Important information regarding Anti-virus software
New Anti-Virus Software
For CSS-IT or departmental IT supported systems that are institutionally owned and are managed with BigFix, the Endpoint Engineering and Infrastructure (EEI) team (http://desktop.berkeley.edu) manages Windows Defender for supported Windows 8.1 and Windows 10 clients. EEI deploys SCEP for Windows 7 clients only. if installed, Symantec antivirus will be uninstalled before installing SCEP. For more information on CSS-IT supported computers please contact CSS-IT at 510-664-9000 options 1, 1, or send e-mail to email@example.com.
For institutionally owned workstations that are not supported by CSS-IT, but are supported by departmental IT and do not currently have the BigFix client installed, you can contact the Endpoint Engineering and Infrastructure (EEI) team to get started with their managed client services. The BigFix service offers client inventory, patch management, and anti-malware protection. You can learn more about their services at http://desktop.berkeley.edu.
For personally-owned systems and unmanaged university-owned computers, UC Berkeley recommends Windows Defender for Windows 8.1 and Windows 10 computers and offers Microsoft's System Center Endpoint Protection (SCEP) anti-virus/anti-malware software to current UC Berkeley faculty, staff, students and select affiliates. SCEP is available for use on Mac OS X, Windows 7, and Linux systems.
Mac OS Clients:
The current branch (version 1606) of System Center Configuration Manager released in January 2018 supports macOS HIgh Sierra / 10.13. The High Sierra compatible update to System Center Endpoint Protection (SCEP) that supports HIgh Sierra is 188.8.131.52.
Note: Microsoft SCEP is only recommended for personally-owned Windows computers running Windows Vista or Windows 7, all recent versions of Windows should use Windows Defender.
Computers running Windows 8, Windows 8.1, or Windows 10 should use the Microsoft supplied Windows Defender and not SCEP.
Computers running Windows Vista or Windows 7 will require an additional tool to install SCEP from the .iso files. For more information on installing software from .iso files see the Mounting .iso Files FAQ.
Microsoft SCEP for Windows XP stopped receiving anti-malware updates on July 14, 2015. Please see the following posts for details: Microsoft antimalware support for Windows XP and FEP and SCEP anti-malware protection support after OSes reach end-of-life.
Before installing SCEP, any exisiting installs of the Symantec Endpoint Protection (SEP) software should be removed. For specific directions on how to safely remove the SEP client please visit the article below for your platform. The UCB campus Symantec Endpoint Protection licenses expired on September 30, 2014. All SEP client software must be removed from campus systems.
For additional documentation please see: Where is the Documentation for System Center 2012 Endpoint Protection? in the System Center Configuration Manager Team Blog, Supported Configurations for Configuration Manager, and Introduction to Endpoint Protection in Configuration Manager.
Downloads - (Calnet authentication required)
|MS System Center EndPoint Protection|
|SCEP Anti-virus for Windows||Windows||
SCEP Client for Windows Vista, Win 7, Windows 8/8.1 (recommended only for Windows Vista and Windows 7) not compatible with Windows 10
|SCEP Anti-virus for Mac||Macintosh||
SCEP Client for Mac OSX 10.6 and above including 10.13 High Sierra.
File Name: scep.i386-x86_64.en.dmg
|SCEP Anti-virus for Linux||Linux||
SCEP Client for Linux including Red Hat Enterprise Linux 5 and 6 (version 7 is not supported), Debian Linux 5 and 6 (version 7 is not supported), Ubuntu 10.04 and 12.04 (version 14.04 is not supported)
|Anti-Virus Software removal Tools|
|CleanWipe_12.1.4100.4126.zip||Windows||A/V removal tool for Windows Vista, Win 7, Windows 8/8.1|
|Cleanwipe_readme.txt||Windows||Important: Instructions for the use of CleanWipe_12.1.4100.4126|
|SymantecUninstaller-Mac-English.tgz||Macintosh||A/V removal tool for Mac OS X|