Item: Symantec Endpoint Security
Rating: 10
Author: Sean Muller

Use Cases and Deployment Scope

Symantec [Endpoint Security] is being used on all of our desktops and laptops, it protects the endpoints and is linked to a central server in our network which reports on all of the endpoints. It is also linked to a cloud management platform provided by Broadcom. The cloud platform allows the devices to connect to the cloud platform regardless of where they are. When the devices are in the network they connect to the server.

Pros and Cons

Behavior analytics to detect malware
Overall protection from malicious software and connections from the outside
Centralized reporting to ensure quick remediation of issues

The system should have a better ability to auto repair, if an item is malfunctioning it should auto reinstall.
The cloud platform and the server do not talk well to each other and it would be great to get the same data on both platforms, this may be due to version though.
It seems the whitelisting on the cloud platform could use some work.

Most Important Features

Antivirus
Behavior analytics
Reporting

Return on Investment

Symantec [Endpoint Security] cost 50k less than other options while providing similar benefits over the last year
Cylance conflicted with Symantec [Endpoint Security] and Cisco Umbrella Client (All 3 at the same time) causing us to rebuild many desktops
Symantec [Endpoint Security] made it easy to detect where issues were and repair them

Alternatives Considered

BlackBerry Protect (CylancePROTECT), CrowdStrike Falcon Endpoint Protection, Cynet 360, Arctic Wolf and Rapid7 Managed Security Services (Rapid7 MDR)

Cylance: (Active Engage) (Cost 4x Symantec [Endpoint Security]) Cylance is a good product but we have it through an MSSP and only have read-only. The certification and training for the entry [are] like 3 hours of videos but a smart person can just go in and look as the system is very intuitive. Most of them are pretty easy to pick up, don't believe people who tell you it's impossible to give you access if you are not trained, read-only is harmless, except to the mssp. Crowdstrike: (Evaluated)(Cost 6x Symantec [Endpoint Security]) Seems like a good product, we may be engaging with them in the future, it has a lot of the same features as Symantec [Endpoint Security] but there are more people behind the events that take place after detection on your system. Cynet: (Evaluated)(Cost 2x Symantec [Endpoint Security]) Another good product, seems to have a lot going for it. May engage in the future, it seems they have more AI put into the actions that happen after a detection which is pretty cool. Arctic Wolf: (Evaluated)(Cost 15x Symantec [Endpoint Security]) Good product, part of a wholistic package provided by artic wolf, not really apples to apples though.

Key Insights

Do you think Symantec Endpoint Security delivers good value for the price?

Yes

Are you happy with Symantec Endpoint Security's feature set?

Yes

Did Symantec Endpoint Security live up to sales and marketing promises?

Yes

Did implementation of Symantec Endpoint Security go as expected?

Yes

Would you buy Symantec Endpoint Security again?

Yes

Other Software Used

BlackBerry Protect (CylancePROTECT), Cisco Umbrella, Cisco AnyConnect

Likelihood to Recommend

If you want you could think of the industry standard for protection as Symantec [Endpoint Security], if you get the appropriate suite you end up with a solid defense against the outside world. It is also appropriately priced costing us about 10k per year for the 450 Licenses we have. If you are actively being attacked by the CIA or FBI I would spend more money though no amount of money will really matter at that point but if you are just going up against your standard dark forces of the outside then I would recommend this for your endpoint security. It is a solid foundation to build your security stack off of.

Symantec Endpoint Security, Build your foundation on solid rock.

Overall Satisfaction with Symantec Endpoint Security