Since deploying to a mobile device is not your average deployment to a workstation endpoint or a server, I would like to see more functions. It would be nice to have more flexibility regarding deployment.

When there is an attack attempt on mobile, there doesn't seem to be much of a notification. Therefore, I'm not sure if the product is doing something or if someone is trying to spoof the product to get a response out of me. 

For a lot of the issues my team experienced from Symantec Endpoint Protection Mobile, Symantec said that getting the issues resolved would mean going through the partner that sold the product and creating an incident report to get the team to work on the actual company environment.

A lot of the problems my team has been having from Symantec Endpoint Protection Mobile were associated with Outlook for endpoint users who were being locked out of the Outlook application.

Another area for improvement in Symantec Endpoint Protection Mobile is its central web hub, where you're supposed to be able to update all of the endpoints because it wasn't reaching the endpoints. For example, even if the central web hub was able to see the endpoints and do the required scans, whenever you'd go to do a policy change, the policy change wouldn't propagate down to the endpoints.

The central web hub allows you to monitor all of your endpoints and allows you to choose actions you'd want to do to each of the endpoints such as pushing down on updates or scanning the system. The problem my team usually gets is that majority of the time, whenever my team would do policy updates, the updates won't propagate down to the users, so it was very inconsistent.

Needing to manually go through and scan systems is also an area for improvement in Symantec Endpoint Protection Mobile. Currently, there's no way to automate its scanning process.

A lot of the other issues started appearing in Symantec Endpoint Protection Mobile during situations when people wanted to customize different applications. Symantec doesn't like people doing a lot of customizations. For example, the main problem in my company is users losing access to Outlook, but then my team discovered that there was a specific policy set that you could disable, and it would fix a lot of the Outlook issues. However, when you'd go to change that policy set and attach that to a user to overwrite policies on the user side, it just wouldn't do anything for that user. It wouldn't even show that the policy was updated, so this is what needs to be improved in Symantec Endpoint Protection Mobile.

I've only spent a year with it. I'm still quite new to the solution. I'm not fully aware of all of its features. we lack local training to be much aware of proper administration & management of the product. 

The product price is too expensive relatively to the Egyptian market here. Other competitors here in the local market offer more benefit than Symantec, I recommend if they need can be more competitive specially cost-wise.

Application and device control needs to be improved. We have been talking to Symantec because we have some requirements we need in this solution. They are working with us to include this if we upgrade to the enterprise edition. We are working now on this point.

We already have communicated to Symantec that we are looking for some features to be added to Endpoint. For example, we need to enhance login features for management to have good visibility of the events. We asked to make device controls more advanced to have read or written features like other endpoint services from another vendor. Symantec said we can check it and upgrade from Express to Enterprise to cover this. We are working with them on these points.

I'm not sure if there's anything lacking; I personally don't use the solution too much, so I'd have to look at it a bit and do some more research. I'm more on the operation side of things.

Having better, real-time support would be an improvement over having to send an email.

A central database to keep track of devices would be helpful.