Likelihood to Recommend
When Digital Guardian works well, it really is fairly seamless. You may notice a tiny bit of additional lag on some programs, but for the most part, when it functions properly, it's fairly unobtrusive. Therein lies the rub...when it functions properly. We had frequent program conflicts with Digital Guardian. We had one issue that caused Digital Guardian to completely cripple Microsoft Outlook, and similarly cripple Microsoft Excel. It took Digital Guardian weeks to even release any kind of fix for the issue, and the first several fixes did not, in fact, resolve the issue. We ended up having to completely remove it from our environment and are still waiting for a confirmed more stable version, as it simply caused far too much disruption to our user base, and also consumed an extremely large amount of time from our admins dealing with user issues related to these problems.
Sophos Mobile Control is greatly welcome when corporate networks allow BYOD on the office, and on the wireless networks around it. It allows you to control what the users are doing, and on this kind of explanation that I'm doing, perhaps EVERY company is suited for this kind of example. Nowadays the same user that has access to our corporate network is allowed to access multiple apps, that the IT security department isn't aware of. To have visibility is one of the most important things among security issues.
- Email data leaks - DLP software must prevent certain actions to work well. Let's say you try to copy and paste an SS # to an email, or upload sensitive data to your personal email account. Guardian Edge can prevent that, and then alert administrators that it happened
- Unauthorized file copies - Guardian Edge can also prevent users from copying files from a sensitive restricted area to somewhere else where they might be able to more easily exfiltrate it. A good example would be from a company file share to a less secure server or their own home drive
- Alerting Administrators of suspicious activities - Any time a user uploads a file to an upload service or personal email, it is logged and reported as an event to be reviewed. If it found nothing in scanning the data, it will still notify you that it happened so you can review it yourself to confirm it wasn't a false negative.
- Easy deployment.
- We are on next generation type of tools to be able to protect corporate data.
- Allows the management IT group to be able to control the probable theft of information.
- Program Conflicts - DLP software can often cause undesirable effects in programs, and Digital Guardian is no exception here. We had substantial issues with it locking up Microsoft Outlook and Microsoft Excel.
- Excessive false positives - If you don't tune the software properly, you may end up reviewing a lot of non-critical items, and that can lead to lots of extra admin time for fairly benign occurrences.
- Frequent program updates - Digital Guardian issues hotfixes and patches for their software frequently, and often times those updates will fix one problem, but cause another problem
- Reverting to older versions - We frequently had to revert to older versions after testing a fix for an issue, because the new fix would break something else. This became very frustrating to end users, administrators, and management.
- The platform was developed many years ago, a fresher look (even for the cloud-based console) would be appreciated.
- The ability to control mail platforms other than MS Exchange.
- The ability to control more features on iOS (knowing how the iOS Platform is at the moment).
DG is the only DLP platform I've used at my current employer. I used it at my previous employer as well, and we ended up abandoning future deployments of it due to many problems caused by it, especially with web browsers. This was in 2015, rather than the 2018 version I used with my current employer, but I feel it still warrants mentioning. DG works great...when it works. When it doesn't, it's a disaster.
Personally, haven't seen any other MDM on the market, but I feel since Sophos is greatly known to have easy to use products, that the others may not be as easy to use as Sophos Mobile Control. One of the key factors for organizations to choose Sophos Mobile Control and Security is because the Android OS (most attacked OS on the planet) is protected with award-winning antivirus and anti malware from Sophos. We have seen as advisors, how unprotected customers, get huge telecom bills because of the lack of security, since they think that an Android OS is healthy enough... big mistake. One simple thing I always tell friends, family and customers, protect your Android device with Sophos Security (it's free for home users).
Return on Investment
- Lost work hours - We lost lots of work hours due to admins having to troubleshoot program issues, and also manually remove DG agents from machines so that users could get back to work.
- No DLP protection because we had to mass uninstall it - We ended up pulling DG from our entire environment because of the problems it caused with Excel and Outlook. DG acknowledged this was absolutely their fault, but it took them quite a while to issue a fix, and the first several did not actually resolve the problem. We simply did not have the time or patience to beta test their software for them. As a result, our users have to run with no DLP protection, just so they can actually work.
- Negative perception of IT - DG actually ended up giving the IT Department quite a black eye. Users were nervous any time we mentioned we were doing software maintenance or patching, because they were fearful that some new problem was going to be introduced and they wouldn't be able to do their jobs. It has taken time and many hours to repair that trust.
- We invest and make the ROI very quickly seen, when management on any company sees what they were missing on possible data breaches.
- As a positive impact, it allows end users to quickly catch the true meaning for "Corporate Data".
- A negative impact, sometimes is that the end user feels as it's being followed all around, which depending on the profile, it's a must on a device with corporate data access and/or storage.
Sophos MobileSee All (11) Sophos Mobile Screenshots
Premium Consulting/Integration Services—
Entry-level set up fee?
Premium Consulting/Integration Services—
Entry-level set up fee?