Symantec Advanced Threat Protection Competitors and Alternatives

What is most valuable?

Dynamic analysis.

How has it helped my organization?

WildFire has been instrumental in blocking a number of new threats, before common desktop anti-virus tools were able to... more»

What needs improvement?

I am very happy with WildFire and can see no obvious areas of improvement at this point.

What's my experience with pricing, setup cost, and licensing?

It's not particularly cheap, but it is absolutely worth it.

Which other solutions did I evaluate?

We previously used Fortinet. However, we found it to miss a lot of incoming viruses, because at the time, they had no... more»

What other advice do I have?

Do it.

What is most valuable?

* Packet Solution: Allows analyst proactive hunting and alerting on daily sophisticated APTs. * Broker service:... more»

How has it helped my organization?

Reliable in terms of no data loss. Plays a huge role in device health checks (Event Source Monitor). Provides FSEs... more»

What needs improvement?

Advance monitoring and alerting feature is not stable (Event Stream Analysis). Does not allow certain use cases running... more»

What's my experience with pricing, setup cost, and licensing?

RSA licensing ranges per core devices and services. An additional Designated Support Engineer can be acquired at quite... more»

Which other solutions did I evaluate?

None in production other than RSA. However, I will be using IBM QRadar towards the end of this year.

What other advice do I have?

Either operating this solution in-house or reselling. First, outline all your data sources. Give more priority to the... more»

What is most valuable?

You have access to a report as to what behaviors the example file entered in the registry. Windows changed this parameter in order to obtain a breach, and this is demonstrated by report.

How has it helped my organization?

Improved the security imagine if any hacker develops a file for invasion my antivirus, it will not have a vaccine where FortiSandbox enters.

What needs improvement?

At the moment, I do not see anything to improve. For additional features, maybe a form of execution pain files in a non-virtual environment because it has threats that identify when it is being run in a virtual machine.