MRG Effitas MRG Effitas Assessment & Certification – Q1 2020

[SeriousHoax]

Out of twelve tested security products, ten managed to meet the specification to attain our Q1 2020 360 Degree Certification, these being:

• Avast Business Antivirus
• Avira Antivirus Pro
• Bitdefender Endpoint Security
• CrowdStrike Falcon Protect Sensor
• Microsoft Windows Defender
• ESET Endpoint Security
• F-Secure Computer Protection Premium
• Kaspersky Small Office Security
• Symantec Endpoint Protection Cloud
• Trend Micro Security

Full report here

 

[MacDefender]

It’s interesting to see F-Secure’s delta versus Avira. Slightly better protection across the board, albeit with more false positives. About what one would expect from a multi engine approach with an aggressive behavior blocker like DeepGuard.

 

[Mariihh]

Best free AV? Neither Avira, nor Panda, nor Kaspersky, nor Bitdefender. Windows Defender is his name
Now, it’s amazing how strong Bitdefender is, it’s relentless in all tests if you notice.

 

[Andy Ful]

Best free AV? Neither Avira, nor Panda, nor Kaspersky, nor Bitdefender. Windows Defender is his name
Now, it’s amazing how strong Bitdefender is, it’s relentless in all tests if you notice.

WD free was not tested, but Microsoft Defender ATP (endpoint detection and response capabilities were turned on including ASR rules). You could probably use ConfigureDefender to activate some important ATP features (like ASR rules), but the full ATP is stronger.

 

[sepik]

Hello,
Whole Fileless/Exploit test is biased, because i do like Trend Micro
Trend Micro and Kaspersky 0% Behavior Block...oh well.

 

[blackice]

WD free was not tested, but Microsoft Defender ATP (endpoint detection and response capabilities were turned on including ASR rules). You could probably use ConfigureDefender to activate some important ATP features (like ASR rules), but the full ATP is stronger.

In fact no free or consumer products seemed to be tested. Most of these are business endpoint solutions.

 

[Andy Ful]

MRG Effitas always used the business or endpoint AV versions, except WD. In Q4 2017 the WD on default settings was tested for the first time. From Q4 2019 the WD with ATP features (ASR included) is tested. One can easily compare the difference in the exploit/fileless tests between Q3 2019 and Q4 2019.
It is strange, but I have never seen any test when WD ATP would be tested with any free AV.

 

[SeriousHoax]

Good to see ESET and Bitdefender doing well. Some AVs tested here will have the same result if their Home product version were tested. Eg: ESET, Kaspersky (Not fully sure about K).
I'm curious what type of detection are considered as behavior blocking to them? ESET and Avira had a few blocked by behavior blocking which we know don't have a typical behavior blockers like some other solutions

 

[Vitali Ortzi]

Proof Symantec is better than MacAfee by default .(most samples won't be affected by the network change made to Symantec)
MacAfee endpoint was the only one to fail while Symantec got level 1 score with bitdefender and ESET.
Defender would probably get level 1 Next year as Microsoft made so many improvements this year alone.
To say the truth if I was offered windows ATP over Symantec i would be using it.
It would decrease management a lot.

 

[security.paranoid]

Proof Symantec is better than MacAfee by default .(most samples won't be affected by the network change made to Symantec)
MacAfee endpoint was the only one to fail while Symantec got level 1 score with bitdefender and ESET.
Defender would probably get level 1 Next year as Microsoft made so many improvements this year alone.
To say the truth if I was offered windows ATP over Symantec i would be using it.
It would decrease management a lot.

i have the license but i cant buy the training because its not available in my country and i found no online training related to ATP

 

[fabiobr]

Wow, Bitdefender went extremely well on this test.

Kaspersky could be better, especially in exploit/fileless

 

[Vitali Ortzi]

Wow, Bitdefender went extremely well on this test.

Kaspersky could be better, especially in exploit/fileless

Indeed