Korede OlatunjiApplication Manager at Huntington Bancshares Incorporated
Anonymous UserSystems Engineer at a tech services company
Anonymous UserSenior Security Specialist at a manufacturing company
We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
"For the initial first level of support, we provide it from our side. If there's escalation required, we use Cisco tech for the AMP. And again, they are perfect. I mean, one of the best, compared to any other vendors."
"The most valuable features of this solution are the IPS and the integration with ISE."
"The simplicity of use is its most valuable feature. You can very clearly see things."
"The stability of the solution is perfect. I believe it's the most stable solution on the market right now."
"I am really satisfied with the technical support."
"It is a very stable program."
"The solution's integration capabilities are excellent. It's one of the best features."
"It doesn't impact the devices. It is an agent-based solution, and we see no performance knock on cell phones. That was a big thing for us, especially in the mobile world. We don't see battery degradation like you do with other solutions which really drain the battery, as they're constantly doing things. That can shorten the useful life of a device."
"For me, the technical support is good."
"The solution is efficient."
"The dashboard is very good and you can consider it as an interactive UI."
"Cybereason absolutely enables us to mitigate and isolate on the fly. Our managed detection response telemetry has dropped dramatically since we began using it. It's very top-of-mind. We were running some tabletop exercises and none of the detections were getting triggered by the managed security services provider. So we needed to find a solution that would trigger high-fidelity alerts. That was Cybereason and it dramatically changed our landscape from the detection and response perspective."
"We are now able to completely monitor our environment so we can review what is there, which is a big win for us."
"This solution integrates easily and very well with other technologies."
"The solution is 100% stable. We really have had a great time working with it. It hasn't let us down."
"Compared to other solutions, the user interface is good."
"It is easy to use and deploy. It comes with user-friendly manuals."
"McAfee as a whole is a good solution."
"The most valuable feature is the correlation rules."
"It enables us to detect malicious threats, issues, or vulnerabilities in our network."
"The solution needs more in-depth analytics."
"In the next version of this solution, I would like to see the addition of local authentication."
"The initial setup is a bit complex because you need to execute existing antiviruses or security software that you have on your device."
"In the next release, I would for it to have back up abilities. I would like the ability to go back to a point in time to when my PC was uninfected and to the moment of when the infection happened."
"The reporting and analytics areas of the solution need to be improved."
"I would like more seamless integration."
"The technical support is very slow."
"I would recommend that the solution offer more availability in terms of the product portfolio and integration with third-party products."
"The integration with Microsoft solutions and Microsoft capabilities needs to be improved."
"Reporting could be a bit more granular so that we had the ability to check regions and countries. I just noticed that, for instance, if I look at our servers, it's either "contained" or it's "not contained". I don't have the option, for instance, to look at countries. It only allows me to look at users as one big group."
"Cybereason does not have sandbox functionality."
"Ad hoc higher-level reporting to senior management can be improved or can be implemented. That's definitely an area of improvement that they need to focus on."
"I would like to see improvements to the user interface."
"We cannot add new data sources to the most recent version."
"The user interface could be more user-friendly."
"The only drawback is that they don't have any packet capturing or network behavior analysis."
"McAfee is no more providing security updates on this product, and the enhancements to this product seem to have stopped. Moreover, we don't get proper support, and we struggle to get its support. It would be good if they can add some AI engine and out of the box use cases because it is currently limited to the same scenario and the same setup. I have done a POC for Securonix, LogRhythm. These products are much more ahead as compared to McAfee ESM. They have included multiple modules in the same solution. Correlation is very easy. If McAfee ESM can improve, especially in such implementations, then I believe it would be much better."
"It cannot integrate with our Next-Generation Firewall and few applications such as Cisco ACI."
"There should be support for multitenancy in the product."
"We acquired the IBM product because McAfee is slightly confusing to use, and it's broader."
"The costs of 50 licenses of AMP for three years is around $9,360."
"The price is very good."
"The visibility that we have into the endpoint and the forensics that we're able to collect give us value for the price. This is not an overly expensive solution, considering all the things that are provided. You get great performance and value for the cost."
"Whenever you are doing the licensing process, I would highly advise to look at what other Cisco solutions you have in your organization, then evaluate if an Enterprise Agreement is the best way to go. In our case, it was the best way to go. Since we had so many other Cisco products, we were able to tie those in. We were actually able to get several Cisco security solutions for less than if we had bought three or four Cisco security solutions independently or ad hoc."
"In our case, it is a straightforward annual payment through our Enterprise Agreement."
"Our company was very happy with the price of Cisco AMP. It was about a third of what we were paying for System Center Endpoint Protection."
"There are a couple of different consumption models: Pay up front, or if you have an enterprise agreement, you can do a monthly thing. Check your licensing possibilities and see what's best for your organization."
"The Enterprise Agreement is like an all-you-can-eat buffet of Cisco products. In that vein, it was very affordable."
"In terms of pricing, it's a good solution."
"This product is somewhat expensive and should be cheaper."
"We pay for our licensing fees on a yearly basis, and there are no costs in addition to the standard licensing fees."
"The cost is dependent on the customer's environment and requirements."
"The pricing is good, and they are competitive compared to providers such as RSA and IBM QRadar."
"The cost is all included. The finance department handles the financial part, and we mostly don't get involved in it."
"We renew our license annually."
"McAfee is the right choice for a low-budget solution."
"The price is good. It's moderate. We follow a pay-as-you-go model. There are different models available, and they can also be monthly. You can choose monthly or yearly. It's very flexible. If our existing customers exceed the current plan, you can just call McAfee and get it extended."
Advanced Malware Protection (AMP) is subscription-based, managed through a web-based management console, and deployed on a variety of platforms that protects endpoints, network, email and web Traffic. AMP key features include the following: Global threat intelligence to proactively defend against known and emerging threats, Advanced sandboxing that performs automated static and dynamic analysis of files against more than 700 behavioral indicators, Point-in-time malware detection and blocking in real time and Continuous analysis and retrospective security regardless of the file's disposition and Continuous analysis and retrospective security.
Cybereason's Endpoint Detection and Response platform detects in real-time both signature and non-signature-based attacks and accelerates incident investigation and response. Cybereason connects together individual pieces of evidence to form a complete picture of a malicious operation.
McAfee Enterprise Security Manager - the foundation of the security information and event management (SIEM) solution family from McAfee delivers the performance, actionable intelligence, and real-time situational awareness at the speed and scale required for security organizations to identify, understand, and respond to stealthy threats, while the embedded compliance framework simplifies compliance.
Cybereason Endpoint Detection & Response is ranked 13th in Endpoint Detection and Response (EDR) with 5 reviews while McAfee ESM is ranked 11th in Security Information and Event Management (SIEM) with 11 reviews. Cybereason Endpoint Detection & Response is rated 8.0, while McAfee ESM is rated 7.0. The top reviewer of Cybereason Endpoint Detection & Response writes "Does a phenomenal job in detecting anomalous behavior on the network and alerting us immediately". On the other hand, the top reviewer of McAfee ESM writes "A security information and event management solution with a useful search and reporting feature, but cloud integration could be better". Cybereason Endpoint Detection & Response is most compared with CrowdStrike Falcon, SentinelOne, Darktrace and Microsoft Defender Antivirus, whereas McAfee ESM is most compared with IBM QRadar, Splunk, ArcSight Enterprise Security Manager (ESM), LogRhythm NextGen SIEM and RSA NetWitness Logs and Packets (RSA SIEM).
See our list of .
We monitor all Endpoint Detection and Response (EDR) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.