ThreatLocker vs. Trellix Endpoint Security ENS

If you want to know what is running in your environment and what it is trying to access, you should be able to take preemptive measures to prevent and protect yourself from it. ThreatLocker is the system for you! It will replace almost any EDR requirement, although I recommend you partner it with Windows Defender.

Incentivized

During the pandemic all our users worked remotely that was challenging from security perspective, so we had to deploy the endpoint protection system with cloud based monitoring server. By doing that we were able to keep safety for users workspaces even though some of them did not connect to VPN for a long time

Incentivized

• Application whitelisting.
• Unified audits of everything network & application.
• Clean and concise portal to manage the same.
• Dynamic ability to allow users to request more apps.
• Security and a sense of complete control.

Incentivized

• Provides high fidelity alerting.
• Allows CSOC analysts to perform forensic triage and alert investigations through containment from a single pane of glass.
• Provides alert telemetry across on-disk and in-memory attacks.
• Supports many additional 'bolt-on' modules to provide additional alert context or capabilities.

Incentivized

• Unused polices are nearly impossible to navigate due to no sorts or filtering options.
• Redundant polices are impossible to determine.
• Cannot view literally all policies for one organization in one view/list. Instead of have to check policies per device, group, or all machines.

Incentivized

• My biggest flak with McAfee Endpoint Security is that it is quite resource-intensive. It does tend to make the system a little slow. You get security at the expense of your machine's speed.
• Even though the drive encryption makes the system more secure, it takes a lot of time to first enter the very long password, and then for it to decrypt the whole machine. This sometimes clashes with Windows update and causes a lot of complications which leads to boot loops.

Incentivized

ThreaLocker has done its job and has prevented malware from executing. It has stopped an encryption process once already. It has kept a user from going to a bad website. He tried twice and was wondering why he was getting an error message from ThreatLocker and ESET both.

Incentivized

The console is very user friendly and is frequently updated based on user requests. It is well laid out and many of the areas allow the ability to pivot from one area to another without having navigate the entire menu tree. Much of what you do is to query activities on a given PC and the application allows you to save frequently run queries.

Incentivized

So below is my breakdown, Pro's: Centralized Management, Comprehensive Protection and customization. Con's: Initial cost

Incentivized

There is rarely ever an outage. I have seen slowness in ThreatLocker service. But that is very rare too!

Incentivized

ThreatLocker is always available. The admin's console loads very fast and report runs almost instantly. It does not interfere with operating system.

Incentivized

You can email, call or do online chat with tech support. I love their online chat. They are quick and friendly. Also, if you need to show them something, you can give the chat technician permission from your Chat box to allow the tech access to your computer. They also can pull out your admin console on their side. They can look at your "Unified Audit" log and see the same thing that you can. They have a good KnowledgeBase that you can look for answers. They have what is called "ThreatLocker University" where you can go through tutorials and take tests.

Incentivized

The support is pretty good, and I haven't had any issues with getting the highest quality technical support when there are issues. Tech support representatives that I have dealt with know the product quite well and have solved many issues that I have had with the product in the past. The only issue I have with support is that it can be quite expensive.

Incentivized

The owners and co-founders work with you through Zoom Meetings. They walk you through how to use and setup ThreatLocker. They also have webinars. You also can go through ThreatLocker University online training.

Incentivized

Using ThreatLocker University online training is very easy and informative. You take online tests to see how well you learned the material. It is great!

Incentivized

ThreatLocker is a family ran business. The owners, co-founders work with you to ensure you are up and running as quickly as possible. They went to ensure your success with ThreatLocker.

Incentivized

We chose Threatlocker because it is unique in that it specializes in a specific area, whereas other products offer a broader range of capabilities. It blocks software from running and provides us with all the necessary information for this purpose in an easy-to-use graphical user interface (GUI), which is all we need for our use case.

Incentivized

We only selected McAfee because we are already using ESET NOD32 for the protection of our desktops and laptops. We didn't want to use the same software for our servers so we chose McAfee instead. I personally like ESET Smart Security better than McAfee when deploying it on a desktop or laptop because I think it protects the PC better. When it comes to web protection, policy updates, etc., McAfee is the better choice and that's why we deployed it on our servers.

Incentivized

ThreatLocker is very easy to add new ThreatLocker agents on computers and servers. It is very easy to do. You can install an agent on a computer or server in about 2 minutes or less.

Incentivized

• Applications that are new to the environment can be blocked even if they are wanted. Which can cause strain on the environment if not properly tuned or prepped.
• We have this deployed onto around 7700 endpoints at this moment with less than 0.01% of issues with the agent or its functionality being noted. It's incredibly stable and the Vendor support further helps if it does break, and they can usually fix it without 15 mins.
• We have had this tool on customers, and it has single handedly stopped Ransomware attacks by itself when the customers previous EDR failed to catch threat actor attacks. I can remember 3 separate instances where someone did something to cause an attack and ThreatLocker brought it to a screeching halt due to the application control and built-in ringfencing it provides.

• This tool helped us in delegating the asset safety responsibility to the client level by 80%, leaving 20% for the management console.
• With a decent pricing, the benefits are slightly above expectations. The ROI is good.
• But, considering most of the malware comes from internet, with a good email security appliance and next gen firewall in place, the online security alerts are now redundant. It could be something that can be termed as overkill on the budget.

Incentivized