Site License Advisory Team

May 31, 2011 meeting

Agenda

• McAfee VirusScan and Microsoft Forefront

• Microsoft EES Contract

• LANDesk/Altiris and asset/inventory management– Secunia

• Identity Finder Negotiations

McAfee

• McAfee expires in September 2012.• Frustrations are being expressed on the Mac

side and the Windows side• Students: Microsoft Security Essentials

– Currently available for free for all home use– Not available for enterprise (OSU) machines– Linked from OSU SLS at this time

• Retirement of student McAfee in process.

• Fac/Staff: Microsoft Forefront– Endpoint solution available to all Fac/Staff in

August, and available to any ECAL dept. now

Decision Factors for McAfee Migration

• ~$400,000, 3 year costs, of which over $200,000 are unfunded• IUC Schools have been abandoning McAfee in favor of Forefront, and most

are unlikely to renew their windows McAfee solution in 2012.• The Ohio State University will be licensed for Microsoft Forefront, an

alternative to McAfee, beginning August 2011 as part of its CoreCAL contract.

• Forefront scores very well in terms of accessibility to disabled persons.• ClamAV (Mac/Unix machines) is an open source and available to all faculty,

staff, and students. It is command-line and non-active-scanning.• Microsoft Security Essentials is a free Microsoft product that is available for

all students and faculty/staff for personally-owned machines.• McAfee has had three major false-positives in the past year. One had a

major impact on the University, another hit specific departments, and the last had very limited effect on the University, but showed that this issue remains a major problem.

McAfee Migration Benefits• Cost savings to the University of ~$400,00 over 3 years• Leverage Forefront in our current Microsoft contract at no

additional costs• Align OCIO services with current student expectations where

we see the majority of students arriving to campus with an existing anti-virus solution installed on their workstation

• Realignment of resources focused on the support of McAfee for the university to other priority services

• Microsoft System Center Configuration Manager (SCCM), available at no additional costs, can be used to manage Forefront, Bitlocker, and Secunia along with McAfee AntiVirus where needed

• ePolicy Orchestrator (ePO) is licensed under Safeboot and can remain a viable management solution for Safeboot and McAfee’s products.

McAfee Migration Risks• Migration costs could exceed

renewal costs• Gartner 2010 magic quadrant

depicts McAfee as a leader and Microsoft in lower left as a niche player.

• Lack of sustainable funding for McAfee FY13-FY15

• Additional costs to departments if the University moves away from McAfee and departments remain on the tool. – MedCenter: assuming 12,899

machines at $17.24 per license, the 3 year estimate could be as high as ~$222,000.

Microsoft EES Agreement

• Enrollment for Education Solutions– Newest version of what was the Microsoft

Campus Agreement

• Terms are virtually identical– No change on what we have, terms for different

products, etc.

• Provides a lower price– $1.77/FTE for ECAL– 67¢/FTE for CoreCAL

• 1-year or 3-year contract term

ECAL – Uplifting Us All

• Cost of Uplift – 85%– CA: $1,028,916.81– EES: $991,348.97– Diff: $37,531.84

• Cost of Uplift – 100%– CA: $1,051,038.79– EES: $1,009,844.40– Diff: $41,194.39

ECAL

• Departments wishing to upgrade can begin using the products at this time, per the evaluation clause.– Forefront actually has a 120-day eval period

• FY12 may be the last option for ECAL uplift for two years (until FY14)– Microsoft is ending the Campus Agreement (CA) and

moving to the “Enrollment for Education Solutions” (EES) agreement

• Cost difference (per FTE):– CoreCAL: $38.45– ECAL: $44.16

LANDesk/Altiris

• Recommendation from OCIO Security to obtain one University price: Currently reviewing LANDesk– Departments will purchase on their own– $4.82/FTE for Management Suite– $1.64/FTE for Security Suite– Support in “incident packs”

• Wins since last time– Students removed from FTE counts

• Cost difference for an example department: – 3 years:

» Altiris: $177,050.22» LANDesk FTE subscription w/ no students: $30,888» LANDesk FTE subscription w/GRA: $37,041.84» LANDesk FTE subscription w/all students: $179,598.87

Secunia

• OCIO, OSUMC, and Engineering covered this for everyone– Individual departments who promised money may

repurpose that cash.– VIM and Server versions not included; Secunia

indicates we are unlikely to require these pieces at the moment.

• Working on roll out– Target date: July 1, 2011– No cost to departments for use– Expires in late 2015

Identity Finder

• OCIO is actively pursuing this product.• Identity Finder is the recommended software

that OCIO Security supports going forward– Seeking a license that covers the enterprise

product• Perpetual license• FTE count (not node/computer)

– OCIO is seeking internal funds; target for purchase: Sept. 2011

– Cost recovery is currently unknown, if any

Questions/Comments