IBM Hyper Protect Virtual Servers for Virtual Private Cloud (VPC) vs. Trend Micro Deep Security

IBM Hyper Protect Virtual Servers for Virtual Private Cloud (VPC) works great in scenarios where there is a need to process sensitive data within a secure enclave. IBM Hyper Protect Virtual Servers for Virtual Private Cloud (VPC) isn’t suitable as a commodity solution for general purpose compute. The IBM Hyper Protect Virtual Servers For Virtual Private Cloud have less CPUs and available RAM than some x86 virtual machines on IBM Cloud. In other words, using IBM Hyper Protect Virtual Servers for Virtual Private Cloud (VPC) to process generic data doesn’t make much sense. You may be able to get more compute for your money by processing generic data using an x86 architecture server on IBM Cloud or another public cloud provider.

So far we, unfortunately, have been using it in a limited scenario but we find that it has been very easy to use and manage in that scenario. Integrating the protection of our few saas applications was actually very simple and being able to use a very light weight agent like deep security agent has been very useful. Other agents ate up a lot of CPU or ram or both but this one is very light.

Incentivized

• Process sensitive data within a secure enclave
• Support for common Infrastructure As Code containerized solutions
• Healthy marketplace for cybersecurity analytics solutions

• Agentless Security
• Immediate protection upon boot
• Central Management Console
• DSVA easy deployment

Incentivized

• Support for S390X and x86 architectures in managed Kubernetes
• Some common frameworks don’t support big-endian architectures. We had to migrate from Apache Parquet to MessagePack because S390X doesn’t support Apache Parquet. Although MessagePack or Protobufs works fine on S390X, it would be nice to have a page of common databases, serialization formats, etc. that have S390X support.
• Improve the non-native S390X development tools and guides. Most development machines aren’t built on the S390X architecture.

• Agent updates can be a pain - sometimes requires a reboot.
• Trend upgrades don't always go as planned - install errors on the upgrades.
• It seems like there is a new vulnerability every week, sometimes.

Incentivized

It's the best one compared to other security applications

Incentivized

I scored IBM Hyper Protect Virtual Servers for Virtual Private Cloud (VPC)’s usability based on its intended use case as a secure enclave to process sensitive data. By design, IBM Hyper Protect Virtual Servers for Virtual Private Cloud (VPC) instances have more restrictions than a regular x86 architecture server on IBM Cloud. With this additional context in mind, I rated IBM Hyper Protect Virtual Servers for Virtual Private Cloud (VPC) an 8 out of 10 because setting up and deploying an IBM Hyper Protect Virtual Servers for Virtual Private Cloud (VPC) instance is relatively easy. IBM has detailed step-by-step tutorials on how to accomplish this. However, IBM Hyper Protect Virtual Servers for Virtual Private Cloud (VPC) lacks mixed support for S390X and x86 architectures in managed Kubernetes. Also, there aren’t enough tutorials on how to do anything outside of setting up and deploying an IBM Hyper Protect Virtual Servers for Virtual Private Cloud (VPC) instance.

It is the best application I've used. Its features are effective.

Incentivized

Trend Micro's support is pretty decent, we have had issues in the past and they have been fairly responsive to us and our complaints. Depending on how severe the issue was. Any ticket that had a high priority was handled very shortly especially when we contacted our account rep even if it was after hours, we were still able to get support within a short time period.

Incentivized

Everything is good

Incentivized

Amazon Virtual Private Cloud and Google Cloud Virtual Private Cloud are two competing products we evaluated prior to selecting IBM Hyper Protect Virtual Servers for Virtual Private Cloud (VPC). We selected IBM Hyper Protect Virtual Servers for Virtual Private Cloud (VPC) over Amazon Virtual Private Cloud and Google Cloud Virtual Private Cloud because of security and IBM’s stellar reputation as an industry leader in cybersecurity.

We selected trend micro to take the AV scans and filtering out of the hands of the Windows and Linux vm's we have deployed and move it to the hypervisor level. This has led us to be able to deploy only a single DSVA per host and can protect all VM"s that are on that hosts. This has allowed for more time being spent on other priority security tasks.

Incentivized

• Early-stage startups which process sensitive data face adoption headwinds because their customers are very risk-averse. For example, we discovered that the Operations Team at prospective customers really wanted [...], but the IT Security Team would veto their decision.
• After describing to the IT Security Teams how [...] uses IBM Hyper Protect Virtual Servers for Virtual Private Cloud (VPC) to keep patient data safe, we have had more success convincing healthcare facilities to try [...]. Currently, we are pursuing three opportunities which can be directly attributed to our use of IBM Hyper Protect Virtual Servers for Virtual Private Cloud (VPC).
• Our use of IBM Hyper Protect Virtual Servers for Virtual Private Cloud (VPC), the “Fort Knox of data security”, plays an important role in winning over prospective customers’ IT Security Teams. By using IBM Hyper Protect Services’ confidential computing capabilities to keep protected health information safe, we make a strong commitment to protecting our customers.

• 100% positive ROI. Without Deep Security we would have to leverage and endpoint protection management solution like Sophos or SEPM (Symantec). Although both are good products, from a cost perspective it would have hit us much harder. Trend Micro Deep Security scales very nicely.
• Since Deep Security actually has zero (or at least unnoticeable) resource footprint on monitored VMs, it is a huge cost benefit for us. As previously mentioned, actual antivirus clients installed on each virtual machine (VM) would have significantly affected performance. This would have cost us much more additionally in paying for additional resources to allocate over VMs in the VMware environment. Deep Security is almost completely unintrusive from a resource perspective.
• Also, from a layered security perspective, it helps us meet our goals; and since the price of Trend Micro Deep Security quite reasonable, it is that much easier to get approval for this specific internal layer of security.

Incentivized