We performed a comparison between Kaspersky Endpoint Security for Business and Sophos Intercept X based on our users’ reviews in five categories. After reading all of the collected data, you can find our conclusion below.
Comparison Results: Sophos Intercept X has a slight edge over Kaspersky Endpoint Security in this comparison, since it is a more lightweight solution.
"The most valuable feature is its threat protection and data privacy, including its cyber attack and data protection, as we need to cover and protect data on user devices."
"Another of my favorite features is called the Device Trajectory, where it shows everything that's going on, on a computer. It shows the point in time when a virus is downloaded, so you can see if the user was surfing the internet or had a program open. It shows every running process and file access on the computer and saves it like a snapshot when it detects something malicious. It also has a File Trajectory, so you can even see if that file has been found on any of your other computers that have AMP."
"One of the best features of AMP is its cloud feature. It doesn't matter where the device is in regards to whether it's inside or outside of your network environment, especially right now when everybody's remote and taken their laptops home. You don't have to be VPNed into the environment for AMP to work. AMP will work anywhere in the world, as long as it has an Internet connection. You get protection and reporting with it. No matter where the device is, AMP has still got coverage on it and is protecting it. You still have the ability to manage and remediate things. The cloud feature is the magic bullet. This is what makes the solution a valuable tool as far as I'm concerned."
"The solution makes it possible to see a threat once and block it everywhere across all endpoints and the entire security platform. It has the ability to block right down to the file and application level across all devices based on policies, such as, blacklisting and whitelisting of software and applications. This is good. Its strength is the ability to identify threats very quickly, then lock them and the network down and block the threats across the organization and all devices, which is what you want. You don't want to be spending time working out how to block something. You want to block something very quickly, letting that flow through to all the devices and avoiding the same scenario on different operating systems."
"The threat Grid with the ability to observe the sandboxing, analyze, and perform investigations of different malicious files has been great."
"Device Trajectory is one of the most valuable features. We're able to dig in and really understand how things came to be and where to focus our efforts."
"Among the most valuable features are the exclusions. And on the scalability side, we can integrate well with the SIEM orchestration engine and a number of applications that are proprietary or open source."
"The ability to detonate a particular problem in a sandbox environment and understand what the effects are, is helpful. We're trying, for example, to determine, when people send information in, if an attachment is legitimate or not. You just have to open it. If you can do that in a secure sandbox environment, that's an invaluable feature. What you would do otherwise would be very risky and tedious."
"This product is easy to use."
"Endpoint Security is efficient and easy to use. It doesn't slow the performance of your personal computer."
"One of the most valuable features is that it's quite secure. I'm satisfied with this solution."
"Kaspersky Endpoint Security protects against viruses and dangerous software, and it's also great because it has a component that is useful for the deployment of software versions to the end user's computer."
"It offers very good security protection."
"find some of the most valuable features to be the anti-malware, encryption, and the EDR launching service."
"The initial setup was extremely straightforward and very easy."
"The solution is scalable, we have 500 users using this solution."
"The most valuable feature is the CryptoGuard in Sophos. In a case of a ransomware attack, this feature comes into action to protect us."
"The deployment is quick. It just depends on the environment and what you may be replacing."
"We find the app control and its threat protection to be the best features."
"The most valuable features are ease of use and the GUI."
"The updates and a lot of the day-to-day fiddling that you would have to do with it, can all be done from the cloud so it's easy to manage, and very easy to administer."
"One of the best use cases involves synchronized security staff, which allows us to manage both the firewall and the anti-virus features from the cloud."
"The most valuable feature of Sophos Intercept X is cloud management."
"The most valuable feature of Sophos Intercept X is a web filtering and URL sanity checks. Overall the solution is well balanced with all its features."
"We have had some problems with updates not playing nice with our environment. This is important, because if there is a new version, we need to test it thoroughly before it goes into production. We cannot just say, "There's a new version. It's not going to give us any problems." With the complexity of the solution using multiple engines for multiple tasks, it can sometimes cause performance issues on our endpoints. Therefore, we need to test it before we deploy. That takes one to three days before we can be certain that the new version plays nice with our environment."
"It could be improved in connection with artificial intelligence and IoT."
"The thing I hate the most, which they have not fixed, is when it creates duplicate entries within a console. If you have a computer and you upgrade from Windows 7 to Windows 10, or you upgrade your agent from version 6 to 7, it creates a new instance in there instead of updating the information. Instead of paying a license for one computer, I have to license two computers until I manually go in, search for all the duplicate entries, and clean them out myself."
"The GUI needs improvement, it's not good."
"...the greatest value of all, would be to make the security into a single pane of glass. Whilst these products are largely integrated from a Talos perspective, they're not integrated from a portal perspective. For example, we have to look at an Umbrella portal and a separate AMP portal. We also have to look at a separate portal for the firewalls. If I could wave a magic wand and have one thing, I would put all the Cisco products into one, simple management portal."
"In Orbital, there are tons of prebuilt queries, but there is not a lot of information in lay terms. There isn't enough information to help us with what we're looking for and why we are looking for it with this query. There are probably a dozen queries in there that really focus on what I need to focus on, but they are not always easy to find the first time through."
"The connector updates are very easily done now, and that's improving. Previously, the connector had an issue, where almost every time it needed to be updated, it required a machine reboot. This was always a bit of an inconvenience and a bug. Because with a lot of software now, you don't need to do that and shouldn't need to be rebooting all the time."
"I would like to see integration with Cisco Analytics."
"They should continue to put more security measures in place in order to make it more robust."
"The cloud needs to be more robust. We have 1,500 users and Kaspersky has issues handling them. It's a problem."
"I've had some problems with the web interface. For example, when I was running a trace, it's difficult to find this function, but I can see it when I go on the server. So, if I want to implement the EDR functions on the web interface, it's very difficult because the command button or the link doesn't appear."
"The encryption feature could improve."
"The process for upgrades is very slow."
"I'd like Kaspersky to be more stable and secure."
"Kaspersky Endpoint Security could have more visibility and threat hunting. Right now, if it detects a file, it's quarantined, and then we can't find more details other than the path and the file name. We don't see what process it's warning off and how the virus got in. So, the reporting on the quarantined items, why were they quarantined, etc., could be improved."
"As far as improvements, maybe the licensing could be cheaper, but I think this solution is pretty okay."
"The pricing could be a bit lower to match the normal retail pricing."
"Should include additional integration."
"Integration with firewall solutions could be better."
"When there is an event generated by either the firewall or Intercept X, and the originating IP address is the same, these should be merged into a single event rather than two."
"It should offer better security updates."
"Through Sophos Central I would like to see the ability to zero in and produce a report about the challenges being faced by a particular machine and user, to know if a virus is appearing only on that specific machine or also on others."
"The security is good but the feature set is limited."
"The technical support is the lone sore-point when dealing with this product."
More Kaspersky Endpoint Security for Business Pricing and Cost Advice →
Kaspersky Endpoint Security for Business is ranked 12th in Endpoint Protection for Business (EPP) with 70 reviews while Sophos Intercept X is ranked 6th in Endpoint Protection for Business (EPP) with 63 reviews. Kaspersky Endpoint Security for Business is rated 8.2, while Sophos Intercept X is rated 8.6. The top reviewer of Kaspersky Endpoint Security for Business writes "A mature product offering good protection and very good features". On the other hand, the top reviewer of Sophos Intercept X writes "Great reporting and good training with a pretty straightforward setup". Kaspersky Endpoint Security for Business is most compared with Microsoft Defender for Endpoint, CrowdStrike Falcon, Cortex XDR by Palo Alto Networks, Fortinet FortiClient and Carbon Black CB Defense, whereas Sophos Intercept X is most compared with Microsoft Defender for Endpoint, CrowdStrike Falcon, SentinelOne, Cortex XDR by Palo Alto Networks and Bitdefender GravityZone Ultra. See our Kaspersky Endpoint Security for Business vs. Sophos Intercept X report.
See our list of best Endpoint Protection for Business (EPP) vendors.
We monitor all Endpoint Protection for Business (EPP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
