Has anyone considered not using a 3rd party AV product and just using the TDR Agent for AV/Malware protection?
Thanks in advance for any comments.
No. It's not designed to be an AV solution.
TDR isn't an anti-virus product, so we would still always recommend using A/V in conjunction with TDR.
The main target of TDR is to detect, and prevent malware/ransomware. There will generally be some overlap between it and A/V, however.
We do always recommend making exclusions for your A/V directories (and making exclusions for the TDR directories in your A/V software,) so they don't waste time scanning each other.
We do have a best practices article here:
(TDR Deployment Best Practices)https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Fireware/services/tdr/tdr_deploy_tips_c.html
WatchGuard Customer Support
Security in layers! There is only one way that I ever will stop using endpoint AV, and that is when there is no such thing as an end user.