Cisco TrustSec vs. CrowdStrike Falcon Identity Protection

• Control access to critical enterprise resources by business role, device type, and location, so policy changes can be made without redesigning the network.
• Easily manage access control and segmentation while maintaining compliance.
• Create and manage policies in an easy-to-use matrix.
• Reduce the need for costly network re-architecture by automating firewall rules and access control list (ACL) administration.

Incentivized

Identity Protection is well suited for organizations that need to be monitor AD/Entra for suspicious activity. During a Penetration Test our MDR didn't alert on some odd protocol implementations, but ITDR did. It is also simple to setup for MFA on RDP as well. There are other solutions for it, but found I got more out of ITDR than I did from Duo. ITDR is less suited for smaller organizations since it has a 250-seat minimum. They should lower it to at least 100.

Incentivized

• Reduce operational expenses by simplifying network segmentation and defining security groups based on business roles, not IP addresses.
• Limit the impact of a data breach by quickly isolating and containing threats using technology already in your network.

Incentivized

• The MFA component has worked great when it comes to privileged accounts accessing RDP.
• We wanted to stop lateral movement between endpoints and with CrowdStrike Falcon Identity Protection we were able to do that.
• Identity has done a great job at supplementing our MDR service with telemetry.

Incentivized

• Help and solutions if needed, support

Incentivized

• It's not really a fault of the product, but unless you have Falcon installed on all your endpoints your visibility is limited.
• I've yet to get MFA working on CIFS and Powershell traffic.
• The interface could be streamlined a little. CrowdStrike Falcon Identity Protection keeps changing where things are.

Incentivized

While the product is solid, I do find there are an excessive number of sections you can navigate to. It takes some time getting used to, but it is a very powerful product. It's not something you'll master right off the bat.

Incentivized

When comparing to Cisco Duo, I felt like the product offered more than just MFA on RDP. When comparing to Silverfort, it came down to pricing. Silverfort was double the cost and I didn't like how Silverfort had separate SKUs. If you wanted MFA on everything the cost increased dramatically.

Incentivized

• Reduction in IT operational costs

Incentivized

• Being able to see right away during a Penetration Test that the product detected anomalies, but our MDR service didn't. It allowed us to go back to the MDR service to show them the results and fix the issue from slipping through the cracks.
• By satisfying the requirements from our insurance provider, our premiums didn't go up (MFA on RDP).

Incentivized