Microsoft System Center Endpoint Protection vs. Symantec Endpoint Security

It is well suited in environments that want a simple AV product/solution that, for the most part, can be easily deployed to client endpoints. It is also good for environments that want something that is easy to use by end-users, and also doesn't use a whole lot of system resources. It is less suited for environments that want an AV solution that is more robust feature-wise, or has more configurable options for the end-users. It is also less suited for those organizations that want an AV product to have the highest detection rate in the industry.

Incentivized

We have found that Symantec Endpoint Security is better suited to newer systems running faster processors and more than 8GB RAM otherwise the client agent takes up too many resources and slows the system down. However, if you have a reasonably modern fleet of systems it does everything you would expect from an Endpoint Protection solution and works well as part of a multi-layered cybersecurity policy.

Incentivized

• Easy administration.
• Centralized management, patch deployment, and reporting.
• Easy auto-patch updating from Microsoft.
• Microsoft antivirus app with no special licensing required.

Incentivized

• The virus and spyware protection has worked well for us, catching several things and quarantining the items or cleaning them.
• The virus definitions very rarely fail to update for the users, so I feel confident that my client machines are kept up to date.
• I like the report I get daily telling me about threats found and action taken without having to login to the console to look it up myself.

Incentivized

• The product could improve in the area of having better mechanisms in place with how the SCEP client is deployed/installed from the server on the management side. We have run into this firsthand with the client not installing on an endpoint, and then having to take the time to investigate why it was not installing.
• A second improvement that can be made is to keep trying to improve the products detection rate for finding malware/viruses. The case can be made that there are some products out there that do a better job at this and have a higher detection rate.

Incentivized

• Removing dead clients from the console. This is nearly impossible to do, and makes keeping the console clean a very difficult task.
• Poorly tested versions are sometimes released that cause serious issues for users. This ranges from browsers malfunctioning to BSOD errors.
• Malware detection is good but not great. We are not confident in SEP by itself to neutralize malware threats. It's detection rate just isn't high enough for next generation and zero day threats.

Continued satisfied support. The saying "if it ain't broke, don't fix it..." comes to mind. It works, and we'll continue to use it and support Symantec.

Incentivized

It is integrated with Windows and SCCM, making it easy to use, license, manage, and update. Additionally, it is straightforward to diagnose when virus and ransomware alerts are detected on endpoints. IT Service Desk management is also easy.

Incentivized

The rating reflects Symantec Endpoint Security's ability to balance enterprise grade security with user-friendly workflows or advanced configurations require extra effort. For most organizations, the streamlined management and robust automation justify the high score. Management GUI is old fashined and need to be improve. Older devices may experience slowdowns during full scans without careful configuration.

Incentivized

We've used it for years and the software is easy to use. The dashboard is easy to read, and you can easily figure out where to go to troubleshoot or deploy software. Symantec is there for emergencies like backup restoration or file retrieval. It's pretty low maintenance. Symantec is there when your IT infrastructure needs it

Incentivized

There was a time and a place in which Microsoft System Center Endpoint Protection was an excellent choice to provide threat protections. However, now that threats have been evolving, so too does the need for more advanced protections. In its current offering, it just no longer meets the needs of our organization in terms of providing protections against threats.

Incentivized

Support is completely awful! You can never get anyone to help if you can even find a number to call. The support web portal is a joke and their response time if you're even able to submit a ticket is ridiculously slow.

Incentivized

Use a third party deployment tool and not the deployment option within the SEP Manager itself.

Incentivized

Fewer licensing requirements, one less vendor to buy from, one less app to package, deploy, and update on systems. It is an integrated license to Windows that comes baked in when you have AD-connected systems and need to allow that system on the network. It's a natural tool that enables and uses with little complication after setup.

Incentivized

Symantec Endpoint Security seems to be a more mature solution compared with CrowdStrike, particularly when CS was just recently getting their USB blocking functionality rolled out for macOS endpoints this year. Another differentiator with CrowdStrike is that Symantec ES still provides both on-demand scanning & real-time signature-based detection in addition to solely real-time machine learning detection whereas on-demand scanning and signatures are not available on CrowdStrike. This means there is a doubt as to whether we can use CS to comply with some of our PCI DSS obligations which specifically require the use of signature-based antivirus solutions.

Incentivized

• There was little/no cost associated with this software since we are utilizing SCCM and are paying license costs for that anyways.
• The level or protection is excellent for the cost of the software.
• There was at least one instance in which Microsoft System Center Endpoint Protection identified a crypto-malware, but not before it had already started to encrypt many of our files. So it did detect the threat, but since it was a little delayed we still were infected.

Incentivized

• Symantec [Endpoint Security] cost 50k less than other options while providing similar benefits over the last year
• Cylance conflicted with Symantec [Endpoint Security] and Cisco Umbrella Client (All 3 at the same time) causing us to rebuild many desktops
• Symantec [Endpoint Security] made it easy to detect where issues were and repair them

Incentivized