version 10.
  • Windows devices (versions 7 through 10) that are joined to Wolftech Active Directory (AD) should use MS Endpoint Protection available via SCCM.
  • For Windows devices not joined to the Wolftech AD, OIT recommends using the standalone MS Endpoint Protection client.
    • The MS Endpoint Protection Agent will need to be manually installed and will receive updates and definitions via Windows Update.
    • The installers are available for download via the software.ncsu.edu website.

Macintosh Devices

  • Macintosh devices may use MS Endpoint Protection available via Jamf Pro (formerly Casper Suite). An investigation of other alternative solutions will take place at a later time. 
  • OIT recommends Apple iOS and macOS devices be enrolled in Jamf Pro.
  • For macOS devices not enrolled in Jamf Pro, OIT currently recommends using the standalone MS Endpoint Protection client.
  • The MS Endpoint Protection Agent will need to be manually installed and will receive updates through the application.
  • The installers are available for download via the software.ncsu.edu website.

Linux Devices

An endpoint protection solution for the Linux devices will be investigated at a later time.  Linux devices were not utilizing Kaspersky antivirus.

Recommendations for Personally-owned Devices

  • Campus users should uninstall all copies of the free personal version of Kaspersky Internet Security that they acquired through the NC State software licensing site.
  • Updated antivirus definitions for this version may not be available after Feb 28.
  • As a replacement for Kaspersky, NC State recommends using either of the following: