BeyondTrust Endpoint Privilege Management vs. Microsoft System Center Endpoint Protection

It is an absolute must in all organizations where security is taken seriously. For organizations where there is a tendency among the users' end to abuse access privileges, this tool comes in handy. It has features that would enable the administrator to look through video logs to see what was done by a specific user. Also has the capability to terminate or lock users/ user sessions.

Incentivized

It is well suited in environments that want a simple AV product/solution that, for the most part, can be easily deployed to client endpoints. It is also good for environments that want something that is easy to use by end-users, and also doesn't use a whole lot of system resources. It is less suited for environments that want an AV solution that is more robust feature-wise, or has more configurable options for the end-users. It is also less suited for those organizations that want an AV product to have the highest detection rate in the industry.

Incentivized

• Reporting capabilities for user activities, including complete session recordings
• Integration with SAML for SSO and secure LDAP authentication
• Jump point servers for central isolated access from outside the network

• Microsoft System Center Endpoint Protection offers exceptional threat protections for signature-based "known" threats.
• The signatures are constantly updated and management of this application is super easy with the use of Microsoft SCCM.
• The application is very much a "set it and let it" type of deployment. Once you install it, there are very little configuration or changes that need to be made.

Incentivized

• design
• user experience
• software functionality

Incentivized

• The product could improve in the area of having better mechanisms in place with how the SCEP client is deployed/installed from the server on the management side. We have run into this firsthand with the client not installing on an endpoint, and then having to take the time to investigate why it was not installing.
• A second improvement that can be made is to keep trying to improve the products detection rate for finding malware/viruses. The case can be made that there are some products out there that do a better job at this and have a higher detection rate.

Incentivized

The product performed to the level of our requirements.

There was a time and a place in which Microsoft System Center Endpoint Protection was an excellent choice to provide threat protections. However, now that threats have been evolving, so too does the need for more advanced protections. In its current offering, it just no longer meets the needs of our organization in terms of providing protections against threats.

Incentivized

n/a as we skipped doing a compare

Incentivized

How SCEP stacks up against some of the other AV solutions/products is that it does a pretty good job overall (not the best in the industry) at detecting/removing malware, which is the main focus for a product like this. It is also easy to use on the end-user side, which can't be said for some other AV products on the market. I was not involved with the selection/purchase of the product in the organization, but I'm almost certain the organization selected this based on the tight integration with Microsoft System Center Manager, which is used in the organization. Also, given the fact that SCEP is tightly integrated and works well in organizations that utilize Microsoft products, it was probably another factor in selecting this. Lastly, the cost of licenses was probably lower (because of System Center already being in place) than other AV products.

Incentivized

• Difficult set up
• Difficult GUI
• Hard to understand in the beginning

Incentivized

• There was little/no cost associated with this software since we are utilizing SCCM and are paying license costs for that anyways.
• The level or protection is excellent for the cost of the software.
• There was at least one instance in which Microsoft System Center Endpoint Protection identified a crypto-malware, but not before it had already started to encrypt many of our files. So it did detect the threat, but since it was a little delayed we still were infected.

Incentivized