Fidelis Elevate Reviews

I am part of a team of analysts using Fidelis Elevate in a banking environment. As an analyst, my responsibilities include creating rules for various issues and responding to incidents or calls.

It ensures the stability of network behavior across various aspects of our network and offers responsive capabilities to address incidents promptly.

My customers use it for similar things as their endpoint solution but with a network focus. Analysts rely on it for endpoint threat response, managing endpoints remotely with CMDA and live connections, and network detection and response (NDR). 

It allows the user to integrate data from various NDR and network security vendors for a unified view.

There are many valuable features. The NDR gives very good network visibility, and the endpoint module has a great feature called "Live Connect" for remote connections. They also have "Tasks" that can be run on endpoints to gather specific information or retrieve logs. 

This makes it a powerful EDR tool for remote incident response and forensics, gathering data beyond what the endpoint agent already collects. 

Additionally, network-based anomaly detection helps reduce false positives on the endpoint side, making it a valuable decision-making tool.

We like this solution for some reasons and we don't like it for other reasons. We don't like it because it's new and it has a lot of issues detection-wise; however, they are growing and they are fixing this issue. 

The detection is determined by the analyst. The analyst has to do the detection. It's not similar to FireEye Mandiant, which has pre-set detection. Still, Fidelis Elevate is improving. As of now, they are creating a lot of detection rules and tools for detecting malicious activity.

Configuration, in terms of building the collector and communicating with endpoints, is complex. There is a lot of backend software that needs to be installed on all of the hardware as well.

We use it as an EDR solution for our customers.

EDR is the most valuable part of the solution.

It is used as our primary in-line IDS/IPS system, replacing FireEye NX. It catches more, looks at more ports than Fireeye NX, and is a scalable appliance, unlike our NX which was saturated and shut itself down.

Increased our ability to stop malware before it hits workstations. That ability increased by 200% due to the number of ports it monitors, over the FireEye NX product.

It has also improved our hunt ability with quick search tools, to zone in on malware or other anomalies. It is able to link items to incidents from other consoles, and works natively with the SIEM.

We have a lab in our company and we are service providers. 

The primary use case of this solution is for endpoint detection and response, EDR.

What I like the most about this solution is the complexity. It covers a lot of areas, unlike other solutions.

Also, I like the endpoint script execution.

My company uses Fidelis Endpoint as an EDR solution to monitor all the behaviors from our clients' end to help us prevent fileless attacks and to have the evidence to back up how we prevented the fileless attacks.

The most valuable feature of the solution is past queries about the events.