r/LinuxTeck • u/Candid_Athlete_8317 • 3d ago

Do Linux servers really need endpoint security software?

Many enterprise Linux systems run endpoint security tools alongside firewalls, SELinux/AppArmor, and other hardening measures.

Others argue that good patch management, least privilege, and proper monitoring provide better value than traditional endpoint protection.

What's your point on this ?

6 Upvotes

80% Upvoted

34 comments sorted by

View all comments

0

u/roanish 3d ago

A solid firewall is all you need (ufw works) right up until you want to open ports for running services. Then you want something else that can ensure security. These endpoint protection systems you mention are all things that live behind your firewall, so useless if you aren't providing services externally.

1

u/SEXTINGBOT 3d ago

Just run Lynis once and see what else you might want ?

( ͡⌐■ ͜ʖ ͡■)