Key takeaway
For a large, mixed endpoint fleet, define the boundary between central policy and department-level authority in advance.
Environment
A state technology-services agency managed more than 25,000 Windows, Linux and Mac endpoints.
Challenge
The agency reported recurring malware infections and difficult management with its previous in-house antivirus. Requirements included central cloud management, layered endpoint controls and policy delegation across a large fleet.
Approach described
The agency moved to cloud-managed device protection and delegated authority through groups and nested groups. The deployment included ZeroDwell containment, patch management, remote monitoring, device control and inventory.
Management model
A central console gave the agency a unified view of devices across operating systems, while departments managed their assigned groups. Xcitium’s published account reported no breaches after deployment as of the account’s publication.