Symantec Data Center Security Reviews

We deployed the solution for a client for both Windows and non-Windows servers.

They didn't want to have a complete prevention feature. They were using it for any anomaly detection on the critical host and for complete system lockdowns for a few of the database servers.

The beauty of the product is the complete system lockdown feature. It ingests all the logs over a month, including the daily processes, tasks, legitimate users, and activities. The tool will then detect any anomalies, such as an intruder who has breached the network, which can trigger the system lockdown feature if it's enabled and meets the defined threshold.

The prevention feature, for which we could restrict the users, is useful. Let's say there were one Lotus Notes or there was one Domino server that had the directory of all the email users in the organization, and there were around 40,000 users with email accounts in that particular customer location. Apart from a few on top, for example, trusted administrators, no one in the organization should have access to be able to change anything. Even the server admin owner who has created that server cannot do anything and cannot apply a dot or delete that dot from the directory through this particular tool.

We configured it in such a manner so that, apart from those five administrators, no one from the entire organization or an attacker will not be able to make any changes in the directory itself. They cannot spoil it, and they cannot use the information. Even the read access of that particular directory can be revoked from an administrator. 

One key use case for data center security is protecting files within the data center. This is especially important for Linux systems, where locking down specific files is essential to prevent unauthorized manipulation.

Some of our customers have adopted a strategy that combines virtual infrastructure and private cloud-based security solutions, with a focus on anti-malware tools, which is particularly effective when dealing with Linux operating systems, where anti-malware software is crucial. It enables the implementation of agentless security in virtual and mobile environments.

Our primary focus with Symantec Data Center Security revolves around enforcing policies that dictate which addresses are permitted access. The system operates on two key policies: prevention and detection.

The standout feature for me is the precision of Symantec Data Center Security. It ensures that only the right folks can access our machines, especially the critical and genuine folders. The real strength lies in its straightforward approach, offering just two key policies: prevention and detection. It is like having a robust gatekeeper for our system.

We use it primarily for system lockdown and hardening, with a focus on securing legacy systems that are no longer under maintenance. The goal is to employ measures to strengthen and secure these older servers, protecting them from potential vulnerabilities and cyber attacks.

The standout feature is its robust hardening capability. The ability to finely control permissions and restrictions on servers or assets through a customizable rule set is a key strength. This granularity allows for tailored adjustments in line with organizational policies, making it a valuable aspect of the solution.

The granularity of applying the policies is valuable. It is really helpful. Other solutions we use lack granularity.

Agent management is a challenging task. We cannot do it from the console. We will have to use other tools.

This product makes up part of our security solution that we offer to customers for use in data centers and remote sites.

As many people are now working from home, they use this solution so that they can work remotely to their data centers and still keep operations centralized. They need to work flexibly, not only from a geolocation point of view but geographically.

Since the acquisition of Symantec, our customers have not been satisfied with this solution. They are moving to other products such as CrowdStrike, Trend Micro, and McAfee.

Our primary use case of this solution was for checking some program file changes. We are customers of Symantec and I'm an IT security specialist. 

The file integrity monitoring features are the most valuable features of this product. 

We use the product to lock down servers.

We use the product to prevent unauthorized access to data, systems, and servers. It provides essential features for data center security.