Site License Advisory Team May 31, 2011 meeting

Agenda McAfee VirusScan and Microsoft Forefront Microsoft EES Contract LANDesk/Altiris and asset/inventory management –Secunia Identity Finder Negotiations

McAfee McAfee expires in September Frustrations are being expressed on the Mac side and the Windows side Students: Microsoft Security Essentials –Currently available for free for all home use –Not available for enterprise (OSU) machines –Linked from OSU SLS at this time Retirement of student McAfee in process. Fac/Staff: Microsoft Forefront –Endpoint solution available to all Fac/Staff in August, and available to any ECAL dept. now

Decision Factors for McAfee Migration ~$400,000, 3 year costs, of which over $200,000 are unfunded IUC Schools have been abandoning McAfee in favor of Forefront, and most are unlikely to renew their windows McAfee solution in The Ohio State University will be licensed for Microsoft Forefront, an alternative to McAfee, beginning August 2011 as part of its CoreCAL contract. Forefront scores very well in terms of accessibility to disabled persons. ClamAV (Mac/Unix machines) is an open source and available to all faculty, staff, and students. It is command-line and non-active-scanning. Microsoft Security Essentials is a free Microsoft product that is available for all students and faculty/staff for personally-owned machines. McAfee has had three major false-positives in the past year. One had a major impact on the University, another hit specific departments, and the last had very limited effect on the University, but showed that this issue remains a major problem.

McAfee Migration Benefits Cost savings to the University of ~$400,00 over 3 years Leverage Forefront in our current Microsoft contract at no additional costs Align OCIO services with current student expectations where we see the majority of students arriving to campus with an existing anti-virus solution installed on their workstation Realignment of resources focused on the support of McAfee for the university to other priority services Microsoft System Center Configuration Manager (SCCM), available at no additional costs, can be used to manage Forefront, Bitlocker, and Secunia along with McAfee AntiVirus where needed ePolicy Orchestrator (ePO) is licensed under Safeboot and can remain a viable management solution for Safeboot and McAfee’s products.

McAfee Migration Risks Migration costs could exceed renewal costs Gartner 2010 magic quadrant depicts McAfee as a leader and Microsoft in lower left as a niche player. Lack of sustainable funding for McAfee FY13-FY15 Additional costs to departments if the University moves away from McAfee and departments remain on the tool. –MedCenter: assuming 12,899 machines at $17.24 per license, the 3 year estimate could be as high as ~$222,000.

Microsoft EES Agreement Enrollment for Education Solutions –Newest version of what was the Microsoft Campus Agreement Terms are virtually identical –No change on what we have, terms for different products, etc. Provides a lower price –$1.77/FTE for ECAL –67¢/FTE for CoreCAL 1-year or 3-year contract term

ECAL – Uplifting Us All Cost of Uplift – 85% –CA: $1,028, –EES: $991, –Diff: $37, Cost of Uplift – 100% –CA: $1,051, –EES: $1,009, –Diff: $41,194.39

ECAL Departments wishing to upgrade can begin using the products at this time, per the evaluation clause. –Forefront actually has a 120-day eval period FY12 may be the last option for ECAL uplift for two years (until FY14) –Microsoft is ending the Campus Agreement (CA) and moving to the “Enrollment for Education Solutions” (EES) agreement Cost difference (per FTE): –CoreCAL: $38.45 –ECAL: $44.16

LANDesk/Altiris Recommendation from OCIO Security to obtain one University price: Currently reviewing LANDesk –Departments will purchase on their own –$4.82/FTE for Management Suite –$1.64/FTE for Security Suite –Support in “incident packs” Wins since last time –Students removed from FTE counts Cost difference for an example department: –3 years: »Altiris: $177, »LANDesk FTE subscription w/ no students: $30,888 »LANDesk FTE subscription w/GRA: $37, »LANDesk FTE subscription w/all students: $179,598.87

Secunia OCIO, OSUMC, and Engineering covered this for everyone –Individual departments who promised money may repurpose that cash. –VIM and Server versions not included; Secunia indicates we are unlikely to require these pieces at the moment. Working on roll out –Target date: July 1, 2011 –No cost to departments for use –Expires in late 2015

Identity Finder OCIO is actively pursuing this product. Identity Finder is the recommended software that OCIO Security supports going forward –Seeking a license that covers the enterprise product Perpetual license FTE count (not node/computer) –OCIO is seeking internal funds; target for purchase: Sept –Cost recovery is currently unknown, if any

Questions/Comments