Symantec Encryption vs. VMware Carbon Black EDR

I think Symantec Endpoint Protection provides very good protection from all kind of threats. Due to the lean interface, it is sure easy to use. However, set up and start up is time-consuming. It can cause old computers to slow down during start up. Overall, it does perform at the top level as a business-level endpoint protection solution. I feel very safe while working at the office as I've never encountered any issues with this software before. Any kind of spyware or malware is defeated instantly by the help of this up-to-date database.

We are able to check if any phishing link was visited by the user or not. To check for the whether any file is executed on the machine or not. To check on which port connections are being made by the machine. To create custom watchlist for alert to be investigated by an analyst. To check every process executed in the machine for a specified range.

Incentivized

• Ease of use for end users. The outlook add in helps with encryption.
• The auto encrypt rules are very intuitive and work every time.
• Encryption strength.

Incentivized

• Process tree view of endpoint activity
• Ability to pull files from host
• Threat Intelligence integration
• Isolate a host

Incentivized

• The process to set up a user account is a real pain. Symantec requires the user answer a bunch of security questions if they need to reset their password, but no one ever remembers the answers to the questions that they selected.
• Since we use this for remote users who don't always connect to our VPN, when they change their network password it isn't always reflected in Windows and the Symantec Endpoint Encryption (SEE) passwords frequently get out of sync. When the user eventually does connect to the VPN, they do sync and really throw the user for a loop in which passwords to use.
• We found a huge problem with SSDs where an encrypted drive operated twice as slow as a mechanical drive. I believe this was addressed in a later release.

Incentivized

• Number of false positive which are triggered due to threat feeds are sometimes more needs to be fine tuned by the client.
• In very rare scenarios processes are not captured properly.

Incentivized

We needed a tool to manage BitLocker and FileVault and this product does both. Also, we needed a product to manage our self-encrypting drives (OPAL drives) and things work great

Incentivized

CB Response allows for a better view of what happened on the endpoint and provides more functionality out of the box then the FireEye Endpoint Security Product. CB Response allows you to basically have a remote connection into the CLI of an endpoint. This allows you to view the file system, run programs/scripts on the host, etc. FireEye Endpoint Security does not have this functionality.

Incentivized

• Keeps our company compliant with HIPPA and other requirements that our customers have.
• Does not affect user's day to day work.
• Increased security for mobile employees.

• It is helping to protect us from potential loss of revenue that would be caused by malware or a compromised account.
• It took some time in deploying in the environment , but that time is much worth it because of the results we are getting now.
• It helps in hunting, which help us check and protect our environment from any cyber attacks.

Incentivized