Run Windows Defender passive mode while running McAfee ENS

[dilan90]

Hi,

We came to know that it is feasible to run Windows Defender passive mode while we are running McAfee ENS as the endpoint protection solution.

Could I get this verified with McAfee employee and let us know pros and cons of this?

Thank You

Trellix Endpoint Security  

[rfranci · Accepted solution]

Hi @dilan90,

Thank you for reaching us on community !

Windows defender will go to passive mode by default if you are using windows defender ATP on installing any third party AV, in this case ENS.

If you are manually enabling it, there will be a periodic scanning that done by defender and it wont provide real time protection against threats.

https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-antivirus/windo... 

McAfee do not have any control over this feature.

Also it is impotent to note that there will multiple filter drivers and scan engines loaded into memory (from ENS and defender ). Hence, there might be a higher resource utilization.

Hope that helps.

- Rohit Francis.

[dilan90]

Hi @rfranci ,

Thanks for the response on this. I went through the document you mentioned, and I found out more details against the query. Also I explained the customer what kind of impacts can be happened while having the Win Defender in passive mode. 

Thank you