This message was deleted.

They all suck. Defender isn't as bad as Trend or Sophos

DISCLAIMER: I have joined Bitdefender this week. I've joined Bitdefender because I believe their endpoint protection is the best for VDI (but we have a lot of work to better promote it). We have one of the best results (independent tests like AV-comparatives and others, happy to share references) and have great support for virtualized workloads. For example, when Citrix VDA is detected, latest exclusions are automatically applied. Scan offloading is a bomb (both local and centralized). And I could go on... But why don't you try it? 🙂 I'm hoping to prepare a webinar soon to talk about VDI and security (and AV best practices and recommendations).

Trend now here - it's time users accept security tools will slow down vdi experiences

Bitdefender Gravity Zone here - the offloading is the secret sauce.

It's time security vendors accepted that they need to step up in terms of performance on shared hosts and VDI. There is a compromise - increase auditing and tracking at the expense of intrusive scanning - but so many security people are simple box-checkers that they fail to grasp that there is any kind of trade-off involved. IMO

Paolo Alto Traps works great in my opinion. It takes some time to create VDI/RDS image, that's the only downside I saw.

We had ESET at my last gig, I liked it.

Started off using Sophos Enterprise but it really killed performance. It was dreadful.. just about to test the Sophos for Virtual Environments product shortly to see how it fares.

Oh yeah forgot about Palo Alto Traps (Cortex XDR). We do have a Palo Alto firewall so it does make sense to try it out..

yeah I heard we're going to be using Palo Alto too and we're the 2nd largest hospital in the Europe!

crowdstrike doesn’t seem to have any noticeable impact

McAfee MOVE currently, with my cyber team pushing for the fullstack McAfee agent in the guest. So it's more of a question of whether I lose hair or get more gray hair during the transition

Been using defender with a gpo to limit the cpu usage

I had a client that turned on MOVE and totally killed their VDI so good luck with that one

Running Trend Micro Apex One in our environment, and it has served us well.

We are also using McAfee MOVE in 2016 CVA hosts. It has brought our system to it's knees 3 times now because something messes up an the MOVE servers and creates huge timeouts in scanning. Not fun. We are seriously looking at moving to BitDefender because they are the only ones that offer a host-level scan with XenServer (as far as I'm aware).

Take a look at Carbon Black. Would be interesting to see how you get on with it?