BitLocker Drive Encryption vs. Trellix ePolicy Orchestrator

It can be used if you are already familiar with other Microsoft System Center tools, it will provide integration and it will be easy to use from an Administrator's perspective. However, if you want more detailed information related to the troubleshooting, specific fields, or data, it will not be that granular.

Incentivized

McAffee ePolicy Orchestrator is very well suited in large environments. You can load your updates to the repository and deploy them to every node on your network. It has great reporting and auditing features. You can control your users and groups all from the System Tree. DLP is great for USB devices. You can restrict all the ports on a computer and open them up for a limited time to plug in a device. EPO is to bulky for small networks.

Incentivized

• It is fairly easy to use, from both a technician and users point of view. The install itself is pretty simple, and setup of the software is also fairly simple. For users, it is easy to use the software to encrypt the computer.
• It doesn't seem to use a whole lot of system resources when the encryption is enabled on the computer. You shouldn't experience any slowness of the computer, other than the time it takes to first encrypt the computer.
• It serves its main purpose very well, and that is to protect computers from intrusions/data breaches. It is particularly good for protecting computers that are accessing/storing sensitive/confidential data.

Incentivized

• Applies the policy settings for the selected group
• Keeps the hosts updated well, in general
• Allows update of available software from within the management console
• Assigns and runs ongoing tasks with little need for intervention
• Provides quick high-level view of systems

Incentivized

• Even if it's the best we tested, I think write performance could be improved. Maybe with dedicated hardware inside the TPM?
• No integration with OS password is a shame as most others have it and it is Microsoft on Microsoft so they can probably do it better then anyone else and safer.
• I wish they would support multiple passwords like FileVault on macOS. If it's a shared computer, you have to give the only password to Bitlocker to both users.

Incentivized

• It has a slow mechanism when adding custom threat feeds. For example, if McAfee didn't have a signature or detection about a new virus and we try to add it to our console it is like a really big process in adding that to our available signatures.
• Whenever a scan is performed, the system CPU utilization goes up 100 percent.
• Installation fails due to difference in timestamp when we try to shuffle between packages.

Very easy to enable.

Not good nor bad, BitLocker encryption is a symptom of our era, we need to protect ourselves and our data, BitLocker is a tool, as an IT we have to deal with it but it doesn't bring any benefit to my daily operations.

Incentivized

McAfee support is definitely GREAT! It is one of the best technical support on a business level. GOLD support is recommended to business. Their website is easy and quick to create a ticket. Their technical team usually responds right away with an email or call. Via call and web they provide a full and complete support until the issue is resolved. The best, most of the time they explain in detail what is the issue, the reason and how to resolve it.

Incentivized

This was formerly called Symantec PGP encryption. We selected BitLocker since this is what the University has deployed and is currently supporting. BitLocker has many advantages over Symantec PGP, as BitLocker is built-into all Windows computers. With PGP, this was a commercial product that had to be installed on each machine. That product also was not as easy or intuitive to use as BitLocker, and there were also more issues/problems that occasionally occurred with PGP.

Incentivized

McAfee ePolicy Orchestrator really seemed to have all the best pieces in one platform and the network admin and asst. network admin both had previous experience with the product. The others tend to focus more on singular aspects, whereas McAfee ePolicy Orchestrator has data loss prevention, encryption, anti-virus and other functionality and the excel on each of those points equally.

Incentivized

• Protects against data loss and theft, which can be very expensive if PII, SPI, PHI is involved. Fines for this type of loss can be very high, along with the costs of notification, and discovery.
• Cost is included in Windows O/S, without needing additional licensing costs.

Incentivized

• As with most things the price of products goes up and more-so if your business is growing.
• We've been able to provide auditors with tangible evidence that our network is protected because of the reporting McAfee ePO provides. Auditors like McAfee because it's been around almost forever and is a mature product.
• Being a mature product, though, it's very much set in the way it does things and as such there's not a whole lot of innovation.

Incentivized