Symantec Endpoint Protection Mobile vs. Sophos Intercept X

Although
it is extremely rare, performance issues can arise when we protect data because
of the rising volume of traffic on our system. The constant version updates
annoy me a lot. It's difficult to upgrade the clients frequently if you have a
larger number of clients.

Sophos Intercept-X is well suited for any environment big or small. There is even a home version that is free that I highly recommend for anyone at home. If you are looking for endpoint protection that is centrally managed, catches everything, and has many features this is the product for you.

Incentivized

• Mobile malware protection
• content filtering
• Root/Jailbreak detection
• device secure configuration enforcement

• Sophos Intercept X is great at preventing malware infections and rolling back their effects. I have seen this happen hundreds of times since we installed it
• When combined with Sophos Central, you have an easy to use dashboard where you can manage all installations from a single pane of glass.
• It's easy to deploy on machines and stays updated.
• Good reporting features including alerts sent to the admin if there's ever something wrong with it.

Incentivized

• better reporting
• reduce false positive
• support can be better

• Sophos OOTB policies are very strict and they don't offer anything less strict without you creating new custom policies. I'm sure this is deliberate because the product starts you out in the safest way possible but it means that you will have lots of calls to your tech support desk when you first deploy it unless you do somewhat extensive testing beforehand.
• Sophos Intercept X is currently broken (at least the DLP component) by having secure boot turned on in the UEFI/BIOS. If any user wants to be able to write data to a USB drive or floppy from their PC (yes we still have a couple users who need to use floppies) we have to turn off secure boot on their PC, even if the DLP policy for that user/PC combination specifies that the user and PC are allowed to write to USB/floppy. This would be a very serious problem if it weren't for the fact that we have very few users who need to write files to USB. For us it's OK but I bet it would be a deal-breaker for others.
• I don't see a whole lot of evidence that Intercept X is any different than any other anti-virus, so maybe their admin alerts just don't clearly identify when they have identified a zero-day threat or maybe we just haven't had any zero-day threats.

Incentivized

We have gotten a great product for the price. Easy to maintain and set up on new devices. Support is great and easy to work with and understand.

Incentivized

Very easy to use

Incentivized

Most of the support reps are fantastic. There have been a few though that have had to be escalated via Account Manager when they haven't followed up but this is a rare instance, and often followed up by the Support Manager for APAC.

Incentivized

Best thing was the help pushing out via group policy and was able to get instructions for that on sophos site

Incentivized

Even programmers who build complex code do not experience any
negative effects from this lightweight agent, which cannot be readily destroyed
or removed so that devices are always being watched. Additionally, it offers
deception technologies that other suppliers frequently do not in comparable
solutions. It has the capacity to proactively quarantine potentially infected
devices.

Best in class... PERIOD... Bit Defender is a good AV product by itself, but it lacks in Next Gen Heuristic detection. It has allowed malware to get past it in our client environments, even with Admin permissions restricted. Sophos is hands down a superior product when paired with Intercept X. Again, if you don't buy the whole stack, you're selling yourself (and your security) short. We live in a world where security is no longer a single product

Incentivized

• positive: all companies mobile device are secured and no need to reset device frequently
• positive: connect to a SIEM for suspicious events correlation
• positive: provide employees BYOD protection

• It keeps us safe from malware attacks, thus giving us peace of mind to focus on our work, thereby increasing productivity
• It provides protection against ransomware attacks that are usually very expensive to resolve once they occur and usually leads to loss of important files and resources.