Asus RoG Rocking the WebRoot Secure Anywhere
-
@Nic said in Asus RoG Rocking the WebRoot Secure Anywhere:
@Brains said in Asus RoG Rocking the WebRoot Secure Anywhere:
@scottalanmiller said in Asus RoG Rocking the WebRoot Secure Anywhere:
@Brains said in Asus RoG Rocking the WebRoot Secure Anywhere:
@Nic said in Asus RoG Rocking the WebRoot Secure Anywhere:
@scottalanmiller said in Asus RoG Rocking the WebRoot Secure Anywhere:
@Brains said in Asus RoG Rocking the WebRoot Secure Anywhere:
@scottalanmiller said in Asus RoG Rocking the WebRoot Secure Anywhere:
@Brains said in Asus RoG Rocking the WebRoot Secure Anywhere:
@Breffni-Potter said in Asus RoG Rocking the WebRoot Secure Anywhere:
@Brains said in Asus RoG Rocking the WebRoot Secure Anywhere:
@Nic said in Asus RoG Rocking the WebRoot Secure Anywhere:
re: no internet - Webroot defaults to monitoring any new exe using the local heuristics until it can get back online. That way if it's determined to be malicious it can roll back any changes that new process has made.
seems like a nice compromise on a cloud AV
Oh Webroot is an amazing product. If you are thinking of getting it, do try it out and give it a run for it's money.
Unfortunately we just renewed our horrible Kaspersky since we didnt have time to properly test a new AV in our environment :due to all the major projects we had at the time
Hit of @nic and see what webroot can do to fix that. Don't just assume that all is lost. Webroot might be able to bail you out.
They already spent the $$$ for Kaspersky, they wont replace it until renewal time.
Right, and I'm saying that that is not necessarily a factor. If they are intentionally throwing money and protection away, well nothing is going to help with that. But that they already spent money is not a factor. Not necessarily, anyway.
Or you just wait out the Kaspersky contract and then check us out come renewal time. I mean, it's not like you're on Symantec - Kaspersky is at least decent
Yea thats what im planning, I absolutely hate Kaspersky's management. Exclusions arent even consistent across all of their modules. Mid Sized company = mid sized budget
But why plan for that? Why not fix the problem now if it ends up not costing any money?
I dont understand how it wouldnt cost money to switch to Webroot. IT hours cost - I could probably make it work. IT hours cost + new software cost = unfeasible
Setup's pretty easy with Webroot. You just push out the MSI file, assign computers to policy groups, and away you go. The only real work is checking to make sure none of your custom or rare software is getting blocked or monitored, but support helps you with that. You just look and see what if anything need whitelisting and then put in a ticket.
Still, it's non-zero, so I can understand needing to budget time for any switchover.
Although over a year or two, it might end up lowering costs. And if you are going to make the switch later, it's a spent cost already you are just moving it sooner.
-
@scottalanmiller said in Asus RoG Rocking the WebRoot Secure Anywhere:
@Nic said in Asus RoG Rocking the WebRoot Secure Anywhere:
@Brains said in Asus RoG Rocking the WebRoot Secure Anywhere:
@scottalanmiller said in Asus RoG Rocking the WebRoot Secure Anywhere:
@Brains said in Asus RoG Rocking the WebRoot Secure Anywhere:
@Nic said in Asus RoG Rocking the WebRoot Secure Anywhere:
@scottalanmiller said in Asus RoG Rocking the WebRoot Secure Anywhere:
@Brains said in Asus RoG Rocking the WebRoot Secure Anywhere:
@scottalanmiller said in Asus RoG Rocking the WebRoot Secure Anywhere:
@Brains said in Asus RoG Rocking the WebRoot Secure Anywhere:
@Breffni-Potter said in Asus RoG Rocking the WebRoot Secure Anywhere:
@Brains said in Asus RoG Rocking the WebRoot Secure Anywhere:
@Nic said in Asus RoG Rocking the WebRoot Secure Anywhere:
re: no internet - Webroot defaults to monitoring any new exe using the local heuristics until it can get back online. That way if it's determined to be malicious it can roll back any changes that new process has made.
seems like a nice compromise on a cloud AV
Oh Webroot is an amazing product. If you are thinking of getting it, do try it out and give it a run for it's money.
Unfortunately we just renewed our horrible Kaspersky since we didnt have time to properly test a new AV in our environment :due to all the major projects we had at the time
Hit of @nic and see what webroot can do to fix that. Don't just assume that all is lost. Webroot might be able to bail you out.
They already spent the $$$ for Kaspersky, they wont replace it until renewal time.
Right, and I'm saying that that is not necessarily a factor. If they are intentionally throwing money and protection away, well nothing is going to help with that. But that they already spent money is not a factor. Not necessarily, anyway.
Or you just wait out the Kaspersky contract and then check us out come renewal time. I mean, it's not like you're on Symantec - Kaspersky is at least decent
Yea thats what im planning, I absolutely hate Kaspersky's management. Exclusions arent even consistent across all of their modules. Mid Sized company = mid sized budget
But why plan for that? Why not fix the problem now if it ends up not costing any money?
I dont understand how it wouldnt cost money to switch to Webroot. IT hours cost - I could probably make it work. IT hours cost + new software cost = unfeasible
Setup's pretty easy with Webroot. You just push out the MSI file, assign computers to policy groups, and away you go. The only real work is checking to make sure none of your custom or rare software is getting blocked or monitored, but support helps you with that. You just look and see what if anything need whitelisting and then put in a ticket.
Still, it's non-zero, so I can understand needing to budget time for any switchover.
Although over a year or two, it might end up lowering costs. And if you are going to make the switch later, it's a spent cost already you are just moving it sooner.
True, but you still have some up-front cost in time and money. And if you have other fires to put out and other priorities, I can't fault anyone for leaving a functioning system alone, even if it's not the most efficient at the time.
-
@Nic said in Asus RoG Rocking the WebRoot Secure Anywhere:
We have done contract buyouts before. Let me know if you want to talk to someone here.
wow i completely missed this. Ill speak to the Director.
Nic the funny thing is that I deployed your software to the company this week with a Trial offering to help with the Zepto infection. Took me about an hour or so.
-
@Brains said in Asus RoG Rocking the WebRoot Secure Anywhere:
@Nic said in Asus RoG Rocking the WebRoot Secure Anywhere:
We have done contract buyouts before. Let me know if you want to talk to someone here.
wow i completely missed this. Ill speak to the Director.
Nic the funny thing is that I deployed your software to the company this week with a Trial offering to help with the Zepto infection. Took me about an hour or so.
Nice - hope that took care of it. You can convert the trial code over to live to minimize the work if you do want to switch over.
-
@Nic Thanks Nic. BTW do you have any sources for AV comparisons or detection rates so that I can use them to compare detection rates, etc?
-
Webroot for the win
-
And a MangoLassi win, too!
-
Sure thing - here's some on performance:
http://www.passmark.com/benchmark-reports/index.htmand on efficacy:
https://www.mrg-effitas.com/recent-projects/comissioned-tests/Part of the challenge with our approach is that the traditional AV testing methodologies don't always do a good job of measuring how we work. Some of them are willing to work with us, others aren't and we've just opted to not be included in their tests (looking at you AV Comparatives
) -
@Nic said in Asus RoG Rocking the WebRoot Secure Anywhere:
Sure thing - here's some on performance:
http://www.passmark.com/benchmark-reports/index.htmand on efficacy:
https://www.mrg-effitas.com/recent-projects/comissioned-tests/Part of the challenge with our approach is that the traditional AV testing methodologies don't always do a good job of measuring how we work. Some of them are willing to work with us, others aren't and we've just opted to not be included in their tests (looking at you AV Comparatives
)Thanks!. I noticed you guys were missing from AV comparatives. What part of their testing makes it incompatible with your product?
-
@Brains said in Asus RoG Rocking the WebRoot Secure Anywhere:
@Nic said in Asus RoG Rocking the WebRoot Secure Anywhere:
Sure thing - here's some on performance:
http://www.passmark.com/benchmark-reports/index.htmand on efficacy:
https://www.mrg-effitas.com/recent-projects/comissioned-tests/Part of the challenge with our approach is that the traditional AV testing methodologies don't always do a good job of measuring how we work. Some of them are willing to work with us, others aren't and we've just opted to not be included in their tests (looking at you AV Comparatives
)Thanks!. I noticed you guys were missing from AV comparatives. What part of their testing makes it incompatible with your product?
Most of the traditional testing is based around signature detection. Either a signature is a match or it isn't, using that method. That doesn't take into account our monitoring and rollback technology, which might not initially see a process as malicious, but then later our database/threat researchers make a determination and then can revert changes for a malicious process. The testing field is a bit in flux at the moment with all the newer endpoint protection software that's coming out like us, Cylance, Barkly, etc.
-
I've never liked those AV testing suites. They can't really test what is in the real world, so they can be rather misleading. And when someone is really good, their competitors tend to pay for them not to be included in the tests.
-
@StrongBad said in Asus RoG Rocking the WebRoot Secure Anywhere:
I've never liked those AV testing suites. They can't really test what is in the real world, so they can be rather misleading. And when someone is really good, their competitors tend to pay for them not to be included in the tests.
It's a good point. If the AV testing company knows about it and tests for it, then chances are all the AV suites have seen it too. It's very hard to get a fair "real world" test of true zero day threats. My thought would be a better metric would be a sort of "time to respond" metric for security companies. When a new vulnerability hits the streets, how long does it take for all the security companies to remedy it? That would take a lot of work though.
