Trellix Endpoint Security 10.7.0.5149 Multilingual

nikonikoni

What's the diffrence between "McAfee for home" and "Trellix Endpoint Security"

chjs

nikonikoni 发表于 2023-1-30 15:28
What's the diffrence between "McAfee for home" and "Trellix Endpoint Security"

Why do you use English?

The main point is that ENS (ePO) can manage ENS (clients) on the entire LAN, such as hundreds, thousands and tens of thousands of endpoint computers.
And you can implement the rules designed in ePO and send them directly to the endpoint computers. And it can be integrated with Active Directory management.

The home version of anti-virus software focuses on the detection and removal of threats, relatively speaking, false positives are not the main thing to deal with, while the enterprise version focuses on fewer false positives, to reduce the burden on the enterprise IT team, the enterprise can not delete files indiscriminately. The Enterprise Edition is responsible for the entire network.

and the others.
https://www.tworivercomputer.com/endpoint-protection-antivirus/

美国的几个做企业网络安全的软件都是做的大企业网络的，能管理数十万台计算机的网络。真是美国人特色。比如Trellix/Symantec/Cisco/VMware....
具体看这里，最后的总结：
https://www.av-comparatives.org/ ... 22-august-november/

nikonikoni

chjs 发表于 2023-1-30 16:34
Why do you use English?

The main point is that ENS (ePO) can manage ENS (clients) on the entir ...

刚才在老外的那个帖子下面复制的，忘记翻译成中文了
所以说，企业版一般造成的误报会比较少

chjs

nikonikoni 发表于 2023-1-30 17:21
刚才在老外的那个帖子下面复制的，忘记翻译成中文了
所以说，企业版一般造成的误报会比较少

原则上是这样，你去看买咖啡企业版上的介绍。在去看看那些AV测试的企业版。企业对于误报率很重要，针对企业的一些严格的权限控制，其实对普通用户不友好，企业的计算机和服务器才允许几个服务和程序。比如服务器可以防火墙封掉所有端口，然后开几个端口。普通用户这么干太麻烦。企业用户不经常装软件，普通用户可能想装就装，比如你禁止了windows文件夹、系统临时文件夹或者安装程序目录，多不方便。所以使用场景不同。事实上我是倾向于普通用户不需要那么多规则设置，太麻烦，有比较好的默认设置就好，规则对付一些未知漏洞病毒可能有效的，比如勒索软件，设置严格规则，他没法运行或者篡改一些重要文件等。SEP就对普通人比较友好些。

nikonikoni

chjs 发表于 2023-1-30 17:50
原则上是这样，你去看买咖啡企业版上的介绍。在去看看那些AV测试的企业版。企业对于误报率很重要，针对企 ...

原来如此，学到了，感谢您的科普