I'm very surprised at the responses here. I will stick to the requirements of the question.
Suite.
I have used the big three and I found them equally sucky. I also looked at NOD32 which is a great product. The problem is that it's built for engineers, not Windows administrators. That killed it here as we would be turning the product loose on Windows admins.
That said, I went to the next tier and looked at the offerings. I selected Sophos.
High points:
Stateful firewall is very good.
Excellent AV and spyware removal and detection capabilities.
I know some of their researchers personally. They are on top of their game.
Very small footprint on the client side. Scans go virtually unoticed.
MD5 hash recognition of approved/disapproved apps. Neat.
Policy writing is easy. IMHO.
Needs Improvement.
No SNMP support (they don't have a MIB yet).
No web interface to the management console. This is a personal peav of mine but may not be for others.
Scans on notebooks seem to bog em down a little too much(I/O on a lappy is another discussion).
Deployment of the client is involved. They have a team of engineers that develop a deployment package for you.
Reporting needs a little spit shine.
There ya go.
--TH13




Reply With Quote