System Center EndPoint Protection (A/V)

Important information regarding Anti-virus software

New Anti-Virus Software

CSS-IT or Departmental IT Supported Systems with BigFix
UCB Systems Not Supported by CSS IT and/or without BigFix
Personal and Other systems

For CSS-IT or departmental IT supported systems that are institutionally owned and are managed with BigFix, the Endpoint Operations and Services (EOS) team ( manages Windows Defender for supported Windows 8.1 and Windows 10 clients. EOS deploys SCEP for Windows 7 clients only. if installed, Symantec antivirus will be uninstalled before installing SCEP. For more information on CSS-IT supported computers please contact CSS-IT at 510-664-9000 options 1, 1, or send e-mail to

For institutionally owned workstations that are not supported by CSS-IT, but are supported by departmental IT and do not currently have the BigFix client installed, you can contact the Endpoint Operations and Services (EOS) team to get started with their managed client services. The BigFix service offers client inventory, patch management, and anti-malware protection. You can learn more about their services at

For personally-owned systems and unmanaged university-owned computers, UC Berkeley recommends Windows Defender for Windows 8.1 and Windows 10 computers and offers Microsoft's System Center Endpoint Protection (SCEP) anti-virus/anti-malware software to current UC Berkeley faculty, staff, students and select affiliates. SCEP is available for use on Mac OS X, Windows 7, and Linux systems.

Mac OS Clients:

The current branch (version 1606) of System Center Configuration Manager released in January 2018 supports macOS HIgh Sierra / 10.13. The High Sierra compatible update to System Center Endpoint Protection (SCEP) that supports HIgh Sierra is

Windows Clients:

Note: Microsoft SCEP is only recommended for personally-owned Windows computers running Windows Vista or Windows 7, all recent versions of Windows should use Windows Defender.

Computers running Windows 8, Windows 8.1, or Windows 10 should use the Microsoft supplied Windows Defender and not SCEP.

Computers running Windows Vista or Windows 7 will require an additional tool to install SCEP from the .iso files. For more information on installing software from .iso files see the Mounting .iso Files FAQ.

Microsoft SCEP for Windows XP stopped receiving anti-malware updates on July 14, 2015. Please see the following posts for details: Microsoft antimalware support for Windows XP and FEP and SCEP anti-malware protection support after OSes reach end-of-life.

Before installing SCEP, any exisiting installs of the Symantec Endpoint Protection (SEP) software should be removed. For specific directions on how to safely remove the SEP client please visit the article below for your platform. The UCB campus Symantec Endpoint Protection licenses expired on September 30, 2014. All SEP client software must be removed from campus systems.

Linux Clients:

For additional documentation please see: Where is the Documentation for System Center 2012 Endpoint Protection? in the System Center Configuration Manager Team Blog, Supported Configurations for Configuration Manager, and Introduction to Endpoint Protection in Configuration Manager

Downloads - (Calnet authentication required)

MS System Center EndPoint Protection
Name Platform Description
SCEP Anti-virus for Windows Windows

SCEP Client for Windows Vista, Win 7, Windows 8/8.1 (recommended only for Windows Vista and Windows 7) not compatible with Windows 10

File Name:

SCEP Anti-virus for Mac Macintosh

SCEP Client for Mac OSX 10.6 and above including 10.13 High Sierra.

File Name: scep.i386-x86_64.en.dmg

SCEP Anti-virus for Linux  Linux

SCEP Client for Linux including Red Hat Enterprise Linux 5 and 6 (version 7 is not supported), Debian Linux 5 and 6 (version 7 is not supported), Ubuntu 10.04 and 12.04 (version 14.04 is not supported)

File Name:

Anti-Virus Software removal Tools
Name Platform Description Windows A/V removal tool for Windows Vista, Win 7, Windows 8/8.1
Cleanwipe_readme.txt Windows Important: Instructions for the use of CleanWipe_12.1.4100.4126
SymantecUninstaller-Mac-English.tgz Macintosh A/V removal tool for Mac OS X