Symantec Email Threat Detection and Response vs. IRONSCALES

From a price point Symantec cannot be beat in EDU. However, for better EDR a more robust, fully featured solution is desirable. I am not sure if Broadcom is continuing to develop the product either after purchasing it.

Incentivized

When deploying to a client who is very sensitive to email routing disruptions like those that can occur by putting an email filter in front of the email server, IRONSCALES deployment is extremely simple. It hooks into the user's mailbox, and not only filters point forward but a number of days back.

Incentivized

• Excellent integration with other Symantec products
• E-mail notification in case of an incident
• Excellent customer support

Incentivized

• Adding malicious sources taking time
• Reporting function is very basic
• Symantec ATP has no integration with Symantec ETDAD.

Incentivized

We are making a migration from Symantec to SentinelOne in the near future for easier deployment, better EDR and management functionality.

Incentivized

Postini, Windows Defender (built into M365) & Trend Micro email security. Postini was purchased by Google and then went away. Trend Micro was very basic at the time I used it (many years ago) and utilized purely blacklisting tech but that was before the AI boom. Windows Defender is not as multi-tenant friendly.

Incentivized

• It has been a good solution for the time we have used it.

Incentivized

• Understanding its limitations with regards to cyber security education campaigns
• Rigid domain lists. Might be attributed to how we purchase through a distributor but if a client needs to add a monitored domain name, it must be requested instead of allowing me to do it myself.
• Unclear if there have ever been any outages or service disruptions. Since it is monitoring mailboxes and not routing email, there is no outage client side. This could be a benefit but it also means end users might be unprotected during an outage.

Incentivized