Fidelis Elevate Pros and Cons

It has also improved our hunt ability with quick search tools, to zone in on malware or other anomalies. It is able to link items to incidents from other consoles, and works natively with the SIEM.

It has a rating system now so you can rate things up or down, depending on your environment. This means alerting can be customized, yet still pick up anomalies.

Reporting is great, it is easy to do a quick search through 45 days of data for something of interest.

After rack and stack, devices were up and running base configurations within two hours. As with any IPS, tuning is required to stop false positives. This is no different, but the ease of use of the interface allowed my team to start making adjustments within a few hours.

The initial setup is very straightforward. The deployment of the server doesn't take so long; about a day or two max.

What I like the most about this solution is the complexity. It covers a lot of areas, unlike other solutions.

The interface bug needs to be squashed once and for all. This has been the predominant issue with an otherwise stellar product. It reboots itself unscheduled, about once a month, due to a memory buffer flaw in the interface.

We position the solution as an antivirus, but this part of the solution needs improvement. They need to generally enhance the features that they have, rather than adding anything new.

The reports in the endpoint area of Elevate can be improved.