We are currently evaluating Bit9 to replace SEP and I was wondering if those that are actually using it have any feed back for us.
So we are looking to see if there was something on the market that could greatly exceed what we get from SEP, or other traditional AV, and found white listing and specifically Bit9. The idea of white listing rather than black listing seems brilliant but has always suffered because of the overhead needed to administer it. We are pretty far into our evaluation and I've almost convinced myself that white listing is the the way to go but only have a hand full of systems running it and would like to hear from anyone that has full implemented throughout a domain and what it really means to us as administrators. I am fully aware that it will require additional man hours but does it pay off?