Endpoint Protector by CoSoSys vs. Microsoft System Center Endpoint Protection

Endpoint Protector [by CoSoSys] is well suited for an environment where a data loss prevention solution is required and many different operating system types are used. It is also well suited for an organization that has a need to deploy a solution quickly. Endpoint Protector is not well suited for companies that need to have an API or other integrations with other IT tools.

Incentivized

It is well suited in environments that want a simple AV product/solution that, for the most part, can be easily deployed to client endpoints. It is also good for environments that want something that is easy to use by end-users, and also doesn't use a whole lot of system resources. It is less suited for environments that want an AV solution that is more robust feature-wise, or has more configurable options for the end-users. It is also less suited for those organizations that want an AV product to have the highest detection rate in the industry.

Incentivized

• Can be used remotely via public IP or VPN
• Integrates well with Active Directory
• Easy to deploy

Incentivized

• Microsoft System Center Endpoint Protection offers exceptional threat protections for signature-based "known" threats.
• The signatures are constantly updated and management of this application is super easy with the use of Microsoft SCCM.
• The application is very much a "set it and let it" type of deployment. Once you install it, there are very little configuration or changes that need to be made.

Incentivized

• App integration - CoSoSys supports a lot of industry standard apps but fails to provide protection on 3rd party applications.
• Complete disk encryption.
• Web filtering features.

Incentivized

• The product could improve in the area of having better mechanisms in place with how the SCEP client is deployed/installed from the server on the management side. We have run into this firsthand with the client not installing on an endpoint, and then having to take the time to investigate why it was not installing.
• A second improvement that can be made is to keep trying to improve the products detection rate for finding malware/viruses. The case can be made that there are some products out there that do a better job at this and have a higher detection rate.

Incentivized

There was a time and a place in which Microsoft System Center Endpoint Protection was an excellent choice to provide threat protections. However, now that threats have been evolving, so too does the need for more advanced protections. In its current offering, it just no longer meets the needs of our organization in terms of providing protections against threats.

Incentivized

Endpoint Protector [by CoSoSys] was able to be installed on all major operating systems. Endpoint Protector was also able to perform block actions and do it at a granular level among the endpoints. Business needs required a traditional data loss prevention and Endpoint Protector met those needs. We had a need to block some USB storage events and Endpoint Protector met those needs.

Incentivized

How SCEP stacks up against some of the other AV solutions/products is that it does a pretty good job overall (not the best in the industry) at detecting/removing malware, which is the main focus for a product like this. It is also easy to use on the end-user side, which can't be said for some other AV products on the market. I was not involved with the selection/purchase of the product in the organization, but I'm almost certain the organization selected this based on the tight integration with Microsoft System Center Manager, which is used in the organization. Also, given the fact that SCEP is tightly integrated and works well in organizations that utilize Microsoft products, it was probably another factor in selecting this. Lastly, the cost of licenses was probably lower (because of System Center already being in place) than other AV products.

Incentivized

• Didn’t work as expected
• Not sure yet if we are going to renew it, thankfully we didn’t make a 3 year contract required by them.
• The are not many options in the market for source code detection, so we may have to stick with it

Incentivized

• There was little/no cost associated with this software since we are utilizing SCCM and are paying license costs for that anyways.
• The level or protection is excellent for the cost of the software.
• There was at least one instance in which Microsoft System Center Endpoint Protection identified a crypto-malware, but not before it had already started to encrypt many of our files. So it did detect the threat, but since it was a little delayed we still were infected.

Incentivized