Webroot here. It has been excellent.

And a lot of people set it to "always do" something bad, then it doesn't ask again.

So the exclusions I've had to add to get everything "functional" are listed below.

File System Shield

C:\Program Files (x86)\Meraki\m_agent_upgrade.exe

C:\Program Files (x86)\Meraki\meraki-ca-bundle.crt

C:\Program Files (x86)\Meraki\ndisscan.exe

C:\Program Files (x86)\Meraki\README-winvnc.txt

C:\Program Files (x86)\Meraki\screenshot-cmd.exe

C:\Program Files (x86)\Meraki\windows-wlan.exe

C:\Program Files (x86)\Meraki\winvnc.exe

Mail Shield

Inbound Mail - Un-check 'Scan inbound mail (POP3, IMAP4)' (UltraVNC)

Web Shield Process Exclusions
The same processes as in File System Shield

What we might do is for our non-servers go with the cloud free platform, and for the servers just purchase the standard business version.

Sure it splits up the monitoring, but at least it gives us the tools we need (for our servers), at a reasonable cost.