We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
"If somebody has been compromised, the question always is: How has it affected other devices in the network? Cisco AMP gives you a very neat view of that."
"One of the best features of AMP is its cloud feature. It doesn't matter where the device is in regards to whether it's inside or outside of your network environment, especially right now when everybody's remote and taken their laptops home. You don't have to be VPNed into the environment for AMP to work. AMP will work anywhere in the world, as long as it has an Internet connection. You get protection and reporting with it. No matter where the device is, AMP has still got coverage on it and is protecting it. You still have the ability to manage and remediate things. The cloud feature is the magic bullet. This is what makes the solution a valuable tool as far as I'm concerned."
"It is a very stable program."
"The solution's integration capabilities are excellent. It's one of the best features."
"The solution makes it possible to see a threat once and block it everywhere across all endpoints and the entire security platform. It has the ability to block right down to the file and application level across all devices based on policies, such as, blacklisting and whitelisting of software and applications. This is good. Its strength is the ability to identify threats very quickly, then lock them and the network down and block the threats across the organization and all devices, which is what you want. You don't want to be spending time working out how to block something. You want to block something very quickly, letting that flow through to all the devices and avoiding the same scenario on different operating systems."
"The most valuable feature is signature-based malware detection."
"The visibility and insight this solution gives you into threats is pretty granular. It has constant monitoring. You can get onto the device trajectory to look at a threat, but you can also see what happened prior to the threat. You can see what happened after the threat. You can see what other applications were incorporated into the execution of the threat. For example, you have the event, but you see that the event was launched by Google Chrome, which was launched by something else. Then, after the event, something else was launched by whatever the threat was. Therefore, it gives you great detail, a timeline, and continuity of events leading up to whatever the incident is, and then, after. This helps you understand and nail down what the threat is and how to fix it."
"The ability to detonate a particular problem in a sandbox environment and understand what the effects are, is helpful. We're trying, for example, to determine, when people send information in, if an attachment is legitimate or not. You just have to open it. If you can do that in a secure sandbox environment, that's an invaluable feature. What you would do otherwise would be very risky and tedious."
"The best feature for our customers is the ransomware feature. It is very fresh and powerful. Bitdefender also has a feature called Ransomware Vaccine. With this feature, when a file from the ransomware is encrypted Bitdefender can revert it back to the original file. It automatically decrypts the file and puts the ransom in quarantine."
"The most valuable features are the solution's thorough detection and ease of use."
"With Bitdefender GravityZone Ultra, we don't have to worry about our endpoints or attacks. Our security has become stronger. This has been a reliable solution for our company."
"The performance is great."
"What I have found to be valuable is after every new release of the solution there are more features. At the time that we bought Bitdefender GravityZone, it was their top solution. We went from their Enterprise version to Elite, Elite HD, Ultra, and now there is an Ultra Plus available."
"The advantage of the solution is that it has a console on the cloud and you can update the clients."
"We like the dashboard, the console, the reporting. It's very easy to deploy."
"Great protection against malware, ransomware, and any other forms of malicious software."
"Technical support is excellent."
"MVISION Endpoint is so much easier and so much simpler for the lay security personnel to handle."
"It is scalable and stable and the initial setup is the easiest part of using the product."
"The agents are easy to deploy."
"I have not received any complaints about the performance."
"The most valuable feature is user-based policy provision."
"We have had some problems with updates not playing nice with our environment. This is important, because if there is a new version, we need to test it thoroughly before it goes into production. We cannot just say, "There's a new version. It's not going to give us any problems." With the complexity of the solution using multiple engines for multiple tasks, it can sometimes cause performance issues on our endpoints. Therefore, we need to test it before we deploy. That takes one to three days before we can be certain that the new version plays nice with our environment."
"We had a lot of noise at the beginning, and we had to turn it down based on exclusions, application whitelisting, and excluding unknown benign applications. Cisco should understand the need for continuous updates on the custom Cisco exclusions and the custom applications that come out-of-the-box with the AMP for Endpoints."
"I would recommend that the solution offer more availability in terms of the product portfolio and integration with third-party products."
"I would like to see integration with Cisco Analytics."
"The technical support is very slow."
"The thing I hate the most, which they have not fixed, is when it creates duplicate entries within a console. If you have a computer and you upgrade from Windows 7 to Windows 10, or you upgrade your agent from version 6 to 7, it creates a new instance in there instead of updating the information. Instead of paying a license for one computer, I have to license two computers until I manually go in, search for all the duplicate entries, and clean them out myself."
"...the greatest value of all, would be to make the security into a single pane of glass. Whilst these products are largely integrated from a Talos perspective, they're not integrated from a portal perspective. For example, we have to look at an Umbrella portal and a separate AMP portal. We also have to look at a separate portal for the firewalls. If I could wave a magic wand and have one thing, I would put all the Cisco products into one, simple management portal."
"In Orbital, there are tons of prebuilt queries, but there is not a lot of information in lay terms. There isn't enough information to help us with what we're looking for and why we are looking for it with this query. There are probably a dozen queries in there that really focus on what I need to focus on, but they are not always easy to find the first time through."
"The reporting is much too simple."
"Occasionally websites are unnecessarily blocked due to monitoring software on those sites."
"The graphical user interface for EDR could be improved."
"I would like to see the capability for remote installation added, in particular for servers."
"The software itself is solid. It would be better if it was more of a real-time solution, like SentinelOne. The one thing that holds me back on the SentinelOne side is that I can blacklist websites and stuff like that, but it's not as granular as Bitdefender. With Bitdefender, I feel like I have more control over what I can whitelist and blacklist."
"Using this product requires quite a bit of training, which is hard to get."
"There is a need to work on the deployment, when it comes to deploying to Windows machines with regards to downloading the size of the package."
"In terms of improvement of the solution, it could have better features. For example, having a firewall within. This way we would only need one solution."
"The initial setup can be a bit complicated for those unfamiliar with the product."
"A policy-editing console should be added."
"Intrusion detection and intervention seem to be falling behind the competition."
"Endpoint resource utilization causes high levels of instability and that is something that needs improvement."
"I would like to see more local integration for the applications that we use."
"MVISION Endpoint is only compatible with Windows 10 and Windows 2016 and above. If I were using a Linux operating system, I would not be able to use MVISION Endpoint."
"We can know if something bad is potentially happening instantaneously and prevent it from happening. We can go to a device and isolate it before it infects other devices. In our environment, that's millions of dollars saved in a matter of seconds."
"There is also the Cisco annual subscription plus my management time in terms of what I do with the Cisco product. I spend a minimal amount of time on it though, just rolling out updates as they need them and monitoring the console a couple of times a day to ensure nothing is out of control. Cost-wise, we are quite happy with it."
"There are a couple of different consumption models: Pay up front, or if you have an enterprise agreement, you can do a monthly thing. Check your licensing possibilities and see what's best for your organization."
"Our company was very happy with the price of Cisco AMP. It was about a third of what we were paying for System Center Endpoint Protection."
"We have a license for 3,000 users and if we get up to 3,100 users, it doesn't stop working, but on the next renewal date you're supposed to go in there and add that extra 100 licenses. It's really good that they let you grow and expand and then pay for it. Sometimes, with other products, you overuse a license and they just don't work."
"The visibility that we have into the endpoint and the forensics that we're able to collect give us value for the price. This is not an overly expensive solution, considering all the things that are provided. You get great performance and value for the cost."
"Whenever you are doing the licensing process, I would highly advise to look at what other Cisco solutions you have in your organization, then evaluate if an Enterprise Agreement is the best way to go. In our case, it was the best way to go. Since we had so many other Cisco products, we were able to tie those in. We were actually able to get several Cisco security solutions for less than if we had bought three or four Cisco security solutions independently or ad hoc."
"Licensing fees are on a yearly basis and I am happy with the pricing."
"Bitdefender GravityZone Ultra is less expensive than other solutions, such as CrowdStrike. We had a really good deal because it was their year-end and they were trying to do a lot of sales that week. We bought a three-year contract from them and the cost was approximately $17 per endpoint, per year. It is was a very good price. I have spoken to other people who have purchased CrowdStrike at approximately $60 per endpoint, per year. I have no complaints about the price of this solution."
"Price-wise, we have a better licensing agreement with Bitdefender than we did with competing vendors."
"As I am on a different model, my clients pay me on a monthly basis."
"There are different packages available that vary in terms of licensing fees."
"The solution is not expensive but there are cheaper options in the market. In terms of competitiveness, the price is reasonable with no other additional costs besides the licensing fees."
"MVISION is intended as an enterprise product and it is priced like one. This solution is within the price range of competitors at the enterprise level."
"Licensing fees are billed on a yearly basis."
"The pricing is mid-ranged and quite reasonable compared to other similar products."
"It is based on an annual subscription."
"Customers would need to purchase a license. If a customer purchases an MVISION Endpoint license, he may use that license to install ENS. It's a flexible license where you have the option to either use the McAfee security software or the Windows Defender managed by McAfee, which is MVISION Endpoint."
Advanced Malware Protection (AMP) is subscription-based, managed through a web-based management console, and deployed on a variety of platforms that protects endpoints, network, email and web Traffic. AMP key features include the following: Global threat intelligence to proactively defend against known and emerging threats, Advanced sandboxing that performs automated static and dynamic analysis of files against more than 700 behavioral indicators, Point-in-time malware detection and blocking in real time and Continuous analysis and retrospective security regardless of the file's disposition and Continuous analysis and retrospective security.
Bitdefender GravityZone's ENDPOINT SECURITY TOOLS intelligent security agent assesses the host machine at installation to self-configure to optimal form, and adapts its behavior according to endpoint accessibility. Security administrators allocate resources to security tasks through policies per groups of machines. They can set security tools to work on a local machine, or they can decide to rely more on Bitdefender Global Protective Network, or totally offload security to security servers.
McAfee MVISION Endpoint delivers enhanced detection and correction capabilities to augment native Microsoft Windows security controls, which are always up to date. Machine learning, credential theft monitoring, and rollback remediation boost the basic security built into the Windows and effectively combat advanced, zero-day threats.
Bitdefender GravityZone Ultra is ranked 8th in Endpoint Detection and Response (EDR) with 14 reviews while McAfee MVISION Endpoint is ranked 22nd in Endpoint Protection for Business (EPP) with 6 reviews. Bitdefender GravityZone Ultra is rated 8.8, while McAfee MVISION Endpoint is rated 8.0. The top reviewer of Bitdefender GravityZone Ultra writes "Great security with excellent standard policies and extremely stable". On the other hand, the top reviewer of McAfee MVISION Endpoint writes "This recognized brand has been reliable in the past but seems to be losing ground to competition". Bitdefender GravityZone Ultra is most compared with SentinelOne, CrowdStrike Falcon, Sophos Intercept X, Microsoft Defender for Endpoint and Check Point Harmony Endpoint, whereas McAfee MVISION Endpoint is most compared with McAfee Endpoint Security, Microsoft Defender for Endpoint, Sophos Intercept X, Trend Micro Apex One and Blackberry Protect.
We monitor all Endpoint Detection and Response (EDR) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.