Intercept X Endpoint

Usage Sophos Endpoint Intercept X

Avantages :

A mon niveau j'ai apprécié la simplicité d'usage. Les fonctionnalités poussées pour affiner les réglages.

Inconvénients :

L'interfaçage avec un siem implique de créer ses propres API. Pas d'api permettant de se connecter facilement au Siem du marché.

Endpoint Protection

Commentaires : I like having this installed vs the others as it runs quieter and most users don't even know it's there

Avantages :

Easy to deploy and most of the time does not require a reboot. So far no issues with virus/malware sneaking in.

Inconvénients :

Policies are not the easiest to find and make changes to if you don't do it often.

Great product within a top tier suite of hardware and software

Commentaires : Considering that this is one piece to an overall package, we have been very happy and the end to end visibility is unmatched when researching threats in our environment. What few downsides are present are miniscule when packaged together with the rest of the offerings.

Avantages :

The deployment capabilities and consistency in using MDM deployment has been very important to minimize the opportunity for devices to be put into production without properly being secured. not all MSI packages are deployed the same and we have had products in the past that have installed well on some machines and not on others so consistency is key for the deployment.

Inconvénients :

The agent has not yet had all services re-branded after the Hitman acquisition which led us down an unnecessary rabbit hole. My only other complaint would be that the agent runs heavy on workstations and in many cases, has pushed us to upgrade to m.2 drives for machines that otherwise didnt need them.

Great protection, however...

Commentaires : Overall it is a great protection option if you are looking for a big company, depending on your work, purpose of it and if you don't mind having to constantly request access to blocked applications... other than that, good product.

Avantages :

Sophos offers great overall protection, specially for big companies and networks. It is worth the money and value.

Inconvénients :

Only con I found with this product, which is to me a big pet peeve, is the need to contact our IT department because Sophos tends to block several applications and software used on my work space. Only way to get authorized to continue with my work is by contacting IT (product administration) so I can get allowance to continue through these checkpoints.

Sophos : A leader in Next Generation detection and response with deep visibility

Commentaires : Sophos is way ahead compared to other products in machine learning and analytics-based attack prediction, analyzing the threats and sandboxing. Threat hunting with Sophos is exceptional and Memory usage by the agent is less feedback from end-users. It makes an analyst's job easy when it comes to an incident analysis by through the end device logs. It is only hard to pitch as it is a cloud-based platform for governments.

Avantages :

Sophos capabilities as detection and response to the Malware attacks are excellent. very deep insights into endpoint devices where it provides later movement, deep analysis, and storyline of the attack. It is a step ahead of predicting zero-day attacks.

Inconvénients :

Sophos is currently moved everything to cloud pitching for Government customers is hard because of data restrictions they want to implement on-premises. cost wise is Sopho's intercept X is higher compared to other vendors.