



Find out what your peers are saying about SentinelOne, Microsoft, CrowdStrike and others in Endpoint Protection Platform (EPP).
With Cortex XDR by Palo Alto Networks' incident correlation, behavioral detection, and process tree visibility, similar initial triage can often be completed in roughly 10 to 20 minutes, depending on the incident.
They appreciate the rich telemetry data from the solution, as it provides in-depth threat identification.
Cortex XDR by Palo Alto Networks helps to reduce my total cost of ownership significantly.
Symantec Endpoint Security filled gaps in our toolset, particularly with the ability to control network firewall on hosts remotely, which was greatly appreciated.
I definitely see some return on investment from Trellix MOVE AntiVirus.
The management console is very useful and easy to operate, allowing policy deployment in a minimal amount of time.
It adds value by providing centralized control over servers and endpoints.
If the customer is interested in technical capabilities, we demonstrate the tools, setup, implementation, and their working.
The technical support from Palo Alto deserves a mark of ten because they reach out within an hour whenever assistance is needed.
There is no back and forth, and they know what we are asking for and come up with the best resolution for a solution.
If any of these services are missed, it becomes a problem in terms of support tickets, follow-up, or special configuration that needs to be done in the system.
In some cases, it rates as high as ten out of ten, while in others, it can be as low as eight.
There is no support in the German language, which is a problem for many public tenders.
Technical support from Trellix MOVE AntiVirus has been great throughout.
Whenever I raise a ticket, whether critical or high priority, their team responds immediately, often over calls, and works towards closing the request with the highest priority.
They have very professional engineers, and they often respond effectively.
About eighty percent of the time, we receive satisfactory responses.
You can onboard 10,000 endpoints in just hours, which demonstrates the excellent scalability of this product.
Activating the newly purchased licenses is instantaneous, allowing installations without adjustments since it's cloud-based.
Cortex XDR by Palo Alto Networks can be expanded anytime by purchasing another license without any issues related to scalability.
Symantec Endpoint Security is quite scalable, and it is very important for large clients.
The scalability of the servers is good, as it requires computational powers.
We started with 50 users, and now we are using it for 2,000 users.
Trend Micro also offers multiple solutions, now introducing Vision One and XDR, which allows integration with Deep Security for greater visibility from a security standpoint.
Trend Micro Deep Security is highly scalable.
In most organizations, they are using a mix of these security solutions.
Cortex remains fast and responsive, even with increasing data and alerts.
The thresholds we've seen on our firewall boxes at some instances reached 80% to 85%, but even at that level of utilization, we don't observe any latency or any issues reported with respect to accessing the application.
Cortex XDR by Palo Alto Networks can be trusted completely.
I have encountered issues where I had to uninstall and reinstall the product on end users' computers to view the logs again.
Previously, we used to have multiple servers such as GUP servers and numerous servers for pushing updates, but we reduced it and transitioned almost 30,000 devices to CrowdStrike, which was easy to manage.
It has been extremely stable throughout our usage, with no major disturbances.
Trend Micro Deep Security is very stable and provides protection at all times without issues.
We believe that software works fine until it is patched, managed, or monitored by the IT teams.
Improving reporting and dashboard customization, along with the addition of real-time and exportable reports, would help SOC teams greatly.
When a Cortex XDR by Palo Alto Networks incident is confirmed, it would be useful to automatically create a ServiceNow or Jira ticket with the incident summary, including affected endpoints, user indicators, process tree, severity, and recommended response actions.
The inclusion of this feature would allow the application of DLP policies alongside antivirus policies via a single agent and console, making it more competitive as other OEMs often offer DLP solutions as part of their antivirus products.
Device management is not very good and I am not enabling it in my organization due to security reasons.
I would like to see improvements in the scanning part of the solution, specifically to enhance the CPU and hard disk usage during scanning and updates to prevent disruption during work hours.
It is cumbersome to use, particularly in handling firewall management.
This solution will consume more resources for the end users, which is an area for improvement.
When it comes to disadvantages, the user interface of Trellix MOVE AntiVirus is a bit cumbersome and not really user-friendly.
User experience improvement is most crucial, along with enhancements in policy management and the accuracy of the IPS, IDS features for real-time protection.
By seeing the dashboards, executives should understand whether our servers are secure or if there are vulnerabilities, which should be showcased immediately, indicating reasons for risk.
Additionally, the product is overpriced, which makes it difficult to sell to many customers.
The pricing on SentinelOne is far more reasonable and cheaper than Cortex XDR by Palo Alto Networks.
I would say it is definitely not a cheap product, considering how mature it is and how scalable all Palo Alto products are together.
Compared to CrowdStrike, which is very costly, and SentinelOne, which is also very costly, Cortex XDR by Palo Alto Networks is a medium cost-efficient solution.
It seems to be half the cost or more affordable than other solutions.
The pricing is very low compared to other companies like SentinelOne and others.
I rate the pricing, setup cost, and licensing around nine out of ten.
Trellix MOVE AntiVirus is relatively affordable for the budget that we have currently.
We give a fair comparison of all the products, and give them clear insights of the products, which makes it helpful for the customer to make a final decision to purchase the license or product.
Trend Micro Deep Security is considered overpriced, which poses a challenge in selling it to many customers.
The pricing is moderate, not expensive or very cheap.
It incorporates AI for normal behavior detection, distinguishing unusual operations.
The product provides automation responses in case of a threat attack, severity assessments, centralized manageability, and comprehensive compliance features, resulting in reduced costs.
It includes machine learning to easily analyze data and detect complex threats across endpoints, networks, or clouds.
Symantec Endpoint Security offers great features such as reporting capabilities with a customized dashboard that pulls in EDR timelines, threat maps, and compliance metrics into one view.
Symantec Endpoint Security offers many valuable features, such as file explosion, application learning, DLP, injection detection, and EDR solutions for traffic control.
The incident response capabilities allow me to resolve authentication and support issues promptly, ensuring the system operates without downtime.
We can monitor all their vital points. If they are online, offline, if they are being attacked by any viruses, anything that we need to take action upon, it will be on our centralized overview application.
We are using Slack Intelligence, which is also from Trellix, and Threat Intelligence, which are valuable features of this solution.
It has multiple security layers, including anti-malware, intrusion prevention, integrity monitoring, web reputation, application control, firewall, and log inspection.
Patching allows us to virtually patch servers without downtime, which is critical given our limited patching windows, and helps prevent servers from being exploited.
The IPS module offers virtual patches to resolve issues immediately, making it an excellent product that I recommend for anyone with servers.
| Product | Mindshare (%) |
|---|---|
| Symantec Endpoint Security | 4.0% |
| Microsoft Defender for Endpoint | 6.4% |
| CrowdStrike Falcon | 5.5% |
| Other | 84.1% |
| Product | Mindshare (%) |
|---|---|
| Trellix MOVE AntiVirus | 1.1% |
| Microsoft Defender for Endpoint | 6.0% |
| SentinelOne Singularity Endpoint | 3.3% |
| Other | 89.6% |
| Product | Mindshare (%) |
|---|---|
| TrendAI Deep Security | 35.3% |
| Juniper vSRX | 18.6% |
| Sophos Virtualization Security | 14.3% |
| Other | 31.799999999999997% |




| Company Size | Count |
|---|---|
| Small Business | 49 |
| Midsize Enterprise | 21 |
| Large Enterprise | 56 |
| Company Size | Count |
|---|---|
| Small Business | 69 |
| Midsize Enterprise | 32 |
| Large Enterprise | 63 |
| Company Size | Count |
|---|---|
| Small Business | 26 |
| Midsize Enterprise | 16 |
| Large Enterprise | 41 |
| Company Size | Count |
|---|---|
| Small Business | 38 |
| Midsize Enterprise | 24 |
| Large Enterprise | 47 |
Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.
Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.
What are the key features of Cortex XDR?Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.
Symantec Endpoint Security is a comprehensive protection tool designed for antimalware and antivirus defense. Providing centralized management and smooth deployment, it effectively secures environments from small businesses to extensive networks.
Symantec Endpoint Security serves organizations by offering robust protection with features like rapid deployment and centralized management, critical for securing workstations and servers. While appreciated for efficient resource utilization and stable operation, some users report issues with virus detection and cumbersome updates. Pricing is often considered high. It is a popular choice among IT consultants, academic institutions, and service providers for its ability to manage broad and varied security needs efficiently.
What are the key features of Symantec Endpoint Security?In industries like academia and IT consulting, Symantec Endpoint Security fulfills specific needs for robust endpoint protection. Its centralized management and application control make it suitable for educational institutions managing large network systems, while service providers benefit from its flexible deployment options.
Trellix MOVE AntiVirus integrates seamlessly with enterprise systems, offering centralized management and real-time updates. Ideal for businesses due to its low resource consumption and scalability, it ensures robust threat detection and comprehensive network security.
Trellix MOVE AntiVirus is a trusted enterprise-grade antivirus that centralizes endpoint protection across PCs, laptops, and servers. It's designed to protect virtual environments, detect threats on websites, and scan emails and files for risks, ensuring data loss prevention and network security. The platform is valued for its compatibility across systems, user-friendly interface, and its efficiency in managing threats. However, users note that enhancements in threat detection, system performance, and interface usability could further elevate its standing. Despite its robust features, some find its pricing high for its perceived value and seek better integration with other platforms, more intuitive reporting, and an updated dashboard.
What are the standout features of Trellix MOVE AntiVirus?In industries such as finance, healthcare, and technology, implementing Trellix MOVE AntiVirus ensures robust protection of sensitive information across devices and platforms. Organizations benefit from its comprehensive array of security features, including DLP, which is essential for protecting against data breaches. The scalability and low resource consumption accommodate large-scale and growing environments, making it a favored choice for companies seeking to minimize security-related disruptions while maintaining performance.
TrendAI Deep Security offers advanced protection with anti-malware, virtual patching, and intrusion prevention. It supports hybrid and cloud environments, providing comprehensive security solutions for large organizations.
TrendAI Deep Security provides a robust suite of features tailored for defending systems against evolving threats. With centralized management, it seamlessly integrates with hybrid and cloud environments. Notable is its virtual patching, which reduces zero-day vulnerability risks and downtime, making it an optimal choice for large corporations seeking extensive protection. Despite challenges like less intuitive dashboards, compatibility, and performance issues during scanning, it excels in server and endpoint protection, intrusion detection, and application control. It's particularly effective in financial sectors and integrates with cloud platforms to automate security policy deployment.
What are TrendAI Deep Security's most significant features?Organizations in sectors like finance deploy TrendAI Deep Security for its virtual patching and hybrid environment support. The solution's adaptability across cloud platforms ensures secure workloads, making it essential for environments requiring robust threat detection and monitoring.