CyberArk Privileged Access Management vs. Sophos Central Device Encryption

The system is great for enterprise or larger IT departments or teams where temporary or full access may be given using privileged IDs. Requirements for needing local admin access is also eliminated which can help with specific Windows workstation related tasks. It can be very useful when working with remote teams or contractors who may need temporary access to a system when required.

Incentivized

It is mid-level when it comes to running it by a non-IT person. I have no technical/IT training and can figure out on my own (or with a little web search) how to do most tasks. It may not be best for the very tech-challenged operator.

Incentivized

• Automatically discover new servers on the network and take control of the local admin password by vaulting it and ensuring nobody knows the password. A different password on every server.
• Automatically roll the password in a configurable manner - after each use, after a certain period of time, etc.
• Track and govern sensitive account usage by ensuring only properly authorized users can access the vault and obtain the credentials and then monitor usage.

Incentivized

• Centralised portal for both Anti Virus and Encryption
• Internet-facing with the ability for global / multi region access for large organizations
• Multi-level, built-in admin roles for different access levels for your Support Team. Also, you can define new roles to tailor to your organization

Incentivized

• GUI - right now everything is on one page/dashboard. Some level of folder/Safe type view would be great
• More options when storing passwords - especially for network based passwords
• Better integrations with vendors like Cisco so that admins dont need to really get the password from the vault (think Last Pass type add on)

Incentivized

• Interface is a little difficult to get Hands On. It can be simplified for better adaptability
• XDR compatibility should be enhanced
• More simplified white-books should be provided to train the non tech teams
• Commercially also the cost should be improved for different industry segments

Incentivized

Solution is easy to use and administer

Incentivized

It’s very usable once the complexity of deployment has completed. It is a useful tool that is easy to learn and the user interface is laid out well. It works with SSO for our organization which makes secure login very fast as well. It works well across our need of on premises systems and cloud very quickly.

Incentivized

I am pretty satisfied with Sophos Central Device Encryption's overall capabilities. It is easy to implement and ultimately brings more peace of mind because fewer tickets are generated. As a result, security within the organization is also improved. Another significant advantage is that you can quickly see the statuses in real time on the dashboards. This gives you a better overview and reduces the chance of missing minor security settings.

Incentivized

I've been an engineer and architect in the Identity space for many years and CyberArk is the #1 tool I've found to help me secure accounts and credentials. I've architected CyberArk and built the implementation from the ground up twice in previous roles and found it here upon my arrival at my current job. I wouldn't want to have to live without it as it helps me sleep at night

Incentivized

These other vendors have most of the safe features, but there were some things that I think CyberArk performed better while evaluating the other solutions. AWS secret manager was not available in one of the products and this was definitely needed in my environment. Also, bulk loading of accounts had a lot more flexibility in CyberArk than the other solutions. They offer both API and GUI options where the other vendors may not offer both.

Incentivized

At that time, we chose Sophos based on the reputation and our partnership with our partner. And in general Sophos could give us more benefit than other competitors with the similar solution. However we do not feel comfortable to disclose information about comparison with other solutions. Despite that, we think Sophos could deliver our requirements very well with the cost that were reasonable for us.

Incentivized

• Decreased the probability of an external cyber attack to privileged accounts..
• Management can control privileged account life cycle management more effectively
• Recording privileged sessions allows our organization to play back exactly the point of a breach or malicious behavior
• Automated system to manage and verify passwords, as privileged accounts are constantly created and deleted
• Automatic PWD change functionality will substantially decrease probability of PWD theft or misuse.

Incentivized

• It's had a positive impact as it's allowed us to effectively secure hard drives with bitlocker encryption
• A larger part of our work force works from home, and Sophos can be deployed remotely and will start encryption almost straight away on any computer that isn't already encrypted.

Incentivized