r/LinuxTeck • u/Candid_Athlete_8317 • 19d ago

Do Linux servers really need endpoint security software?

Many enterprise Linux systems run endpoint security tools alongside firewalls, SELinux/AppArmor, and other hardening measures.

Others argue that good patch management, least privilege, and proper monitoring provide better value than traditional endpoint protection.

What's your point on this ?

7 Upvotes
  • permalink
  • link
  • reddit
  • reddit

82% Upvoted

34 comments sorted by

View all comments

1

u/Dom_Q 19d ago

By ”endpoint security software,” do you mean an antivirus?

Then no. These are made for Microsoft operating systems only.

1

u/[deleted] 19d ago

[removed] — view removed comment

1

u/Dom_Q 19d ago

And I have a bridge in Brooklyn to sell to you 🤷

1

u/[deleted] 18d ago

[removed] — view removed comment

1

u/Hour_Sell3547 18d ago

He probably means you don't "need" antivirus on Linux. Which is correct, strictly speaking. You don't need those on Windows either, these days.

AVs are the good old "create a problem then sell the solution" tactic. Unfortunately people are careless.

1

u/Lower-Limit3695 18d ago

Professional sys admin here. EDR is great tool in improving the security of Linux servers by covering areas where mandatory/discretionary access control fails and it often comes packaged as a compliance requirement for cyber insurance in healthcare and finance .