AWS CloudTrail vs. Symantec CloudSOC CASB

It is necessary to enable [AWS] Cloudtrail when using AWS in a production environment, otherwise you will not have any idea what is happening within your accounts. Third party monitoring applications will all require [AWS] CloudTrail to be enabled as well. I would not recommend it solely as a monitoring tool, to get the most out of it you must send the logs elsewhere. Either to Cloudwatch logs or a third party product.

Incentivized

If you want to extend your Endpoint DLP to cloud: Apps, Web & Email, Then CloudSOC DLP detection Services help you to control with clouds apps & DLP detection Services with WSS help you to control all web. Also, cloud DLP detection services for Email will help you to control visibility & control over Office 365 Exchange, On prem-exchange & Gmail. In the case of other email services- we need to consider other solutions like Forcepoint One.

Incentivized

• API Log
• User activity tracking
• Real-time alerts

Incentivized

• As we know real data protection starts with Data Detection It helps us in the detection of any data like related to GDPR, Source Code, Designs, Financial Plans, SSN, IDs, etc.
• All Channel coverage - Cloud , Email Data at rest, in-use, in-motion.
• Data Formats- Described data, Structured & Unstructured Data image forms like presentation formats, Text & Markup, word processing, Spreadsheet formats, graphic formats, etc.
• Machine Learning - Proximity, Derivative, Partial, Pattern, Large data sets, Distributed, Dynamic embedded.

Incentivized

• [In my experience] Cost can easily get out of control with multiple trails on full logging
• Logs can be difficult to decipher

Incentivized

• Broadcom CloudSOC CASB also needs to more focus on data classification, Classification will help to control the false positive & fast negative.
• Broadcom has more focus on SMB business As SMB & Mid Enterprise is going to be more aware of cyber security especially start-ups.

Incentivized

I think in the end, CloudTrail has more features and you can dive deeper inside the logs so it depends on your usage and what you expect in the end to make the right choice, I would say that both tools are really useful and bring a lot of benefits to I.T. companies.

Incentivized

We were using Broadcom Symantec Endpoint security Enterprise, Hybrid subscription services & DLP solution at prem, which helped us in CloudSoC CASB Use Case & we have seen PoC of same, which was easy to integrate with existing security architectures. Overall they have offered us the best commercial in comparison with competitors.

Incentivized

• Allows us to investigate any strange api actions
• Increases security
• Audit trail of changes made in AWS

Incentivized

• Securing the digital transformation. CloudSOC CASB helps the organization's Digital journey by reducing complexities & poor experience of end-users.
• Cloud SOC helps us to comply with multiple Compliance like HIPPA, PCI-DSS, GDPR, etc.
• Security breaches cause billion-dollar losses to enterprises, CloudSOC will help to assist in the best industry practice by having predefined templates specifically for each industry.

Incentivized