BeyondTrust Endpoint Privilege Management vs. Microsoft System Center Endpoint Protection

It is an absolute must in all organizations where security is taken seriously. For organizations where there is a tendency among the users' end to abuse access privileges, this tool comes in handy. It has features that would enable the administrator to look through video logs to see what was done by a specific user. Also has the capability to terminate or lock users/ user sessions.

Incentivized

If an organization is all Windows-based Active Directory systems, then System Center Endpoint Protection is worth deploying and using. If it's a hybrid of operating systems, then an alternative solution is best.

Incentivized

• Reporting capabilities for user activities, including complete session recordings
• Integration with SAML for SSO and secure LDAP authentication
• Jump point servers for central isolated access from outside the network

• It is easy to use and configure. This is a benefit, not just for the IT/Admin team, but also for the end-user, as they can easily set how and when to run scans.
• It is good a identifying threats and removing these threats. When looking for a product such as this, it is important to really look at these two areas to really see how the software will work in a real-world environment. SCEP is one such product that does really well at both of these things.

Incentivized

• Better communication to customers on new release compatibility
• Crowd-sourced rule logic for specific applications would be nice (I hear underway)
• Technical support processes could be a bit improved

Incentivized

• Not so much a limitation on the software itself, but the fact that is primarily only "signature" based, it cannot detect threats that have mutated.
• This software provides virtually no protection against zero-day threats.
• The System Center Endpoint Protection does not offer protections based on behavioral analysis.

Incentivized

BeyondTrust Endpoint Privilege Management is really usable thanks to the Cloud platform that provide central management, analytics, updates and policy definitions. For policies, quickstart covers around 80% of the overall configuration and we just have to define home made applications and dedicated use cases. From the user perspective, messages can be customized so it's easy to understand for user and they have an endpoint application to follow workflows approval.

Incentivized

It is integrated with Windows and SCCM, making it easy to use, license, manage, and update. Additionally, it is straightforward to diagnose when virus and ransomware alerts are detected on endpoints. IT Service Desk management is also easy.

Incentivized

We've had no availability issues.

Incentivized

We've had no performance issues.

Incentivized

The product performed to the level of our requirements.

Support is pretty good overall. Since it's a Microsoft product, there are a number of different options for either end-users or IT Admins to get help with this product. This includes phone support, email, web KB articles, community forums, etc. This support is also available 24/7, which can't be said the same for every AV product out there. Also, organizations can opt to buy into Enterprise support, which gives the added benefit of faster response times, training by the vendor, etc.

Incentivized

The in person training was great. Very informative and the trainer was great. I would highly recommend this option if you're hesitant. Any questions can then be directed to support. Support is great as well, and will definitely help answer any questions. I would definitely
recommend adding some type of training as it was very helpful for our
staff.

Incentivized

It was informative and very helpful. They provide a lot of courses that give you exactly what is needed to manage the product. Any questions can then be directed to support. I would definitely recommend adding some type of training as it was very helpful for our staff. The online training sufficed for us.

Incentivized

BeyondTrust was super helpful with implementation and it only took a few weeks to get it up and running.

Incentivized

BeyondTrust Endpoint Privilege Management has more features than CyberArk and more detailed options for configurations. BeyondTrust Endpoint Privilege Management is more focused on setting up access-related endpoints, which requires some fine tuning and understanding for use cases where a single endpoint has to be shared with multiple vendors. CyberArk's setup is more geared to users' accounts and then endpoint management under the user accounts.

Microsoft System Center Endpoint Protection was the logical choice for our organization since we were utilizing so many other Microsoft solutions. We have since realized the need for more advanced threat protections and primarily use SCEP as an additional level of protection. Our primary protection is being provided by Carbon Black because of it's advanced heuristics and behavioral analysis capabilities

Incentivized

It's very easy to deploy with minimal interruption.

Incentivized

The integration team was great.

Incentivized

• We are able to securely monitor activity from vendors accessing our network.
• This meets our cybersecurity objectives of securing our OT networks.
• The benefits far outweigh the initial cost of the software.

• The Windows 11 version of SCEP is significantly better than the Windows 10 and older iterations, and it has saved us from virus issues in the past.
• This is faster and less work to deploy to a pc when we build and deploy them.
• No extra admin and costs for AV licensing in our case, which makes renewal times easier on IT Management.

Incentivized