Much more room available for product improvement!
Rating: 3 out of 10
Use Cases and Deployment Scope
We barely got this functional. Implementation itself did not go as expected. Unstable and many false positives were provided as observations. Might have been better if we used this further. But the organization was not in a position to spend further time observing and rectifying the errors and issues. Therefore, we had to move out to another tool unfortunately.
Pros
- Complex attacks are identified frequently.
- Advanced thread intelligence.
- Privacy of all data is very well maintained.
Cons
- False positives were identified frequently.
- Implementing rules are a very complex process.
- UI crashes were spotted randomly.
- Deployment needs to be much smoother.
Likelihood to Recommend
I would say it is less appropriate for an organization which is looking to implement a tool within a short period of time. However, we found support on the web forum as well as from support team and were given solutions always. It was somewhat a relief for the users. We were not in a position to provide further IT security resources. And Anti Targeted Attack Platform did not require such. The tool was able to identify and eliminate a critical threat right after the implementation.