OpenText EnCase Endpoint Security vs. WithSecure Elements Endpoint Protection

It is more suited to environments that have a large internal user base since there will be more incidents that require forensic analysis. It will be less suited for environments that have a small internal user base due to the fact that there would be fewer incidents that require forensic analysis, but it really depends on the industry that a small internal user base is a part of.

Incentivized

If you're looking for basic signature-based anti-virus at a reasonable price, F-Secure Protection for Business could be a good choice. It does a good job for anti-virus but doesn't include the more advanced features of more expensive products like intrusion detection, forensics, and protection of zero day exploits. It may work well in combination with other tools.

Incentivized

• Functionality meets minimal requirements, since it performs forensic investigations as advertised.

Incentivized

• Anti-virus (classic signature-based). This is a classic anti-virus tool without some of the fancy bells and whistles of more expensive products.
• Real-time protection. The product can do filesystem scheduled scans as well as real-time analysis of files.
• Browser protection. It comes with a decent browser plugin that can block access to malicious sites.

Incentivized

• Their UI definitely needs to be more user-friendly, right now it is very cumbersome to run and view investigations.
• Authentication mechanism should be a simple username/password, not certificate-based which is difficult to manage.
• Needs better support documentation for the product, it is difficult to find solutions to issues that we run into.

Incentivized

• It does not provide "next gen" features like zero day protection, forensics, intrusion detection and analysis.
• The management interface is clunky and difficult to use.
• Real-time protection and firewall services can interfere with legitimate activities at times and make it difficult to troubleshoot.

Incentivized

Because support is non-existent whenever you have a functionality issue using the product. Also since the UI is so cumbersome to use we could use as much support as possible. Whenever we ask for support we are told to take the training which costs us more money. I believe that support should be easily accessible and affordable for the client

Incentivized

The other forensic tool that is a direct competitor to EnCase and wasn't listed above is the Forensic Toolkit or FTK. I believe that FTK is a better tool overall simply because it is easier to manage and use when it comes to investigations. Unfortunately, I wasn't part of the decision process and EnCase was the tool selected, otherwise, I would have recommended FTK.

Incentivized

F-Secure stacks up very well against competitors like McAfee and Norton. Cost is very reasonable, performance is great, and it does as good (or better) a job of these more well-known products. F-Secure particularly works well for non-profits looking to negotiate for a more reasonable rate.

Incentivized

• One negative impact would be that since the UI is cumbersome to use we would need to spend more money on training which is not always feasible.
• Another negative impact would be that since there is not much support available this slows down investigations due to finding out how to troubleshoot and fix functionality issues.
• One positive impact would be that since it meets minimal requirements when it comes to forensic analysis it gives us visibility on any malicious activity occurring on a user's endpoint.

Incentivized

• Positive - very generous discounts for non-profits make this inexpensive compared to other products.
• F-Secure has caught some (but not all) malware incidents on our workstations, which have saved us time and money.
• The cost/benefit ratio is very high. For what you're getting, this is a reasonably priced product.

Incentivized