Check Point Harmony Browse vs. Trellix Endpoint Security ENS

Check Point Harmony Browse is particularly well suited for protecting against the various zero-day attack vectors, which is what it is designed to do. It offers very good protection against users visiting phishing sites, malware sites, downloading or opening ransomware, and just generally providing the safety net required in a corporate environment against users visiting potentially harmful websites.

Incentivized

It provides great web security and will protect your devices against viruses and malware when paired with other security software and hardware. For instance, we have multiple layers of security set up so if McAfee misses something then one of our other barriers will catch the infection or intrusion before it reaches the network. I would not suggest using this product as a standalone agent because I do not think it will be as effective when working by itself. The dashboard also makes it convenient to manage devices, policies, and settings from wherever you are so it's an ideal solution for any IT department to use. I would just suggest using something else as a backup so your network isn't left vulnerable.

Incentivized

• Protection from phishing.
• protection from malware.
• protection from ransomware.
• General protection against zero-day attack vectors.

Incentivized

• Provides high fidelity alerting.
• Allows CSOC analysts to perform forensic triage and alert investigations through containment from a single pane of glass.
• Provides alert telemetry across on-disk and in-memory attacks.
• Supports many additional 'bolt-on' modules to provide additional alert context or capabilities.

Incentivized

• When inspecting traffic there can be a some performance degradation.
• We have had a few instances of protections interfering with legitimate traffic. Worth the trade-off though.

Incentivized

• The amount of false detections especially the negative ones needed to be reduced.
• It requires more optimization. It tends to make the PCs slower.
• It almost doesn't have the ability to heal. This is very important as we need our sensitive data to be recoverable.
• It doesn't have any free scanning functionality. Our users using personal machines cannot scan in case of an incident. This could be added like Malwarebytes.

Incentivized

So below is my breakdown, Pro's: Centralized Management, Comprehensive Protection and customization. Con's: Initial cost

Incentivized

The support of product was very good when we initially implemented the solution. We were getting fats replies and could see the customer approach. After a while the level of support was not following the SLA's and the replies were getting very confusing and late.

Incentivized

We were already in the Check Point ecosystem and therefore did not look into alternatives like CrowdStrike or Kaspersky. Looking back, Check Point stacks up very nicely with the competitors on the market in terms of features, but I can't speak to actual real work performance having not used the others.

Incentivized

Unlike Trellix Endpoint Security Symantec Endpoint provides less information about events on the user side. Trellix give an opportunity to see information about virus detection on a user machine as quick as it possible, so we were able to catch the signs of virus propagation early and prevent the spread of damage

Incentivized

• Improved security posture overall with reduced risk.
• Relatively low cost and easy implementation easily recouped by allowing us to shift resources to other priorities and away from manual monitoring tasks.
• Peace of mind for our users knowing they have a safety net in place.

Incentivized

• From an auditing standpoint, we can show that our workstations/servers are protected.
• Even though it cant identify more advanced/targeted malware, it is still good to identify the more obvious malware which occurs daily in my enterprise.
• Since it can be easily deployed, the products can easily get deployed on all systems in the environment for optimal anti-malware protection.

Incentivized