locked
Recommended Antivirus for 2012 Server Essentials? RRS feed

  • Question

  • I'm a IT professional who is evaluating Server 2012 at work, but also have installed Server 2012 Essentials at home to run my 2 workstation home network.  Probably a bit of overkill for a small home network, but my Windows Home Server (WHS) 2011 appliance (HP MediaSmart 470) recently stopped working and since Microsoft has decided to stop further development, I decided to give 2012 Essentials a try at home.  For those of you unfamiliar with WHS, it was basically Windows Server 2003 with a pretty front end - really a fantastic product, but never caught on with the mainstream.  It was a great backup solution - I'm hoping 2012 Essentials is the logical migration path - so far, I've found it fairly easy to use.

    AntiVirus provider Avast created an inexpensive antivirus product for Windows Home Server, but many thought it was unecessary given that since it's only use was as a media / backup server (no web surfing), that antivirus wasn't needed.  Given that Essentials 2012 appears to be the logical transistion for people like me moving from WHS, I'm interested in an expensive antivirus product for this server only.  I know that Microsoft offers System Center 2012 Endpoint Protection, but that's total overkill for my simple needs.  My 2 workstations are running anti-virus already - I just need basic protection (other than the built-in firewall) for the server.  Because I might use it to surf the web for a few things, I think it's necessary.

    I've spent several hours researching this and haven't come up with much.  Sophos has a version for 2012, but it's more of an enterprise product - and priced that way.  Norton, AVG, McAfee - none of these offer a compatible product (yet).  And Windows Defender isn't supported on Essentials 2012.

    Any ideas?  There are several threads already in this forum, but my question / need is limited to a simple home user - not a small business.  I would guess that in less than a year, there will be lots of other home users like me trying to figure this out.....

     
    Friday, December 7, 2012 3:14 PM

All replies

  • Hi:

    What is "inexpensive".  iirc, Trend without email is about $25/yr per station, minimum 2.

    http://www.trendmicro.com/cloud-content/us/pdfs/business/sb_wfbss-windows-server-2012-essentials.pdf

    But, you could, in a non-commercial or micro business, install WSE on the stations and be very careful about what you save to the WSE.


    Larry Struckmeyer[SBS-MVP]

    Saturday, December 8, 2012 2:00 AM
  • I'm told by AVG tech support that AVG 2013 Home will cover Windows Essentials.

    I'm currently running Windows Server 2013 in 180 day trial and had purchased AVG Business Internet version...........performed well until a Microsoft Windows update about two weeks ago.  Getting a refund but they are trying to get me to use the 2013 beta version. Official release in January 2013.

    I too am shopping for another solution.  Have read/heard that Microtrend will work for an affordable solution.

    Saturday, December 8, 2012 10:25 AM
  • I'm using Kapsersky Small office atm. Only £70 per year.
    Saturday, December 8, 2012 12:41 PM
  • I would define inexpensive as anything under $60 - its not that I mind paying, but since traditionally vendors price software much differently between home and business users, I was hoping to find a solution that was more geared / priced for home users.  Windows Server 2012 Essentials is, after all, designed for small business and hasn't actively marketed to the home user (yet).  Most server based packages begin above $200 (at least they do for the servers I manage professionally at work).

    This TrendMicro solution is interesting, but hard to figure out exactly what it is given that it seems to be cloud based, given the description says

    " The management interface is accessed via the Windows Server 2012 Essentials dashboard, even though management components and software are stored in the cloud. Because the security server is cloud-based, you have an advantage over traditional security software for businesses. You retain all of the control and visibility of a traditional solution but without the burden of server software locally installed. This can free up hard drive space, RAM, and processor utilization, as well as offloading the tasks of patch management, software upgrades, and virus database management. All of these are handled 24x7 by Trend Micro experts in secure Trend Micro data centers. "

    Will research this a bit more, but there is a reason I went to the expense of having a home based server for backup / media - I wanted on-premise products and backup (mostly backup).  Similarly, I want an on-premise security solution.

    Saturday, December 8, 2012 12:41 PM
  • Hi:

    What is "inexpensive".  iirc, Trend without email is about $25/yr per station, minimum 2.

    http://www.trendmicro.com/cloud-content/us/pdfs/business/sb_wfbss-windows-server-2012-essentials.pdf

    But, you could, in a non-commercial or micro business, install WSE on the stations and be very careful about what you save to the WSE.


    Larry Struckmeyer[SBS-MVP]

    Trend probably isn't expensive, but I've had very lackluster experiences with it.  It's middle-grade for detection, and management can be ugly.

    AVG is okay; I've never had the installation/uninstallation issues with it that I've had with products like Trend "Worry Free" Business Security or OfficeScan, so if the 2013 version is compatible, I'd check it out.  I'd probably see if Avast! has a low-cost product as well, I've found its protection and scanning speed to be better than AVGs recent products, and I know they actively marketed a product for Windows Home Server use, so it may be they'll have something similar for Essentials.

    You can probably use ClamWin for free, but it isn't the best solution (some of its proactive capabilities are limited), so it really depends on how picky you are.  I also know that Symantec Endpoint Protection for Small Business works (and quite well) but I doubt it meets your definition of inexpensive.

    Side note: Seeing as Microsoft is targeting Server 2012 Essentials at home enthusiasts, not just businesses, it's a shame they couldn't find a way to allow Security Essentials as an option just for this version.


    Everyone gets everything he wants. Me, I wanted to be a sysadmin. And for my sins --they made me one.



    • Edited by LoneWolf15 Saturday, December 8, 2012 3:29 PM
    Saturday, December 8, 2012 3:24 PM
  • I have been using the Clam Win free edition for some time, works well for me.

    Steve Teters

    Monday, December 10, 2012 9:03 PM
  • Just an update - still unsuccessful finding a product, but I did get a real person from AVG on the phone who confidently explained that FULL Server 2012 support is coming in their AVG Business Edition Server 2013, which is due out in mid January.  He also said that I could get a copy now by joining their beta testing program at www dot beta dot avg dot com (for some reason, I can't post URLS).  Haven't tried it yet, but plan to.
    • Proposed as answer by PhillipGvvv Saturday, December 29, 2012 8:37 PM
    Wednesday, December 12, 2012 10:50 AM
  • Pretty much anything that offers full support for Windows Server 2012 will likely work. Note that there is a difference between anecdotal evidence that something "works on this OS." and the publisher stating "This product supports this operating system."

    It's possible that, at some point, you will see business-oriented AV products that claim full support for WSE. They will likely cost more than a home user is willing to pay, but WSE itself is too expensive for most home users.


    I'm not on the WHS team, I just post a lot. :)

    Friday, December 14, 2012 3:51 PM
  • The AVG Business Version is around 120 dollars for first year for their best version.

    I think renewal rat for second year is around 80-90 Dollars. So relatively expensive.

    Phil H

    Charlotte, NC

    Saturday, December 29, 2012 8:38 PM
  • The current version doesn't support it - you have to join their beta program (https://secure.avg.com/us-en/avg-beta) and download the "2013 Email Server Edition" - which is working great.  Have no idea how much it will cost when the GA is released....

    Matt McL. (HGPILOT)

    Sunday, December 30, 2012 1:29 PM
  • Hi Matt, 

    I'm in the same boat as you. I did join the program but I don't see where to download the 2013 Email Server Edition. Is it closed now? I do see something called AVG for Server 64 bit, but not the one you specified. Thanks,


    Friday, January 4, 2013 7:19 PM
  • I actually downloaded "AVG Business Products Beta" - when I fired it up, it says AVG EMAIL SERVER EDITION at the top. 

    Matt McL. (HGPILOT)

    Monday, January 7, 2013 3:05 AM
  • Clamwin for me....I am looking at migrating from WHS v.1 too and so need something 'affordable'....which free is!
    Friday, January 11, 2013 1:46 PM
  • I purchased Symantec Endpoint. The Endpoint Small Business Edition installs on Windows 2012 Essentials. However it caused problems for me. The main one is that the backup now fails in Windows Server. Supposedly this is due to a Symantec file not allowing access to the backup process. Symantec also has a cloud version of Endpoint, which allows you to manage Endpoint clients without installing any management console, but the cloud agent will not install on Windows 2012, so it is not supported.


    • Edited by Player9 Monday, January 14, 2013 4:23 PM
    Monday, January 14, 2013 4:23 PM
  • I have Forefront Client Security successfully running on Windows 2012 Essentials and if you can get the ISO through MSDN, it's a great product for exactly the scenario you describe - one server with workstations already protected by another product.....

    Installing forefront Client Security Standalone Client on Windows Server 2012 Essentials

    Summary of process: Get the en_forefront_client_security_x86_x64_cd_x13-62435.iso file and download to your computer. Go to server manager - Add Features - install .net 3.5 support - restart server - then proceed below from a cmd prompt as the adminsitrator using the nomom switch.


    Deploying Client Security

    The client components of Client Security consist of a Client Security agent and a MOM agent. The Client Security agent scans for vulnerabilities and malware. The MOM agent collects the data, which is then used to generate reports for Client Security. To deploy both agents, use the following procedure. We do not need agents on a single machine - my clients are Win8 so Defender runs on them by default.......

    To directly deploy the Client Security component on a single server - (the client) 
    1. Log on to the Windwos 2012 Essentials Server by using local administrator permissions - (you may have to re-enable this account).
    2. Insert the Client Security CD or mount the en_forefront_client_security_x86_x64_cd_x13-62435.iso by right-clicking on the file as ISO's can be mounted from the Explorer context menu.....nice.
    3. Open a Command Prompt window as Admin.
    4. Since W2012SE is 64-bit, type <cd drive>or <mounted iso drive letter>:\Client\x64 then <Enter>
    5. Type ClientSetup.exe /NOMOM in which the /NOMOM flag installs everything except the MOM agent then <Enter>.
    6. When the tool finishes running, close the Command Prompt window.

    After completing installation, update with forefront client security SP1 and install latest updates from link on the help page within the program. You open the program by right-clicking the taskbar icon and there is a link right there for more info.

    Remember - You have to install the .Net 3.5 support before you begin even if you already have .Net 4.5 installed by default.  I could not get the install to work without it but I am an infrastructure guy and not and app weenie so someone may find an easier way.

    Good luck and hope this helps - Doug

    Friday, March 1, 2013 8:57 PM
  • I have Forefront Client Security successfully running on Windows 2012 Essentials and if you can get the ISO through MSDN, it's a great product for exactly the scenario you describe - one server with workstations already protected by another product.....

    Installing forefront Client Security Standalone Client on Windows Server 2012 Essentials

    Summary of process: Get the en_forefront_client_security_x86_x64_cd_x13-62435.iso file and download to your computer. Go to server manager - Add Features - install .net 3.5 support - restart server - then proceed below from a cmd prompt as the adminsitrator using the nomom switch.


    Deploying Client Security

    The client components of Client Security consist of a Client Security agent and a MOM agent. The Client Security agent scans for vulnerabilities and malware. The MOM agent collects the data, which is then used to generate reports for Client Security. To deploy both agents, use the following procedure. We do not need agents on a single machine - my clients are Win8 so Defender runs on them by default.......

    To directly deploy the Client Security component on a single server - (the client) 
    1. Log on to the Windwos 2012 Essentials Server by using local administrator permissions - (you may have to re-enable this account).
    2. Insert the Client Security CD or mount the en_forefront_client_security_x86_x64_cd_x13-62435.iso by right-clicking on the file as ISO's can be mounted from the Explorer context menu.....nice.
    3. Open a Command Prompt window as Admin.
    4. Since W2012SE is 64-bit, type <cd drive>or <mounted iso drive letter>:\Client\x64 then <Enter>
    5. Type ClientSetup.exe /NOMOM in which the /NOMOM flag installs everything except the MOM agent then <Enter>.
    6. When the tool finishes running, close the Command Prompt window.

    After completing installation, update with forefront client security SP1 and install latest updates from link on the help page within the program. You open the program by right-clicking the taskbar icon and there is a link right there for more info.

    Remember - You have to install the .Net 3.5 support before you begin even if you already have .Net 4.5 installed by default.  I could not get the install to work without it but I am an infrastructure guy and not and app weenie so someone may find an easier way.

    Good luck and hope this helps - Doug

    This didn't work for me at all... it refused to install SP1. I ended up following the guide here:

    http://www.youtube.com/watch?feature=player_embedded&v=ry4H9Lox-II

    That said I think I did it as a domain admin rather than the local admin... should have read it more thoroughly!
    • Edited by marky9074 Saturday, March 9, 2013 9:36 PM
    Saturday, March 9, 2013 7:34 PM
  • This works great. Thanks.
    Monday, June 24, 2013 11:57 AM