Microsoft today will deliver the public beta version of Microsoft Security Essentials (MSE), previously code-named "Morro," its Windows Live OneCare replacement. Like OneCare, MSE provides anti-malware protection to individual PCs. But unlike OneCare, it doesn't include the ancillary functionality that graced the previous product, such as multi-PC management, a two-way, managed firewall, and online photo backup.
Instead, MSE tackles malware with a laser-like intensity, filling the one security hole in Windows that Microsoft hasn’t plugged. MSE will be made free to all genuine users of Windows XP, Vista, and 7. It's a small, lightweight application that's decidedly less "chatty" than OneCare. In other words, it doesn't constantly pester you with pop-up notifications about absolutely nothing.
Sounds fantastic, right?
It is fantastic, but only for individuals or, potentially, very small businesses. Microsoft freely licenses MSE for use on any number of genuine installations of Windows, so you're able to install it on as many PCs as you'd like. But it's not an enterprise tool. MSE comes with no central deployment or management functionality, for example.
The reason for this is simple: Microsoft already offers a managed anti-malware solution for businesses, and it's based on the same anti-malware engine used in MSE. It's called Forefront Client Security (FCS), and Microsoft has already announced that the 2.0 version (code-named "Stirling") will work with Windows 7.
If you're not familiar with FCS, it seems to answer all the issues managed environments would have with MSE. That is, you use policy to deploy a malware protection agent to clients via the FCS Management Console. And you use that console to manage the security of your environment in a highly granular fashion. If you're familiar with Microsoft's management consoles, you'll be right at home in the FCS Management Console, and you can take advantage of its reporting functionality to keep up with the ongoing health of your environment.
The problem with FCS is that it's not free. According to Microsoft's current price list, FCS costs $12.72 per PC or user per year, plus $2,468 per server, per year, for the FCS Management Console. (One server can typically handle up to 12,000 clients, according to Microsoft.)
Maybe it's me, but it seems like there's a big gulf between free and unmanaged on the one hand (MSE) and expensive but managed on the other (FCS). In keeping with the theme of last week's commentary, I think Microsoft is going to have to adapt its pricing strategy to meet the pricing of competitors like Google.
That's particularly true with security, where the cynical might argue against the need to pay Microsoft to fix problems that are, essentially, in their other products. I don't think it's that black and white, but I would argue that pervasive security should simply be a benefit--no, a feature--of the Microsoft ecosystem. And that would point the way to a much less expensive, possibly even free, version of FCS.
Could it happen? I don't think Microsoft is there yet. But it should be heading in that direction.
In the meantime, be sure to check out MSE on your own desktops. You can find out more on the SuperSite for Windows.
Related Reading: