Ankündigung MS Defender

A short way

From Sophos end-of-live to the introduction of MS Defender
Ankündigung MS Defender
Image: Adobe Stock/Kay Ludwig (Uni Jena)
This page has been machine translated.

Published:

An intensive search for a virus protection successor has been underway for several months. In light of the end of the contract with Sophos, the existing federal framework agreement with Microsoft and the overarching use of Microsoft 365, MS Defender is to be used instead of Sophos in future.

In order not to interrupt the existing virus protection for centrally and decentrally managed computers, the onboarding for MS Defender consists of three steps: Firstly, Sophos must be removed from the relevant end device. As soon as this is done, MS Defender is installed. In the final step, the central settings for standardised virus protection are set.

For centrally managed PC workstations, the data centre (from 04.02.2026) takes over all this work. For decentrally managed end devices, maintenance is carried out by the designated AV / IVV manager. If you have any questions, please contact your responsible IT manager. (They were informed at the AV-IVV event on 30 January 2026 and also by email).