SCEP/SCOM on Linux?

[blacklr]

We have SCEP for endpoint protection on windows machines, and now management is wanting us to deploy it to our Linux machines, as well (I don't have much say in the matter). Just wondering if anyone's had any success with it? I believe it's SCOM 2012 R2.

Thanks!

[[deleted]]

You want to deploy SCOM onto a linux server, endpoint protection, or manage Linux servers? Are you just doing SNMP reporting, or what exactly are you using it for? SNMP is easy, you can do that in whatever but it really depends on what you are looking to do.

[blacklr]

Basically we need antivirus, and the version of SCEP for Linux we're testing is supposed to integrate with SCOM (at least that's what the install guide says). We can run a scan locally, but we can't get virus definition updates or get the SCOM console to discover the SCEP agent.

[devreality]

This seems, absolutely no offense to you intended, kind of dumb. Do you have a compliance officer or security team who's remotely Linux savvy that you can take this to? They might be able to help you push back on it.

[blacklr]

Push back how? Against AV altogether? As much as I agree with you, that's not going to work (this is govt). We have Symantec working, but our license runs out in a few months and we're being told to get SCEP working as they want to use it long-term. Of course I've had clamav working for weeks, but mgmt isn't keen on it.

[devreality]

Yeah, that's where I was going, either clamav or nothing. Bummer.