We use Forefront on our systems. It doesn't have to be complex. We have it installed the same way we would have installed Security Essentials. Each machine stands alone with no central hub.