Unlimited Giveaway McAfee Endpoint Unmanaged client - no term limits

[bayasdev]

@Chri.Mi how's the system impact?

 

[Chri.Mi]

 

[Chri.Mi]

Mcafee scanner service use between 250-80mb ram

How u can see is more complete then symantec unmanaged. Would be nice if some1 test it.

 

[bayasdev]

How u can see is more complete then symantec unmanaged. Would be nice if some1 test it.

I'm going to setup a VM to test this weekend

 

[Chri.Mi]

I have only 1 doubt if is free or not... look pictures on modules is write trial-active

 

[Vitali Ortzi]

View attachment 240371View attachment 240368View attachment 240370View attachment 240367View attachment 240372View attachment 240366View attachment 240365View attachment 240364View attachment 240369

I don't see anything new in the settings since last time I used it.
But as you see the GUi is usable unlike SEP unmanaged Wich feels like a barebone av.
But SEP management server has many nice things that McAfee lacks.

I have only 1 doubt if is free or not... look pictures on modules is write trial-active

View attachment 240374

I think it's an unlimited trial.

 

[bayasdev]

Does the client updates manually or requires you to download a new bundle and update manually?

 

[Vitali Ortzi]

Does the client updates manually or requires you to download a new bundle and update manually?

Pretty sure manually but haven't tested.
But definitions update should be automatically downloaded

 

[bayasdev]

Pretty sure manually but haven't tested.

Hmm so another Panda... anyways I'll have to test it against real malware to see how it reacts.

 

[Chri.Mi]

Some1 understand how to reset the count on registry event?

 

[bayasdev]

Finally installed this AV in a VM, so far it's working good and I'll test it on the MH.
Only time will tell if this trial won't expire someday.

PD: it deletes infected files by default for me, also you need to enable the browser plugin for web protection to work.

 

[Vitali Ortzi]

Finally installed this AV in a VM, so far it's working good and I'll test it on the MH.
Only time will tell if this trial won't expire someday.

View attachment 240499

PD: it deletes infected files by default for me, also you need to enable the browser plugin for web protection to work.

View attachment 240500

View attachment 240501

at least the web protection of SEP doesn't require an extension even though it's quite limited without the WSS add-on wich is dam expansive.

 

[bayasdev]

at least the web protection of SEP doesn't require an extension even though it's quite limited without the WSS add-on wich is dam expansive.

I prefer the extension approach, the AV doesn't needs to break SSL security by doing MITM to every connection and slowing things down

 

[Vitali Ortzi]

Only time will tell if this trial won't expire someday.

I'm pretty sure it won't expire
But If it somehow will expire I have a few workaround .

I prefer the extension approach, the AV doesn't needs to break SSL security by doing MITM to every connection and slowing things down

Yeah breaking SSL is very risky .
Google made it clearly to venders they shouldn't do it.

But I got no idea how the extension works .
And if somehow the account that manages the extension got pished
It's game over .
( already happened to a security vender).

For me both approaces are near similarly bad ,
But I enjoy the visibility I get by certificate injection.
If you have a good alternative my ears are open.

 

[bayasdev]

@Vitali Ortzi I'm bonus testing an already known malware in the hub, but wanted to know if that's how you disable static AV?
the static detection was artemis.... after disabling those options and running the file now is JTI/.... so is that dynamic detection/cloud/behaviour blocker?

 

[Vitali Ortzi]

@Vitali Ortzi I'm bonus testing an already known malware in the hub, but wanted to know if that's how you disable static AV?
the static detection was artemis.... after disabling those options and running the file now is JTI/.... so is that dynamic detection/cloud/behaviour blocker?

View attachment 240513

I don't know much about McAfee but it tells below the option what each option does .

 

[bayasdev]

I don't know much about McAfee but it tells below the option what each option does .

Indeed it was detected by ATP

I'm really surprised this isn't the consumer grade crapware McAfee sells to home users, this is a really effective AV

 

[Vitali Ortzi]

Indeed it was detected by ATP

View attachment 240514

I'm really surprised this isn't the consumer grade crapware McAfee sells to home users, this is a really effective AV

I know one of the best Enterprise products.

Highly underrated ,
Anyway almost every vender sells crapware to home users XD.

And use the great patents in Endpoint exclusive products only.

But If McAfee ported half of the Endpoint product to the consumer and used good marketing/ UI optimizations .
They would be able to take much market share among enthusiast market group (Malware tips ,wilders for example)
But since it won't help taking enough market share it would be R&D wasted .

 

[Chri.Mi]

Finally installed this AV in a VM, so far it's working good and I'll test it on the MH.
Only time will tell if this trial won't expire someday.

View attachment 240499

PD: it deletes infected files by default for me, also you need to enable the browser plugin for web protection to work.

View attachment 240500

View attachment 240501

Remember to tweak ATP isolation rules on security... will isolate unknown file...

 

[bayasdev]

Remember to tweak ATP isolation rules on security... will isolate unknown file...

Dynamic application containment?