What is our primary use case?
The primary use case was for segmentation.
The range of platforms and operating systems that the solution covers seems good. Currently, we use it for all our Linux operating systems and some of our Windows environment.
We just deployed agents to Guardicore in our data center.
We are using the latest version of the solution.
How has it helped my organization?
We recently did a database migration from Solaris to Linux. The Solaris platform had dedicated hardware firewalls to segment it off. By moving to Linux, we were able to use Guardicore and do our network segmentation through it. Therefore, we didn't have to invest in hardware.
What is most valuable?
We like the centralized management of the firewalls. Until we installed Guardicore Centra, we managed all our firewalls individually, so making changes was complicated, difficult, and time-consuming.
What needs improvement?
Sometimes, the speed needs improvement, especially when it comes to the generation of maps, where it can be a bit slow.
For the reporting, I would like if they could make it easier to check what the agents are doing.
For how long have I used the solution?
I have been using it for about a year now.
What do I think about the stability of the solution?
The stability is great. There are no issues at all.
Using the solution for segmentation did not require system downtime or changes to networks or applications, which was a bonus.
The solution is managed by a team of three admins. This is not their primary job. It is just an addition to their primary job as a normal UNIX administrator.
What do I think about the scalability of the solution?
For our environment, it scaled perfectly fine with no issues (up to 250 agents), so there haven't been any issues.
We have 80 applications secured and 250 agents installed at the moment.
How are customer service and technical support?
The technical support has been excellent. It is probably one of the best customer services provided by any company. They are helpful, reactive to problems, and constantly work to enable us to do what we want to do.
Which solution did I use previously and why did I switch?
Guardicore Centra is much better than our previous solution, which was a bit of a nightmare to administer and look after. In that respect, this solution is much better, as there is less chance of things going wrong.
Guardicore Centra is definitely more secure and agile. It is probably less cost-effective compared to what we were doing, which was free.
How was the initial setup?
Its approach to implementing segmentation was very simple and straightforward. You can basically use it out-of-the-box.
It tooks us probably three months to secure the development environments, then another three months to do the production environments. It was probably faster than how we did it. It was just a matter of us gaining confidence in the software to switch it on and have it do everything it was supposed to do, and it took a bit longer for that to happen.
What about the implementation team?
Guardicore helped us set the process up via video call. So, the customer service was excellent.
We did the implementation strategy ourselves. We deployed the solution with two people.
What was our ROI?
We get an added layer of protection and user analytics that we can give to our directors in the company, so they can be more confident that things are being managed correctly.
Which other solutions did I evaluate?
Guardicore Centra provides better value for money than NSX, was the other solution that we looked at, which was too expensive for what it does. The main difference was that Guardicore just concentrated on segmentation. NSX was more of a network solution that did too many things, and we really didn't need all this stuff that it was doing.
What other advice do I have?
Start off with a small deployment and prove that it works. Once you get the benefit of that, then increase the deployment. That is what we did.
We used the solution’s AI-powered segmentation, but then we tweaked it, because the rules that it created didn't really match the way that we worked. If you are going to accept the results of the AI, then it will speed things up a lot. In our case, we wanted to double-check everything and find our own way, so it probably didn't save us any time. The AI-powered segmentation is useful for taking a baseline segmentation, but you should check it yourself and tweak it to suit what your company needs.
We use it to secure our Linux and Unix environments. We are now looking at adding it to our Windows environments and desktop infrastructure.
We are planning to have the solution help cover legacy or end-of-support operating systems, like Win2003, AIX, Solaris, or RHEL, but we haven't done that yet.
Guardicore Centra saves a lot of time, approximately three to six months, mainly through hardware.
I would rate this solution as 10 out of 10.
Which deployment model are you using for this solution?