Endpoint Protector by CoSoSys vs. Trellix Endpoint Security ENS

Endpoint Protector [by CoSoSys] is well suited for an environment where a data loss prevention solution is required and many different operating system types are used. It is also well suited for an organization that has a need to deploy a solution quickly. Endpoint Protector is not well suited for companies that need to have an API or other integrations with other IT tools.

Incentivized

It provides great web security and will protect your devices against viruses and malware when paired with other security software and hardware. For instance, we have multiple layers of security set up so if McAfee misses something then one of our other barriers will catch the infection or intrusion before it reaches the network. I would not suggest using this product as a standalone agent because I do not think it will be as effective when working by itself. The dashboard also makes it convenient to manage devices, policies, and settings from wherever you are so it's an ideal solution for any IT department to use. I would just suggest using something else as a backup so your network isn't left vulnerable.

Incentivized

• Can be used remotely via public IP or VPN
• Integrates well with Active Directory
• Easy to deploy

Incentivized

• Provides high fidelity alerting.
• Allows CSOC analysts to perform forensic triage and alert investigations through containment from a single pane of glass.
• Provides alert telemetry across on-disk and in-memory attacks.
• Supports many additional 'bolt-on' modules to provide additional alert context or capabilities.

Incentivized

• App integration - CoSoSys supports a lot of industry standard apps but fails to provide protection on 3rd party applications.
• Complete disk encryption.
• Web filtering features.

Incentivized

• The amount of false detections especially the negative ones needed to be reduced.
• It requires more optimization. It tends to make the PCs slower.
• It almost doesn't have the ability to heal. This is very important as we need our sensitive data to be recoverable.
• It doesn't have any free scanning functionality. Our users using personal machines cannot scan in case of an incident. This could be added like Malwarebytes.

Incentivized

The support of product was very good when we initially implemented the solution. We were getting fats replies and could see the customer approach. After a while the level of support was not following the SLA's and the replies were getting very confusing and late.

Incentivized

Endpoint Protector [by CoSoSys] was able to be installed on all major operating systems. Endpoint Protector was also able to perform block actions and do it at a granular level among the endpoints. Business needs required a traditional data loss prevention and Endpoint Protector met those needs. We had a need to block some USB storage events and Endpoint Protector met those needs.

Incentivized

Unlike Trellix Endpoint Security Symantec Endpoint provides less information about events on the user side. Trellix give an opportunity to see information about virus detection on a user machine as quick as it possible, so we were able to catch the signs of virus propagation early and prevent the spread of damage

Incentivized

• Didn’t work as expected
• Not sure yet if we are going to renew it, thankfully we didn’t make a 3 year contract required by them.
• The are not many options in the market for source code detection, so we may have to stick with it

Incentivized

• From an auditing standpoint, we can show that our workstations/servers are protected.
• Even though it cant identify more advanced/targeted malware, it is still good to identify the more obvious malware which occurs daily in my enterprise.
• Since it can be easily deployed, the products can easily get deployed on all systems in the environment for optimal anti-malware protection.

Incentivized