Barracuda Sentinel vs Darktrace

• Phishing prevention; Sentinel has reduced our instances of phishing by some absurd number. Previously we were no only "underwater" when it came to phishing, we were drowning in it. This product reduced that number by upwards of 95%+.
• spear-phishing prevention; see above.
• User detection; using the free trial, Sentinel examined our network for the better part of 24-48 hours over our O365 instance, not our network. The product was able to a 100% rate identify all of the critical users in our firm AND show the number of hits they recently endured.
• The free trial not only identified critical users (people who had signature authority, spending authority, etc.) but it also started intercepting phishing attempts. When I went to sell this to my boss, I had a stack of over 60 attempts over two weeks to show her proof that the product worked.

Read full review

• It did an ok job of analyzing and collecting data. It used a span (mirrored) port and then using its own algorithm developed flow records.
• It did an ok job of segmenting traffic into networks - not always correctly, but ok.
• It tried to identify devices by type - once again, it did ok, but not that great.

Read full review

• The product is pretty solid so I am not sure how it can be improved. One thing I noticed recently, I am not getting the emails back from Sentinel when I send in a "miss". Used to be I got an email back saying "sorry we missed this, we are improving." That does happen anymore, so I am assuming that when I send a miss, the AI is getting better.
• I would expand this to cover all kinds of email fraud like ransomware and spam rather than creating another product.

Read full review

• False positives. Darktrace uses "AI" to create its alerts for "unusual" or "malicious" activity. It is very common to see an alert for completely benign and normal device behavior - PC tries to print for the first time in a while, for example.
• Antigena actions. To some extent, this is a continuation of the previous point. Darktrace can break the network connectivity of the suspected device automatically. The excessive number of false positives makes administrators reluctant to use this feature, though. Also, the default Antigena actions are not relevant to real-world problems as I saw them in my experience with Darktrace.

Read full review

• All positive, prior to deploying Sentinel we had at least 3 times when users bit on phishing attacks and bought $500 in iTunes gift cards as requested by the phisher. Our HR Director was also ready to send another phisher all the company W2's as requested. Since deployment, we sleep a little better at night.
• It's really hard to put a value on this product. It has been worth every penny by reducing our Spear Phishing and Phishing attacks by upwards of 90-95%+. How do you put a figure on that? In two months of testing, it intercepted 240+ Phishing and Spear phishing attempts. How do you attach a monetary figure to a situation where you are able to not have to deal with a problem and work on something else? 15 minutes per attempt? Times 60 in 60-days? $45/hour for an engineer? The ROI has been well worth it.

Read full review

• We had an ROI just during the POC. DarkTrace helped us identify a ransomware attack and we stopped it before it happened.
• The weekly reports more than pay for itself within the first few months.
• The powerful search capability helps us solve problems where other solutions fall short.

Read full review