Webroot Secureanywhere Endpoint Protection

[pceinc]

There is a pretty heated discussion among Continuum users regarding their recent announcement to drop Vipre and go with Webroot Secureanywhere Endpoint protection. Most of the complaints are due to the lack of timing before we need to adopt the new solution provided at no additional cost, or use what we want at an additional cost. Some are hung up on the Webroot brand and how horrible it is for consumer grade users and don't want to offer something that can be purchased at Best Buy to business clients.

I'm keeping an open mind. Having used Vipre for the past 4 years and maintaining my own Vipre server, I welcome a solution that will truly be cloud based for management. I understand this is not the same Webroot product purchased off the shelf at Best Buy. There are several partners who already use it instead of Vipre and have nothing but great things to say. Then there are some who refuse to use it and have nothing valuable to contribute to the conversation other than slating and abuse.

I also understand GFI has dropped Vipre since it was taken over by Threatrack. I've been using Vipre since it was Sunbelt(before GFI bought it). It does not look good when a product switches owners 3 times in such a short life cycle. I'm fairly happy with the management console and it does have nice features that tailor to our business model. It does not detect everything, but then again, nothing does. It's all about layering security to provide the best protection, and honestly, I rate old fashioned AV lowest on the list. We also use Malwarebytes Pro on all MSP client PC's and it provides better drive by protection of 0-day threats than any conventional AV will.

So fellow Technibblers, are any of you using Webroot Secureanywhere Endpoint Protection in a business environment or MSP model? How long have you been using it? Do you like it?

 

[acscva]

I have been contacted 3 times in the past week by Webroot, Techdata and another vendor trying to get me to look at this Webroot Secure anywhere. I have never heard of it before this week.

 

[Mokester]

I use it. It works great...I like the functionality to roll back a device if something is detected as a threat. REALLY small footprint. The management interface isn't to my liking and it doesn't integrate with the solution I'll be moving to (N-Able) but I'd be hard-pressed to move away from it. Got a couple clients who's kids download all those internet games and steam...Webroot cleans everything up at least once every two weeks. I just hit cleanup from the cloud controller and it's done.

They tend to score low on AV tests...but that's due to the way the software works is my understanding. In reality, I haven't had any issues and it catches things that I've had other AV products miss. Never had to use their tech support but supposedly you can bring them in on a virus case and they will create a script for you to run on the machine (all from cloud controller) to resolve.

The main reason I chose to try them...I forget the company name but it was some large MSP with over 10K endpoints...they chose to use Webroot...so I figured if it was good enough for them, that I could give it a trial run. Might be changing to bit defender as that comes with N-Able but not sure just yet...I have to work out pricing next month with them.

 

[AlexCa]

Afaik, Webroot became a much better product after the acquisition of Prevx in 2010. It's now very popular among many Wilders Security members. Never tried it myself though.

 

[TechPJC]

Footprint is small,
but I wonder how Protection is...

 

[pceinc]

I setup a trial account yesterday. We won't have access to our licensed account until the 18th March so I wanted to get a head start with more than the online demo offered by Webroot. It was easy to setup. The agent installs and runs it's initial scan in less than 5 minutes. Agent shows up in the console quickly too. Just looking through the console I can already see some benefits over Vipre in terms of automating tasks to the agent. I really like that it's managed by a console that I don't have to maintain the infrastructure for. I just finished moving my Vipre console to another VM. I had a lot of issues with this process and was not able to update from v6 to v7 due to a database conversion issue. So I'm facing having to export/import about 50 Vipre policies manually and start a fresh Vipre v7 console on another VM. Each policy has to be manually exported to XML then imported to the new console. PITA!

The nice thing about having this through Continuum is the scripting we will have for installing Webroot and removing Vipre. I used Continuum to install the agents on my office PC's. The process was very smooth. I'll continue to run both Webroot and Vipre for the next few weeks until I can get our permanent licensing from Continuum.

I recall reading somewhere that another RMM uses Webroot. Labtech maybe?

 

[nlinecomputers]

The same people that own GFi, own ThreatTrack. The company was spun off not sold(yet). GFi has been doing that a lot of late. They spun off the GFi Max Remote Managment into LogicNow. They have yet to fully sell off these units but they are certainly packing them up to do so easily.

 

[Mokester]

Yes Labtech support Webroot...I had a demo...wasn't impressed. Just too much clutter for me and for the price, I expect a polished system...not something that feels like a beta. @TechPJC - I also stated how protection was in my experience. IMO it is just as good, if not better than most other products. The fact that it is a small footprint is just icing on the cake.

 

[pceinc]

We plan on running some real test with Webroot tomorrow. We setup a lab to infect a couple of machines on an isolated network. Some other Continuum partners have done the same thing and were impressed with the results.

Anyone know of any sites that will gunk up a PC quickly? I'd really like to see how effective it is against Cryptolocker.

 

[Mokester]

One thing to note about Webroot...I found it works best when it is installed on a clean machine...it's not one of those tools that you drop on, scan, clean and go. I always clean machine, run netstat -ano and check out the IPs listed...once I'm sure its clean, then it's been rock solid. YMMV but perusing the forums when I was first looking into it, I noticed some complaints about it's initial clean up on install.