Site License Advisory Team

1. Site License Advisory Team May 31, 2011 meeting

2. Agenda • McAfee VirusScan and Microsoft Forefront • Microsoft EES Contract • LANDesk/Altiris and asset/inventory management • Secunia • Identity Finder Negotiations

3. McAfee • McAfee expires in September 2012. • Frustrations are being expressed on the Mac side and the Windows side • Students: Microsoft Security Essentials • Currently available for free for all home use • Not available for enterprise (OSU) machines • Linked from OSU SLS at this time • Retirement of student McAfee in process. • Fac/Staff: Microsoft Forefront • Endpoint solution available to all Fac/Staff in August, and available to any ECAL dept. now

4. Decision Factors for McAfee Migration • ~$400,000, 3 year costs, of which over $200,000 are unfunded • IUC Schools have been abandoning McAfee in favor of Forefront, and most are unlikely to renew their windows McAfee solution in 2012. • The Ohio State University will be licensed for Microsoft Forefront, an alternative to McAfee, beginning August 2011 as part of its CoreCAL contract. • Forefront scores very well in terms of accessibility to disabled persons. • ClamAV (Mac/Unix machines) is an open source and available to all faculty, staff, and students. It is command-line and non-active-scanning. • Microsoft Security Essentials is a free Microsoft product that is available for all students and faculty/staff for personally-owned machines. • McAfee has had three major false-positives in the past year. One had a major impact on the University, another hit specific departments, and the last had very limited effect on the University, but showed that this issue remains a major problem.

5. McAfee Migration Benefits • Cost savings to the University of ~$400,00 over 3 years • Leverage Forefront in our current Microsoft contract at no additional costs • Align OCIO services with current student expectations where we see the majority of students arriving to campus with an existing anti-virus solution installed on their workstation • Realignment of resources focused on the support of McAfee for the university to other priority services • Microsoft System Center Configuration Manager (SCCM), available at no additional costs, can be used to manage Forefront, Bitlocker, and Secunia along with McAfee AntiVirus where needed • ePolicy Orchestrator (ePO) is licensed under Safeboot and can remain a viable management solution for Safeboot and McAfee’s products.

6. McAfee Migration Risks • Migration costs could exceed renewal costs • Gartner 2010 magic quadrant depicts McAfee as a leader and Microsoft in lower left as a niche player. • Lack of sustainable funding for McAfee FY13-FY15 • Additional costs to departments if the University moves away from McAfee and departments remain on the tool. • MedCenter: assuming 12,899 machines at $17.24 per license, the 3 year estimate could be as high as ~$222,000.

7. Microsoft EES Agreement • Enrollment for Education Solutions • Newest version of what was the Microsoft Campus Agreement • Terms are virtually identical • No change on what we have, terms for different products, etc. • Provides a lower price • $1.77/FTE for ECAL • 67¢/FTE for CoreCAL • 1-year or 3-year contract term

8. ECAL – Uplifting Us All • Cost of Uplift – 85% • CA: $1,028,916.81 • EES: $991,348.97 • Diff: $37,531.84 • Cost of Uplift – 100% • CA: $1,051,038.79 • EES: $1,009,844.40 • Diff: $41,194.39

9. ECAL • Departments wishing to upgrade can begin using the products at this time, per the evaluation clause. • Forefront actually has a 120-day eval period • FY12 may be the last option for ECAL uplift for two years (until FY14) • Microsoft is ending the Campus Agreement (CA) and moving to the “Enrollment for Education Solutions” (EES) agreement • Cost difference (per FTE): • CoreCAL: $38.45 • ECAL: $44.16

10. LANDesk/Altiris • Recommendation from OCIO Security to obtain one University price: Currently reviewing LANDesk • Departments will purchase on their own • $4.82/FTE for Management Suite • $1.64/FTE for Security Suite • Support in “incident packs” • Wins since last time • Students removed from FTE counts • Cost difference for an example department: • 3 years: • Altiris: $177,050.22 • LANDesk FTE subscription w/ no students: $30,888 • LANDesk FTE subscription w/GRA: $37,041.84 • LANDesk FTE subscription w/all students: $179,598.87

11. Secunia • OCIO, OSUMC, and Engineering covered this for everyone • Individual departments who promised money may repurpose that cash. • VIM and Server versions not included; Secunia indicates we are unlikely to require these pieces at the moment. • Working on roll out • Target date: July 1, 2011 • No cost to departments for use • Expires in late 2015

12. Identity Finder • OCIO is actively pursuing this product. • Identity Finder is the recommended software that OCIO Security supports going forward • Seeking a license that covers the enterprise product • Perpetual license • FTE count (not node/computer) • OCIO is seeking internal funds; target for purchase: Sept. 2011 • Cost recovery is currently unknown, if any

13. Questions/Comments