Share your experience using GigaSMART

I am part of a team of analysts using Fidelis Elevate in a banking environment. As an analyst, my responsibilities include creating rules for various issues and responding to incidents or calls.

It ensures the stability of network behavior across various aspects of our network and offers responsive capabilities to address incidents promptly.

One advantage is that we can respond using various tools and scripts. There are numerous features available to identify and address incidents, including those on Windows and other platforms.

The initial aspect concerns two engines. The first one mentioned is available for searching behaviors directly. The second engine involves the Google Ade tool, which operates on the machine. The challenge arises when attempting to rectify protection rules, causing confusion. It would be beneficial to enhance Rigixs Query. I encounter difficulty removing certain entries in behavior or alerts; likewise, I am unable to add specific calls.

I have been using it for approximately six months.

I would rate its stability capabilities nine out of ten.

I would rate the scalability seven out of ten.

I am highly satisfied with the support; they are incredibly helpful. I would rate it ten out of ten.

Positive

The initial setup is straightforward.

The deployment time varies depending on the customer; the process may extend beyond the initially estimated timeframe, but typically it takes two months. I along with my colleague, have deployed it, assisted by the Fidelis agent.

We have observed a return on investment in terms of time savings, amounting to five hours per day.

I used to work with BitDefender in a different company.

I would recommend it. Overall, I would rate it eight out of ten.

My customers use it for similar things as their endpoint solution but with a network focus. Analysts rely on it for endpoint threat response, managing endpoints remotely with CMDA and live connections, and network detection and response (NDR). 

It allows the user to integrate data from various NDR and network security vendors for a unified view.

There are many valuable features. The NDR gives very good network visibility, and the endpoint module has a great feature called "Live Connect" for remote connections. They also have "Tasks" that can be run on endpoints to gather specific information or retrieve logs. 

This makes it a powerful EDR tool for remote incident response and forensics, gathering data beyond what the endpoint agent already collects. 

Additionally, network-based anomaly detection helps reduce false positives on the endpoint side, making it a valuable decision-making tool.

There is room for improvement in email security. It's a security issue. If you're aiming for XDR, covering the entire threat landscape is crucial. Email is a huge attack vector, and while they have a mailbox module, it's not as strong as the other server modules.

So, email security needs to be more robust.

I have been using this solution since 2013.  For the network, we use version 9.6.2. It's very stable and reliable.

Sometimes, the solution has updates that create minor issues, but it's very rare. I'd rate the stability an eight out of ten. My overall impression is good. 

You just need to increase the resources and license accordingly. So, I would rate the scalability a nine out of ten. 

It's good, it's easy, it's flexible. So, just increasing resources gives you the scalability you need, both up and down. 

We have around 15 customers in Jordan using this solution. We have small, medium, and even enterprise customers using it.

The support is very good. I have almost daily interactions with them for support, and they have a direct connection with us. They can log in remotely or send us solutions over email, so they're very good.

So they maintain stable communication.

Positive

It's very easy to set up. I would rate my experience with the initial setup a ten out of ten, where one is difficult, and ten is easy. 

It's straightforward. You can install the entire product in two hours at most.

Everything's easy, especially if you have the right network connections like connections and switches. Setting those up might take some time, but once it's done, installing all the modules within two hours is achievable.

You need to install the endpoint and network VMs, which total four VMs: Collector, Command Center, Decision Engine, and sensors. You can install one or more sensors and then combine them to integrate all the products together. That takes about ten minutes.

It's somehow expensive. From one to ten, I would rate it a five.  They need to improve the prices. It's very high. We lose customers for price. It's not always worth it for them.

Even for enterprise businesses. It's somehow higher than other products. It's a good product, stable, and with good support. But customers look for both price and technical features. It's just too high compared to other options. It can really scare people off.

All the products use subscription licensing, so it's mostly the same. But you have to pay the same high price every year, which is a problem.

It's a good product, but planning resources is crucial. When implementing, ensure you have the right resources on your physical servers or VMs to get the most out of its features.

Overall, I would rate the solution a nine out of ten.