We changed our name from IT Central Station: Here's why

CrowdStrike Falcon vs Sophos Intercept X comparison

Cancel
You must select at least 2 products to compare!
Featured Review
Find out what your peers are saying about CrowdStrike Falcon vs. Sophos Intercept X and other solutions. Updated: January 2022.
563,148 professionals have used our research since 2012.
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"If somebody has been compromised, the question always is: How has it affected other devices in the network? Cisco AMP gives you a very neat view of that.""Among the most valuable features are the exclusions. And on the scalability side, we can integrate well with the SIEM orchestration engine and a number of applications that are proprietary or open source.""The entirety of our network infrastructure is Cisco and the most valuable feature is the integration.""Integration is a key selling factor for Cisco security products. We have a Cisco Enterprise Agreement with access to Cisco Email Security, Cisco Firepower, Cisco Stealthwatch, Cisco Talos, Cisco Threat Grid, Cisco Umbrella, and also third-party solutions. This is key to our security and maximizing operations. Because we do have the Email Security appliance and it is integrated with Threat Response, we have everything tied together. Additionally, we are using the Cisco SecureX platform, as we were a beta test for that new solution. With SecureX, we are able to pull all those applications into one pane for visibility and maintenance. This greatly maximizes our security operations.""The threat Grid with the ability to observe the sandboxing, analyze, and perform investigations of different malicious files has been great.""The solution's integration capabilities are excellent. It's one of the best features.""It doesn't impact the devices. It is an agent-based solution, and we see no performance knock on cell phones. That was a big thing for us, especially in the mobile world. We don't see battery degradation like you do with other solutions which really drain the battery, as they're constantly doing things. That can shorten the useful life of a device.""One of the best features of AMP is its cloud feature. It doesn't matter where the device is in regards to whether it's inside or outside of your network environment, especially right now when everybody's remote and taken their laptops home. You don't have to be VPNed into the environment for AMP to work. AMP will work anywhere in the world, as long as it has an Internet connection. You get protection and reporting with it. No matter where the device is, AMP has still got coverage on it and is protecting it. You still have the ability to manage and remediate things. The cloud feature is the magic bullet. This is what makes the solution a valuable tool as far as I'm concerned."

More Cisco Secure Endpoint Pros →

"CrowdStrike Falcon is a very light solution. It does not use too much processor or RAM.""I like the Overwatch feature the most.""There's almost no maintenance required. It's very low if there's any at all.""The initial setup is very simple.""The OverWatch is the most valuable feature to me. It's a 24x7 monitoring service, and when they see anything suspicious in my environment, they will investigate.""The feature that I find to be the most valuable, is being able to look at the system analysis and being able to baseline what is installed on the system.""Cyberattack detection is very good. We use it for detecting different vulnerabilities, such as ransomware, virus, and malware. It is a good product today when compared to Symantec that we used previously.""The most valuable feature is the activity dashboard because it gives you a holistic view of your environment from a security standpoint."

More CrowdStrike Falcon Pros →

"Offers artificial intelligence, security metrics and a lot of information gathered to make decisions.""Sophos Intercept X is easy to install and has a lower price than similar solutions.""Synchronization with the firewall is most valuable.""This product integrates well with Sophos firewalls and should be seriously considered by Sophos Firewall clients.""It is easy to interact with, and its cost is also good.""There do not seem to be any limitations to the scalability of this product.""It's quite simple to use and user friendly.""Anti-virus captures malicious threats and an aggressive next generation firewall."

More Sophos Intercept X Pros →

Cons
"We don't have issues. We think that Cisco covers all of the security aspects on the market. They continue to innovate in the right way.""The thing I hate the most, which they have not fixed, is when it creates duplicate entries within a console. If you have a computer and you upgrade from Windows 7 to Windows 10, or you upgrade your agent from version 6 to 7, it creates a new instance in there instead of updating the information. Instead of paying a license for one computer, I have to license two computers until I manually go in, search for all the duplicate entries, and clean them out myself.""I would like to see integration with Cisco Analytics.""In Orbital, there are tons of prebuilt queries, but there is not a lot of information in lay terms. There isn't enough information to help us with what we're looking for and why we are looking for it with this query. There are probably a dozen queries in there that really focus on what I need to focus on, but they are not always easy to find the first time through.""The GUI needs improvement, it's not good.""The one challenge that I see is the use of multiple endpoint protection platforms. For instance, we have AMP, but we also have Microsoft Windows Defender, System Center Endpoint Protection, and Microsoft Malware Protection Engine deployed. So, we have a bunch of different things that do the same thing. What winds up happening is, e.g., if I get an alert for a potential incident or malware and want to pull the file, I'll go to fetch the file to analyze it. But, one of these other programs has already gotten it, so the file has already been quarantined by another endpoint protection system. AMP doesn't realize that and the file fetch fails, then you're left wondering what's going on.""The connector updates are very easily done now, and that's improving. Previously, the connector had an issue, where almost every time it needed to be updated, it required a machine reboot. This was always a bit of an inconvenience and a bug. Because with a lot of software now, you don't need to do that and shouldn't need to be rebooting all the time.""I would recommend that the solution offer more availability in terms of the product portfolio and integration with third-party products."

More Cisco Secure Endpoint Cons →

"The management of the solution could improve.""The solution could improve by providing more types of reports because it's in the detection span you cannot re-export anything. If it could be exported to a CSV file directly there it would help a lot. I currently need to do this by API to get what I need.""I would like them to improve the correlation of data in the search algorithms. When we run an investigation, malware, phishing, etc., I want to look at multiple endpoints at once to correlate that data to see the likenesses, e.g., how are they not alike or what systems and processes are running across those systems? I don't want to have to run the same search in their Spotlight module five, 10, 15, or 100 times to get 100 different results, copy that data out, and then correlate it on my own. In a very simple way, I want to be able to load up a comma-delimited list giving me the spotlight data on these X amount of hosts, letting me search for it quickly. We have had to go back to CrowdStrike, and say, "Our search are taking far too long for even one host." They did bump up the cores and that did improve performance, but it is still kind of slow to get that Spotlight data. That is probably our biggest pain point. I think that needs some help. I understand this kind of information access is probably not the easiest thing to do. It is probably a big ask depending on how their back-end is setup.""It would be nice if the dashboard had some more information upfront, and looked a little better.""They need to strengthen the forensic capabilities of this product, for e-discovery.""The price is too high.""CrowdStrike Falcon could improve if it became an XDR. When we look only to an end-point, we lost the context of the environment. I know it's another line of design of the product. However, if CrowdStrike becomes an XDR, it could be very good.""In the six months that I have been using CrowdStrike, it has not been able to detect anything."

More CrowdStrike Falcon Cons →

"I would like the solution to have more functions and to be more user-friendly.""The security is good but the feature set is limited.""I would like to see better support for virtual and desktop infrastructures.""They don't have the full stack of offerings as compared to the other competitive products that we see.""The EDR could be improved, and perhaps the User Interface.""The main real-time scanning takes most of the processing power of my notebook.""The performance is very slow and should be faster.""I have not done it, but integrating it with authenticating the users on the Windows system looks a bit complicated to me. It could be because I don't understand it."

More Sophos Intercept X Cons →

Pricing and Cost Advice
  • "The visibility that we have into the endpoint and the forensics that we're able to collect give us value for the price. This is not an overly expensive solution, considering all the things that are provided. You get great performance and value for the cost."
  • "Whenever you are doing the licensing process, I would highly advise to look at what other Cisco solutions you have in your organization, then evaluate if an Enterprise Agreement is the best way to go. In our case, it was the best way to go. Since we had so many other Cisco products, we were able to tie those in. We were actually able to get several Cisco security solutions for less than if we had bought three or four Cisco security solutions independently or ad hoc."
  • "In our case, it is a straightforward annual payment through our Enterprise Agreement."
  • "Our company was very happy with the price of Cisco AMP. It was about a third of what we were paying for System Center Endpoint Protection."
  • "There are a couple of different consumption models: Pay up front, or if you have an enterprise agreement, you can do a monthly thing. Check your licensing possibilities and see what's best for your organization."
  • "The Enterprise Agreement is like an all-you-can-eat buffet of Cisco products. In that vein, it was very affordable."
  • "We can know if something bad is potentially happening instantaneously and prevent it from happening. We can go to a device and isolate it before it infects other devices. In our environment, that's millions of dollars saved in a matter of seconds."
  • "The pricing and licensing are reasonable. The cost of AMP for Endpoints is inline with all the other software that has a monthly endpoint cost. It might be a little bit higher than other antivirus type products, but we're only talking about a dollar a month per user. I don't see that cost as being an issue if it's going to give us the confidence and security that we're looking for. We have had a lot of success and happiness with what we're using, so there's no point in changing."
  • More Cisco Secure Endpoint Pricing and Cost Advice →

  • "Our company pays approximately US$ 65,000 annually for 900 machines."
  • "The pricing on CrowdStrike is per license. It was about $42 per seat yearly."
  • "The pricing could be reduced. If it was more reasonable that would be great."
  • "Our licensing fees were between $50,000 and $60,000 per year, which was pretty expensive for a small business."
  • "When comparing to Microsoft, CrowdStrike Falcon is more expensive."
  • "All I can say about the licensing cost is that it's negotiable."
  • "The price is too high."
  • "The pricing is good and there are no costs in addition to the standard licensing fees."
  • More CrowdStrike Falcon Pricing and Cost Advice →

  • "When you start going to the EDR technologies and the MTR, it is a little bit expensive. It's a very good technology, and obviously, you're going to pay for it, but the pricing could do a little bit of work."
  • "We were able to eliminate the ransomware using the one-month, full-featured trial license."
  • "Licensing is based on the number of users. They give a discount for editors who are considered as important members. From what I know, Sophos products are not expensive. If you have a license extension, you just need to contact the editor or partner to change the mode of licensing or extend the license to cover more people."
  • "Intercept X for endpoints is around $35 per user per year. The server version is $95 per server per year."
  • "I find the pricing to be a little bit expensive, although it is acceptable, for now."
  • "The price of this product should be reduced because it is a little high."
  • "The pricing is average for software like this, but you can purchase additional services if you wish."
  • "Compared to other solutions, such as CrowdStrike, we are most certainly happy with its pricing. We did a three year-business deal."
  • More Sophos Intercept X Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Endpoint Protection for Business (EPP) solutions are best for your needs.
    563,148 professionals have used our research since 2012.
    Questions from the Community
    Top Answer: 
    The most valuable feature is signature-based malware detection.
    Top Answer: 
    Licensing fees are on a yearly basis and I am happy with the pricing.
    Top Answer: 
    The GUI needs improvement, it's not good. There are false positives in emails. At times, the emails are blocked and… more »
    Top Answer: 
    Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions… more »
    Top Answer: 
    Both of these products perform similarly and have many outstanding attributes. CrowdStrike Falcon offers an amazing… more »
    Top Answer: 
    The CrowdStrike solution delivers a lot of information about incidents. It has a very light sensor that will never push… more »
    Top Answer: 
    I like that Crowdstrike Falcon allows me to easily correlate data between my firewalls. Its detection and machine… more »
    Top Answer: 
    What I have found the most valuable about Sophos Intercept X is the ease of use with management administration and the… more »
    Top Answer: 
    I would say that Sophos Intercept X is comparable to other solutions out there, but it is a premium business product… more »
    Comparisons
    Also Known As
    Cisco AMP for Endpoints
    CrowdStrike
    Intercept X
    Learn More
    Overview

    Advanced Malware Protection (AMP) is subscription-based, managed through a web-based management console, and deployed on a variety of platforms that protects endpoints, network, email and web Traffic. AMP key features include the following: Global threat intelligence to proactively defend against known and emerging threats, Advanced sandboxing that performs automated static and dynamic analysis of files against more than 700 behavioral indicators, Point-in-time malware detection and blocking in real time and Continuous analysis and retrospective security regardless of the file's disposition and Continuous analysis and retrospective security.

    CrowdStrike is the leader in cloud-delivered next-generation endpoint protection. CrowdStrike has revolutionized endpoint protection by being the first and only company to unify next-generation antivirus (AV), endpoint detection and response (EDR), and a 24/7 managed hunting service — all delivered via a single lightweight agent. 

    Many of the world’s largest organizations already put their trust in CrowdStrike, including three of the 10 largest global companies by revenue, five of the 10 largest financial institutions, three of the top 10 health care providers, and three of the top 10 energy companies.

    Request a free trial here: https://go.crowdstrike.com/try-falcon-prevent

    Sophos Intercept X stops the widest range of attacks with a unique combination of deep learning malware detection, exploit prevention, anti-ransomware, and more.

    Offer
    Learn more about Cisco Secure Endpoint
    Get Fast and Easy Protection Against All Threats

    Protect your organization from all threats - not just malware - even when computers and servers aren’t connected to the internet. Start your free trial and deploy CrowdStrike Falcon within minutes to start receiving full threat protection.

    Learn more about Sophos Intercept X
    Sample Customers
    Heritage Bank, Mobile County Schools, NHL University, Thunder Bay Regional, Yokogawa Electric, Sam Houston State University, First Financial Bank
    Information Not Available
    Flexible Systems
    Top Industries
    REVIEWERS
    Manufacturing Company13%
    Government13%
    Healthcare Company13%
    University7%
    VISITORS READING REVIEWS
    Comms Service Provider24%
    Computer Software Company23%
    Government7%
    Financial Services Firm5%
    REVIEWERS
    Financial Services Firm17%
    Energy/Utilities Company9%
    Hospitality Company9%
    Insurance Company9%
    VISITORS READING REVIEWS
    Computer Software Company25%
    Comms Service Provider19%
    Government6%
    Financial Services Firm5%
    REVIEWERS
    Financial Services Firm15%
    Healthcare Company12%
    Manufacturing Company12%
    Insurance Company8%
    VISITORS READING REVIEWS
    Comms Service Provider29%
    Computer Software Company19%
    Government7%
    Educational Organization5%
    Company Size
    REVIEWERS
    Small Business39%
    Midsize Enterprise18%
    Large Enterprise43%
    VISITORS READING REVIEWS
    Small Business28%
    Midsize Enterprise21%
    Large Enterprise50%
    REVIEWERS
    Small Business27%
    Midsize Enterprise23%
    Large Enterprise50%
    VISITORS READING REVIEWS
    Small Business23%
    Midsize Enterprise30%
    Large Enterprise47%
    REVIEWERS
    Small Business59%
    Midsize Enterprise20%
    Large Enterprise21%
    VISITORS READING REVIEWS
    Small Business29%
    Midsize Enterprise30%
    Large Enterprise41%
    Find out what your peers are saying about CrowdStrike Falcon vs. Sophos Intercept X and other solutions. Updated: January 2022.
    563,148 professionals have used our research since 2012.

    CrowdStrike Falcon is ranked 1st in Endpoint Protection for Business (EPP) with 33 reviews while Sophos Intercept X is ranked 7th in Endpoint Protection for Business (EPP) with 54 reviews. CrowdStrike Falcon is rated 8.8, while Sophos Intercept X is rated 8.6. The top reviewer of CrowdStrike Falcon writes "Speeds up the data collection for our phishing playbooks dramatically". On the other hand, the top reviewer of Sophos Intercept X writes "Great reporting and good training with a pretty straightforward setup". CrowdStrike Falcon is most compared with Microsoft Defender for Endpoint, SentinelOne, Cortex XDR by Palo Alto Networks, Darktrace and Symantec End-User Endpoint Security, whereas Sophos Intercept X is most compared with Microsoft Defender for Endpoint, Cortex XDR by Palo Alto Networks, Kaspersky Endpoint Security for Business, SentinelOne and Webroot Business Endpoint Protection. See our CrowdStrike Falcon vs. Sophos Intercept X report.

    See our list of best Endpoint Protection for Business (EPP) vendors and best Endpoint Detection and Response (EDR) vendors.

    We monitor all Endpoint Protection for Business (EPP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.