Trellix ( aka mcafee ) Endpoint Security standalone / symantec alternative

Discussion in 'Application Software' started by pm67310, Jun 19, 2022.

  1. javaspain

    javaspain MDL Member

    Jul 29, 2009
    191
    98
    10
    The New life of Mcafee!!!!
     
  2. pm67310

    pm67310 MDL Guru

    Sep 6, 2011
    2,398
    1,623
    90
    yes but this version are client only
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. d00d00

    d00d00 MDL Novice

    Aug 25, 2012
    7
    3
    0
    Is there any possible way you could post the server build or provide some insight on where to find it? I'd love to drop symantec endpoint protection, mostly cause i'm frustrated that they don't have an apple silicon version of the client that supports ventura, along with their lack of support for arm64 windows builds.

    Being able to centrally manage agents at home is amazing when you run a handful of virtual machines and have a few laptops/desktops to support. :)
     
  4. pm67310

    pm67310 MDL Guru

    Sep 6, 2011
    2,398
    1,623
    90
    trellix not have arm64 support
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  5. pm67310

    pm67310 MDL Guru

    Sep 6, 2011
    2,398
    1,623
    90
    *reserved
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  6. hitman47

    hitman47 MDL Novice

    Oct 27, 2012
    20
    3
    0
    Does maybe anyone has the Server Version of Trellix Endpont Security and a License if it is needed there? Thank you.
     
  7. pm67310

    pm67310 MDL Guru

    Sep 6, 2011
    2,398
    1,623
    90
    this
    trellix package not need licence ..

    she work in server
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  8. pm67310

    pm67310 MDL Guru

    Sep 6, 2011
    2,398
    1,623
    90
    file are safe.. try yourself

    or buy product if you are suspicious
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  9. BetaTesta

    BetaTesta MDL Member

    Aug 6, 2022
    180
    57
    10
    I have no means or knowledge to confirm they are.
    I was thinking more of a signed exe like Broadcom's Symantec_Endpoint_Protection_14.3.0_RU6_Win64-bit_Client_EN.exe for instance. I don't understand why people sharing this stuff unpacks the signed exe and repack into a zip file. Don't get me wrong, I'm grateful with you or any sharing these files I just want to be sure I'm getting clean untouched binaries.
    I don't think it's necessary to state the obvious, thank you very much. :)
     
  10. hitman47

    hitman47 MDL Novice

    Oct 27, 2012
    20
    3
    0
    @pm67310 Thanks for your reply. I mean with the Server Version a Version like Symantec has with SEPM, that it can be centrally managed.
     
  11. pm67310

    pm67310 MDL Guru

    Sep 6, 2011
    2,398
    1,623
    90
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  12. jcvo

    jcvo MDL Junior Member

    Aug 30, 2011
    54
    35
    0
    new version Trellix Endpoint Security Windows 10.7.0.5264.1 Someone that I took from that Chinese forum had an account but they changed the way of entering and I lost all access
     
  13. BetaTesta

    BetaTesta MDL Member

    Aug 6, 2022
    180
    57
    10
  14. pm67310

    pm67310 MDL Guru

    Sep 6, 2011
    2,398
    1,623
    90
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  15. BetaTesta

    BetaTesta MDL Member

    Aug 6, 2022
    180
    57
    10
    I wonder whether a signed exe similar to SEPs installers, does exist.
    Last night I checked vs virustotal some zipped files found in some shared Trellix packages and they warned about two trojans. Scary.
     
  16. pm67310

    pm67310 MDL Guru

    Sep 6, 2011
    2,398
    1,623
    90
    #38 pm67310, Apr 4, 2023
    Last edited: Apr 4, 2023
    (OP)
    file share here are safe or buy if you are paranoid :)

    @BetaTesta @jcvo

    news build added
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  17. BetaTesta

    BetaTesta MDL Member

    Aug 6, 2022
    180
    57
    10
    Paranoid? Really?
    Asking for a signed package, FOR A SECURITY PROGRAM, is a reasonable request.
    I know those warnings/alerts I found might be false positives but why in the world someone would unpack the installer and shared as a zipped file?

    So two red alerts for me:
    1. Unsigned installer but a zipped file.
    2. False positives in the content within the zipped file.

    Don't get me wrong I appreciate your shares in here but...
     
  18. FoamPartyKing

    FoamPartyKing MDL Novice

    Apr 8, 2023
    2
    1
    0
    Installer is signed SHA-256, and the file structure in the archive looks as expected.
    Maybe false positive? As far as I know, Trellix don't publish a signed installer exe file, it comes in a .zip archive.

    Thank you for sharing. I gave it a go on a burner laptop - had to uninstall the old McAfee version first.
    Looks like Trellix has continued with McAfee trademark ultra high CPU usage.

    It's only supposed to happen when the computer is idle, but their idle detection is... bad. Maybe one day they'll fix this?