AWS Config vs. Symantec Client Management Suite

It's really good if your infrastructure services is all in AWS, that means everything could be audited and monitored using AWS config. You also can create alarms to notify you or your team about any changes on your AWS resources which is very useful to prevent abuse if you have a fairly large team. It's also very useful whenever some third party wants to audit your AWS resources, if you have a fairly comprehensive AWS config configured, the auditing process will be easy since they only need to look at your AWS config setup.

Incentivized

Whenever you have computers that aren't easily accessible or you have a big site to cover (or multi location), Symantec Client Management Suite (CMS) is really great to manage all your computers, if it's for installation, software, licenses or even status. Setting up all you need from CMS can take some time, especially when you're in a multi-location site. We had to ask the Symantec engineers to help us a couple of times and set things up because even if we followed the documentation, it wasn't an easy task. But at least, the Symantec engineers are people that know what they do and they're really efficient at it.

Incentivized

• The ability to track changes in AWS is paramount, AWS config allows you to do this
• Allows the auditing of an AWS account
• Can view history of an account that has AWS config enabled

Incentivized

• Patch Management: We are able to easily deploy patches to all our workstations and accurately report on compliance.
• Software Delivery: We do a lot of software deployments to our end users and with CMS we can quickly create policies or tasks to perform these deliveries and get quick results on our success or failures.
• Inventory: Ease of use to get reports of what workstations have what software installed, patch levels, or hardware specifications.

• It's only AWS, no third party.
• Not the most intuitive interface, but with a little getting used to it is OK.

Incentivized

• More transparency with the roadmap would be a welcome change. New and upcoming features are usually a surprise until a major Symantec Event takes place but little is heard about those features before and even after, in some cases, leading up to a release.
• Documentation for some items is poor. Especially around the Workflow product. It was intended that the documentation for the elements in a workflow would be crowd-sourced, which is a good idea, but in order for that to happen, more people need to be using it and taking the time to draw up the documents.
• Cost. Its always a big topic, especially in higher-ed, but Symantec could do more to lower its costs for some product lines in order to gain more acceptance and support. If that was done and more institutions could get their student workers to use the product, once they leave college and go into the "real-world" there is a possibility that they would start recommending Symantec products because of their use in College.

Incentivized

So far so good - no major issues with that technology.

Incentivized

Would rate lower for other workloads but for AWS workloads its simple to set up, cost effective and customisable. Primary use case is compliance from a governance perspective.

Incentivized

Support at Symantec isn't that great. Client Management Suite isn't even listed on the Support Portal when trying to open a ticket. Your best bet for support is actually the user groups that Symantec hosts. The members of the groups are usually very responsive. With Broadcom buying Symantec, I've seen a huge jump in personnel leaving Symantec, so I'm assuming the support is just going to get worse. Recently for a simple question, I reached out to 5 people just to find out 4 of the 5 had left the company.

Incentivized

I do not know or have used any other product in AWS cloud space that matches what AWS Config provides. We have some custom built monitoring and governance, however that is there because AWS Config does not provide it currently.

Incentivized

Although there are other tools that can be utilized I don't believe those tools are as robust as Symantec Management Platform. The Symantec Management Platform was chosen because of the value it returns internally and for our customers. You can pull just about any data element from an endpoint and provide detailed reports or great graphs for the C-Level

Incentivized

• Enforcing audit requirements
• Easy to set up alerting when there are rule breaches
• Auto remediation reduces the manual policing of such breaches

Incentivized

• SMP allows us to centrally manage all of our endpoints with little to no end user interaction.
• With the new P2P downloading our bandwidth constraints have been almost completely removed.
• Cloud Enabled Management (CEM) allows our remote users to receive the same updates as in-network devices without the need for a VPN connection.

Incentivized