Symantec Endpoint Security vs. Trellix Endpoint Security ENS

We have found that Symantec Endpoint Security is better suited to newer systems running faster processors and more than 8GB RAM otherwise the client agent takes up too many resources and slows the system down. However, if you have a reasonably modern fleet of systems it does everything you would expect from an Endpoint Protection solution and works well as part of a multi-layered cybersecurity policy.

Incentivized

During the pandemic all our users worked remotely that was challenging from security perspective, so we had to deploy the endpoint protection system with cloud based monitoring server. By doing that we were able to keep safety for users workspaces even though some of them did not connect to VPN for a long time

Incentivized

• The virus and spyware protection has worked well for us, catching several things and quarantining the items or cleaning them.
• The virus definitions very rarely fail to update for the users, so I feel confident that my client machines are kept up to date.
• I like the report I get daily telling me about threats found and action taken without having to login to the console to look it up myself.

Incentivized

• Provides high fidelity alerting.
• Allows CSOC analysts to perform forensic triage and alert investigations through containment from a single pane of glass.
• Provides alert telemetry across on-disk and in-memory attacks.
• Supports many additional 'bolt-on' modules to provide additional alert context or capabilities.

Incentivized

• Removing dead clients from the console. This is nearly impossible to do, and makes keeping the console clean a very difficult task.
• Poorly tested versions are sometimes released that cause serious issues for users. This ranges from browsers malfunctioning to BSOD errors.
• Malware detection is good but not great. We are not confident in SEP by itself to neutralize malware threats. It's detection rate just isn't high enough for next generation and zero day threats.

• My biggest flak with McAfee Endpoint Security is that it is quite resource-intensive. It does tend to make the system a little slow. You get security at the expense of your machine's speed.
• Even though the drive encryption makes the system more secure, it takes a lot of time to first enter the very long password, and then for it to decrypt the whole machine. This sometimes clashes with Windows update and causes a lot of complications which leads to boot loops.

Incentivized

Continued satisfied support. The saying "if it ain't broke, don't fix it..." comes to mind. It works, and we'll continue to use it and support Symantec.

Incentivized

The rating reflects Symantec Endpoint Security's ability to balance enterprise grade security with user-friendly workflows or advanced configurations require extra effort. For most organizations, the streamlined management and robust automation justify the high score. Management GUI is old fashined and need to be improve. Older devices may experience slowdowns during full scans without careful configuration.

Incentivized

So below is my breakdown, Pro's: Centralized Management, Comprehensive Protection and customization. Con's: Initial cost

Incentivized

We've used it for years and the software is easy to use. The dashboard is easy to read, and you can easily figure out where to go to troubleshoot or deploy software. Symantec is there for emergencies like backup restoration or file retrieval. It's pretty low maintenance. Symantec is there when your IT infrastructure needs it

Incentivized

Support is completely awful! You can never get anyone to help if you can even find a number to call. The support web portal is a joke and their response time if you're even able to submit a ticket is ridiculously slow.

Incentivized

The support is pretty good, and I haven't had any issues with getting the highest quality technical support when there are issues. Tech support representatives that I have dealt with know the product quite well and have solved many issues that I have had with the product in the past. The only issue I have with support is that it can be quite expensive.

Incentivized

Use a third party deployment tool and not the deployment option within the SEP Manager itself.

Incentivized

Symantec Endpoint Security seems to be a more mature solution compared with CrowdStrike, particularly when CS was just recently getting their USB blocking functionality rolled out for macOS endpoints this year. Another differentiator with CrowdStrike is that Symantec ES still provides both on-demand scanning & real-time signature-based detection in addition to solely real-time machine learning detection whereas on-demand scanning and signatures are not available on CrowdStrike. This means there is a doubt as to whether we can use CS to comply with some of our PCI DSS obligations which specifically require the use of signature-based antivirus solutions.

Incentivized

We only selected McAfee because we are already using ESET NOD32 for the protection of our desktops and laptops. We didn't want to use the same software for our servers so we chose McAfee instead. I personally like ESET Smart Security better than McAfee when deploying it on a desktop or laptop because I think it protects the PC better. When it comes to web protection, policy updates, etc., McAfee is the better choice and that's why we deployed it on our servers.

Incentivized

• Symantec [Endpoint Security] cost 50k less than other options while providing similar benefits over the last year
• Cylance conflicted with Symantec [Endpoint Security] and Cisco Umbrella Client (All 3 at the same time) causing us to rebuild many desktops
• Symantec [Endpoint Security] made it easy to detect where issues were and repair them

Incentivized

• This tool helped us in delegating the asset safety responsibility to the client level by 80%, leaving 20% for the management console.
• With a decent pricing, the benefits are slightly above expectations. The ROI is good.
• But, considering most of the malware comes from internet, with a good email security appliance and next gen firewall in place, the online security alerts are now redundant. It could be something that can be termed as overkill on the budget.

Incentivized