Netwrix Endpoint Protector Reviews

Our main use case involved compliance requirements stating that we wanted to have DLP functionality on our endpoint devices, mainly regarding device control for USB peripheral ports. We wanted to protect PII data that was flowing through, along with certain data protection suites for PCI.

We also wanted to protect data regarding phone numbers, usernames, and emails under this solution.

Let me reference my file regarding the best features of Netwrix Endpoint Protector. The solution had some issues related to licensing; when the hostname changes of a system, it would get a duplicate entry. License utilization was a concern as when we were changing the hostname from asset category to asset tag and from personal hostnames to asset tags, it started taking multiple licenses. In the dashboard, one system was utilizing two licenses for a single system. Additionally, it had limited functionality in terms of safeguarding Linux operating systems; during our usage period, the DLP function was fully applied only over Windows and Mac.

Regarding real-time alerts, we had them in place and received them promptly. We had set it up effectively, and the partner who assisted with implementation helped us significantly with this part. There was no lag in that functionality; it was precise.

The licensing issue was eventually resolved by the team, but the Linux client issue persisted. Not all the policies applied to the Linux clients were as effective as those for Mac and Windows. That was somewhat of a downside for us. I cannot speak to whether they have improved this in the past two years.

An area for improvement is that when a package is provided, there should be no additional elements required from the user's side. For instance, there is an activation key, and you have to specify the host where you need to redirect and fetch the license. That was disappointing when it comes to mass deployment.

I have experience working with Netwrix Endpoint Protector for approximately two years.

Stability-wise, the solution is stable; we experienced no downtimes during our two years of usage.

In my opinion, this solution is scalable because prior to onboarding it, we took references from the vendor, the implementation vendor, and the CoSoSys team. We had detailed conversations, and several banks use it in full functional capacity. However, our environment is mixed with all three operating system flavors, which was somewhat disadvantageous. We could not utilize it completely because of that. If we had predominantly based our systems on Mac and Windows, it would have been very smooth sailing for us.

I never needed to contact the vendor for technical support because we faced very few issues. Most concerns were resolved during our POC stage, and the requirements were established then. When the implementation occurred, we were functional within a month, with no need for follow-up support.

Positive

I have worked with other tools, specifically CoSoSys and Cisco. We are currently implementing Cisco, so I cannot comment extensively on it. For CoSoSys, we used their DLP functionality, specifically Endpoint DLP.

The initial setup of Netwrix Endpoint Protector was straightforward and not difficult to configure.

A third party suggested by the CoSoSys team assisted with the deployment process.

I previously mentioned CoSoSys as an alternative solution.

I am available for further discussion. My relationship with the vendor is that we were end users for this product. My company name is Exotel Techcom Private Limited, and my title is System Administrator. My email address is sarang.bhagwat@exotel.com. On a scale of 1-10, I rate this solution an 8.

My customers' usual use cases for this solution are mostly for compliance at this juncture because, in Asia, compliance is becoming very important. So many of them are jumping on board, the bandwagon to actually make sure that they are quite compliant when it comes to internal threats.

The Data Loss Prevention (DLP) Netwrix Endpoint Protector product is one of the easiest DLPs that can be installed, and I think that we have successfully deployed many of these in the Asia Pacific region.

The features of Netwrix Endpoint Protector that I have found most valuable so far are the two main key modules which are Content Aware Protection (CAP) and Device Control (DC), which is the hottest selling item from my perspective as a consultant.

I find CAP and DC valuable because they are very granular in nature and it's easily understood and easily configured. That's why it's easy for us to actually position this product to any organizations with no complications.

My impression on the multi-layered protection features of this solution is quite positive because now they've expanded to more things in the DLP itself, that are as good as an enterprise DLP solution. Therefore, I feel that in terms of its pricing values and so on, it is very competitive.

I assess the value of the comprehensive reporting and auditing capabilities provided by Netwrix Endpoint Protector as very good because I am a user myself prior to this, before becoming a reseller and now a distributor. I am actually a walking dictionary for this particular product.

The comprehensive reporting and auditing capabilities are quite granular in terms of gaining insights. We can actually deep dive into quite a lot of things and find a lot of information that they already have. Assuming if there's a breach, we will be able to know exactly where the breach has occurred and what has occurred, and they are quite granular in how they report their information, including their logs. Therefore, they conform to all compliance regulatory bodies too.

My impression of the centralized management console feature of Netwrix Endpoint Protector is that it is one of the simplest centralized monitoring features that even a kid would understand, which is what we need in today's world—nothing complicated.

My impression of the data encryption and control over portable storage devices features of this solution is that they are very good, especially the device controls, which I really enjoy using, particularly when it comes to portable devices USBs and the encryption tools that they have, which is another module called E-lock, or enforce encryption, that they do have. They are well-protected along those lines.

The areas of Netwrix Endpoint Protector that need to be improved include a desire for more graphical interfaces in their systems, as many people today would prefer to see graphical formats for data presentation. I would suggest that Netwrix may want to let the users change the widgets of all the text to some graphical format or add more features along those lines. Other than controls, I feel that they serve the purpose of an Endpoint DLP very well. Netwrix is known as the best DLP for Apple Macintosh computers, which is noteworthy.

I have been working with the product for eight years.

My insights on the stability aspect of this tool indicate that they are very stable. The product has been around for over 15 years now and is very stable because I started using them from version three.

The benefits my customers see from the stability that Netwrix Endpoint Protector provides include it being an easy tool to use, very easily understood, and the administrators who come on board don't have a headache learning what a DLP is. We make it very simple for them during the onboarding process. Therefore, it's easy to manage and maintain.

My opinion on the scalability of Netwrix Endpoint Protector is that they are indeed scalable. When I discuss scalability, it relates to whether they can go up to the enterprise version or not. In data loss prevention, there are three types: Endpoint Protector, Cloud DLP, and Network DLP. We are very strong in Endpoint Protector and do partials of Network DLP and cloud. Everything starts from the endpoint, and we maintain the Endpoint DLP in many cases while working alongside existing DLP systems.

I would rate the technical support for Netwrix Endpoint Protector as a nine because we have trained engineers, and I am also trained. We typically handle level one and level two support in the countries, escalating to level three when we can't resolve issues, and they are equally good.

My experience with the initial setup of Netwrix Endpoint Protector is that it is the simplest DLP setup that anybody could do. You may not believe me; you have to sit beside me to see that happen.

I consider the setup simple because this is actually not a client-server kind of application. It's an instance-based application where the application, the database, and the operating system are hardened. All you need to do is drop it into a VM host and just open it. Within half an hour, you have your system setup, compared to the traditional ways of setting up Windows servers and application installations, which are more complicated.

I don't work for Netwrix or for Semantic, but we are actually distributors for Netwrix in the Asia Pacific region.

My impression of the pricing and licensing costs of this tool is that they are very competitive compared to any other solutions out there today.

I evaluate the flexibility provided by the option to deploy Netwrix Endpoint Protector either in the cloud or on-premises as awesome. They offer three options: on-prem, on own cloud, and the hosted model, which is SaaS, which is totally fantastic. Moreover, there is no difference in how you actually deploy because it is one of the fastest solutions that you can deploy within 30 minutes or less than an hour.

On a scale of 1-10, I rate Netwrix Endpoint Protector a nine.

We are using Netwrix Endpoint Protector for PC Endpoint protection. It is an endpoint security solution ensuring PC security by blocking USB ports and other physical ports and controlling PC access.

Netwrix Endpoint Protector works on Linux and macOS to block USB ports, control internet access, and manage other peripheral ports. It can block and monitor these ports, generate logs of file transfers, and provides exceptional access options. These features are very valuable for us.

There is an important feature that needs to be added. In Linux, it is difficult to control uninstallation. Users can uninstall it at any time, and we can only monitor that it is uninstalled. If there is a feature that can notify in the master dashboard that an agent has been uninstalled, it would be very beneficial.

As I remember, we have been actually working with Netwrix Endpoint Protector for more than three years, possibly more than five years.

I will give them a nine out of ten for stability. 

I rate scalability as nine.

I rate technical support as ten out of ten.

Positive

Actually, I forgot when we selected Netwrix Endpoint Protector, but at that time, we checked some other solutions and found Netwrix very convenient. Right now, I cannot remember any alternatives.

The initial setup is very simple and user-friendly.

When we started, the price was reasonable, but it has been increasing over time. I rate the price as four, indicating it is a bit high.

I will give Netwrix Endpoint Protector an eight out of ten for the overall solution. 

I definitely recommend it, and we have been recommending it to other subsidiaries as well.

I use it to restrict access to USB drives and monitor user activities on laptops to capture log data.

Data security is of paramount importance in today's digital landscape. By selectively sharing certain resources, we can proactively prevent users from unknowingly leaking sensitive data. Through this approach, we gain valuable insights by capturing logs. We leverage a centralized portal to access comprehensive information and proactively block messaging platforms like WhatsApp and other similar applications to further enhance security measures.

The core of its value lies in obtaining logs remotely and exercising control over what employees can or cannot use. It includes tracking email activity and monitoring what they send from their email IDs.

I've encountered some latency issues that appear to be related to the internet speed. When I install the agent on the laptop, the internet speed often drops from 100 MBPS to around 80 MBPS or even as low as 50 MBPS at times. The slow response seems to be connected to the fact that all network traffic is routed through this agent. The challenge arises when trying to analyze the logs, as every single click and action, even a single command in GitHub, generates a multitude of logs. This makes it difficult to extract relevant information. It would be helpful to implement filtering mechanisms so that we can sort and view the data based on software and vendor, providing more clarity and ease in analysis.

I have been working with it for the past four years.

In terms of stability, I would confidently rate this software a perfect ten. It has proven to be remarkably reliable and exceptionally useful in all my experiences.

The software exhibits excellent scalability. In our present company, we are currently utilizing a thousand licenses.

We typically reach out to customer support when encountering issues, especially when internet access or certain security tools are blocked through the core sources. We primarily communicate with them via email. I would rate their support seven out of ten, as the time zone differences can sometimes be a challenge.

Neutral

Setting up the software is straightforward, especially if you are using any MDM software like Java. Deploying it on a new laptop is a seamless process, as you can manage the installation from the portal side. While the overall setup is not overly complicated, it can pose challenges for non-tech-savvy users, especially when installing it on a MacBook, as it involves installing certificates and configuring settings.

The installation process is incredibly swift, often taking less than five minutes. After installing the agent, a laptop reboot may occasionally be necessary. Once that's done, the hostname appears on its portal almost immediately. 

The software comes with a higher price tag when compared to other DLP solutions. The cost varies depending on the number of licenses you intend to purchase.

The suitability of the software depends on the specific needs of the business. In terms of usability and effectiveness, I would rate it a nine out of ten. It offers a user-friendly console and straightforward installation on laptops, making it effortless to access comprehensive information.

It serves as a tool for ensuring compliance and facilitating security audits and it functions as a protective measure against unauthorized data transfers, whether through email or USB devices. The primary focus revolves around maintaining compliance with regulations and safeguarding sensitive information from unauthorized transfers.

The primary advantage lies in preventing internal data leakage, effectively thwarting any unauthorized data transfer within the organization. Additionally, the audit functionality is invaluable, particularly given the mandatory compliance with data security laws, a requisite for every company, especially in India.

Its robust security audit and compliance functionalities prove especially beneficial for businesses in sectors like BFSI (Banking, Financial Services, and Insurance) and Information Technology. Also, the flexibility to independently set, modify, and adapt data security policies is a crucial feature, allowing users to tailor the protection measures according to their specific needs.

The only aspect that prevents it from being a perfect solution is the occasional slower response time.

I have been working with it for eight months now.

The product is highly stable, with no reported issues.

It provides excellent scalability capabilities.

The initial setup is neither overly simplistic nor excessively complex. While it may not be effortlessly intuitive, it doesn't fall into the category of being highly intricate either. The process requires some time, patience, and a basic understanding, as individuals may find it initially challenging. This is often attributed to the unfamiliarity of information technology teams in various companies with data loss prevention solutions.

The deployment process typically begins with a two-way proof of concept on five or six endpoints within the company. Once the POC is completed, addressing most bugs, difficulties, and fine-tuning keywords for Content Aware, the stage is set. The continuous refinement of keywords is crucial during this phase. Following the POC, any remaining issues or customizations are ironed out. Actual deployment, which usually spans about four to five days within a week, is not overly time-consuming. Larger companies may require more time and a larger team for deployment. However, in the case of smaller-sized companies, specifically those with user counts ranging from five hundred to one thousand, a two-member team is generally sufficient. The training process requires an investment of approximately three to four months for the client or customer team to familiarize themselves with the solution. Although it tends to become more straightforward with practice, the initial learning period spans around three months.

The pricing is reasonable for this particular market.

My recommendation for Kaspersky is highly positive. It supports all platforms, including Windows, Linux, and Mac. This broad compatibility across three different operating systems is a significant advantage. If you're someone using multiple platforms, Kaspersky proves to be an excellent and versatile option. Overall, I would rate it eight out of ten.

We were basically using it as a DLP solution, securing our endpoints for any data leaks. We were one of the contractors for IMS and AMM data, working on healthcare data. We had HIPAA compliance, so we had to abide by.

All of the features are effective, but the highlight feature of the product was the data layer inspection. When we talk about a DLP product, data packet inspection is very important. Securing data at rest is easy, but securing data in transit is challenging. We used it comprehensively to secure end drives, data transfers, secure hard drives, and end-user machines. It proved monumental in our operations.

Endpoint Protector, in particular, had some features to be desired for the Mac operating system. The controls it provided were not adequate with Mac machines, especially with the new application registry feature.

I have around three and a half years of experience with this solution. 

It is a very stable product. So, I will rate it a solid eight out of ten. We had a couple of run-throughs with bugs, but, you know, their support was very helpful in resolving them. They immediately included it in their development part and their overall flow chart. So that was very helpful. Within a quarter, we got our issues resolved.

I would rate the scalability a seven out of ten. There are still features to be desired for other operating systems, not just Windows. It needs to offer equally well features for other operating systems.

We had around 10,000 end users using this solution.

The customer service and support were helpful. 

We were using a DLP solution, it was called Safe End. It was an Israeli product from a company called WAVE.

SafeEnd was a very good product on the basics. But, looking at the scalability, the product had nothing much to offer. It was very stagnant and offered only twenty-odd features. We didn't have any scope of scalability moving on to new features. So, it was kind of stopping us from completing our compliance.

The initial setup was easy and interesting at the same time. The overall configuration and setup were engaging. It wasn't just another setting; we found the product very good to work with.

We did it in-house. The deployment took about 18 hours. We used SCCM for endpoint deployment, and since our overall compliance was good, the deployment was seamless.

We saw a return on investment. So, whatever we invest, the level of compliance that we follow through, and the effectiveness of the product. Overall, our clients were very impressed with it, and the amount of money that we were spending on our cybersecurity definitely gives solid ROI on our investment.

The major reason in an organization when we apply.  So financial is a huge factor while we are doing it.  So we found it quite reasonable based on the features it was offering. This solution was not too cheap or too expensive. But for the amount of features that they are offering, it was reasonable.

Overall, I would rate the solution an eight out of ten. Compared to other products in the market, it is a fairly good product. 

It's definitely not the cheapest product. So first gauge your requirement to the point. And make sure you are using this product to the optimum because it has a lot to offer. So if there is any feature that you're not using, I would suggest them to be 100%  sure why you are buying it.

It was the unique seventy-point I used for Linux devices. 

The console is friendly and it supports Mac.

They have many predefined classifiers in terms of data identifiers, and they should improve this. 

As per the market perspectives, the data is driven and the usage is totally modernized. Digitally, there are lots of inventions and the data usage depends on the cloud.

I have been using CoSoSys Endpoint Protector for six months. 

The solution is stable. 

The solution is scalable. 

The initial setup is easy. 

The pricing depends on the customers. 

I rate the overall solution a seven out of ten.

We used Endpoint Protector for the users who were primarily working from home. These workers were contact agents who work on compliant applications, and the potential for client data to be exposed was significant.

I like the data protection feature. Our users were working on a client's CRM application with a lot of client-related EIA information. We did not want the users to be able to send any of this data outside. I also like its ability to protect against data leaks via emails and social media. I like that you can deploy it quickly, and it requires no training.

It would be better if they had an inbound restriction feature. For example, I work out of my home from my personal computer. All my policies can be deployed while working. When I am done, I should be able to use my machine as my personal machine, and all these policies should be waived. In the next release, I want time bound restriction of the policies because most of these users were working out of home and using their personal computers.

I used Endpoint Protector for about six months.

Endpoint Protector is a stable solution. I didn't face any issues during my time at the organization.

On a scale from one to ten, I would give stability a nine.

I was told that Endpoint Protector was a scalable solution. We have 1500 users, and I was told we could quickly scale to 5000 users.

The initial setup was pretty straightforward. It took us some time to deploy this solution as the users were in different parts of the country. Once we connected with them, deploying this solution took about ten minutes.

On a scale from one to ten, I would give the initial setup a nine.

A third-party vendor or partner helped us implement this solution. They were very helpful and were available during and after deployment.

We found the pricing pretty attractive. However, volume-based pricing wasn't available.

On a scale from one to ten, I would give pricing a seven.

I advise potential users to figure out the actual use case for deployment. For example, will it be for a corporate network or remote users? This is because the policies you will deploy will be different.

On a scale from one to ten, I would give Endpoint Protector a nine.

The product's most valuable feature is its ability to support Linux operating systems.

CoSoSys Endpoint Protector's network-level DLP and integration with mail servers need improvement.

We have been using CoSoSys Endpoint Protector for five or six years.

We never encountered any bugs or issues. The product has been running for many years since we set it up with the server.

We have 10 CoSoSys Endpoint Protector users in our organization.

The technical support services are good.

CoSoSys Endpoint Protector can be deployed on the cloud and on-premises. It takes 15 minutes to set up the server and get it running. The process is easy.

The product is worth the investment.

The product has average pricing.

The product supports Linux systems and multiple source codes. I advise others to go for it. I rate it a nine out of ten.

CoSoSys Endpoint Protector is a unique solution for Linux devices. It has a user-friendly console that makes it easy to navigate and create policies.

CoSoSys is supported on Mac devices. One unique feature is drive encryption. We have portable devices, and they have a password vault. If you transfer any data to your device, you can use the password vault to protect it.

CoSoSys Endpoint Protector has many predefined classifiers for data identifiers. It needs to improve in terms of policy customization. I observed that fewer policies were available, which needs to be improved so that users can modify and view policies based on their requirements and create their templates. The audit part could be added. With our current architecture, we have a lot of alerts, for example, when a user requests access to a policy temporarily for a business requirement. We can make an automatic request mechanism that would work for this type of scenario, which would help us sleep better at night.

I have been using CoSoSys Endpoint Protector for no longer than six months. We are using the latest version of the solution.

The product is stable apart from the policies because it is limited.

The solution is scalable. Despite the limited resources, customers are looking for some platforms for Mac and Linux, but I have tried many products on the market. For example, Forcepoint and Trend Micro are there.

We have Forcepoint for endpoint data leakage protection and this scale and footprint for network protection. It depends on business requirements.

The initial setup is easy and seamless.

The solution’s pricing is a normal industry standard and depends on customers and salespersons.

CoSoSys Endpoint Protector has improved significantly in recent years, with new features and enhancements that make it a leading data loss prevention solution. Data identification is essential for data protection, as CoSoSys Endpoint Protector cannot protect data it cannot identify. Overall, I rate the solution a six out of ten.