Stormshield Endpoint Security Reviews

The feature I find most valuable is that it protects the global station.

The solution's integration with the Windows environment could be better. The solution needs 
better integration with products, if it did, it would have the assumption of better security.

The solution is stable. We have 1,000 users.

The technical support is okay. I would rate it as medium.

I wouldn't recommend it to a European customer. I would say in Europe it would be more difficult. I would rate the solution as 8 out of 10.

• HIPS protection
• Continuous behavioural analysis
• Self-learning system for legitimate applications
• Protection from keylogging and raising privileges
• Root kit detection
• It is very good for preventing cryptolocker attacks

We can make a list of whitelisted application based on their vendor certificate, and not the application name. This means for example, we can permit all packages from Microsoft without enabling each product individually. 

Release speed for newer versions. When a new OS is released, you've got to wait half year to get the new version that covers the new Windows OS. StormShield Endpoint is a product that works heavily on the Windows kernel, so every time there's a new Windows version StormShield take half year to push the new, compatible, product out.

It works only in a Windows environment.

We've haven't had any issues with deployment.

We haven't had any issues with stability.

We haven't had any issues with scalability.

• Multi-functionality - All-in-One (NAC, Encryption, Device control, APP control, HIDS/HIPS, AV)
• Easy in-use/to implement
• Disk/Portable Device Encryption and File encryption (only on file /directory level). Possibility to work with encrypted data outside organization environment
• Encryption Key recovery/Guest access to Wifi/Internet
• Flexible licensing policy - after computer end-of-life you can assign the license to another device

• Enhanced End-Point security
• Centralized security control over Applications. Quick and fast security policy implementation w/o user session interruption (For example - after virus or suspicious program detection)
• One-point of End-Point control/Dashboard (No separate Apps management, Encryption, FW rule )

• Only Windows based
• Dependence on MS updates and Service start-up priority
• No mobile device gradation/prevention using WPD (Windows Portable Device) policy
• Application control - only Whitelist/Blacklist (no templates and apps hashing)
• No custom rules available when tune HIDS, NAC (only predefined values)

If you need a Windows based multi-functional end-point security solution then this product is for you.