We've had a couple of events both this year and last year where it just didn't seem to catch ransomware, which is impossible to do if someone has hands-on with the system. There were some things that they had or used to have or don't have that I still haven't figured out called journaling. And it was supposed to be a way to roll back changes that were made. However, they're telling me they don't have that. That's not in the system.

It’s my understanding that it doesn’t actually scan any files at all. They just look at their database of files they've scanned previously, and either it matches or doesn't. That might be where the shortcoming is, is that it just can't stay up-to-date fast enough to stop new things that are coming in. It's an after-the-fact anti-virus. It doesn't do anything proactive. The virus has to hit the machine before it detects it.

There is one thing that is deplorable with the product that I would change as soon as I found a better one. However, the reports are worthless. You go and look at a scan report and cannot get a log of machines. I can log into a console and see the files were scanned every day at 2:00 AM, and they all passed green or something was detected and removed. However, you have to go to the console. I don't have anything that I can send to my client on reports. What they give you is a bunch of bar graphs with no details. You can't drill down. It'll say two infections. However, it doesn't tell you what machines. You've just really got several different reports, and they're all just a bunch of graphs and wasted paper. There's nothing really substantial. The reports that I can use for client-facing, once a month, to say, "Here, we scanned all these workstations. Here are our results," don’t exist. They've got fake reports.

I've screamed about that for years, and they just won't do anything. Therefore, I created my own little up-to-date or not ask fail-type report. I send that to them in place of a report directly from a product.

One of the biggest pain points is that it's not really ransomware-oriented. They will be able to catch some, but that's where Sentinel One is a better player compared to Webroot.

I did notice that my OS slowed down, but I don't know if that's due to Webroot.

We've had some issues with the solution. We were attacked by CryptoLock.

It's not the best in security. As we were breached, we'll be looking for a new solution next year.

We need to have a stronger defense against CryptoLock and other attackers.

Looking for the Next Gen Webroot to leverage Multi Core Architecture supported by a robust Operating System Executive that is fully aware of it's underlying Hardware Architecture and Foundation; with live integration and feed into most reliable OTXs in real time.

Additional video on really demonstrating the runtime features of the product would be helpful. For example, how do you do continual data monitoring? How do you verify their connections? A lot of people know about antivirus protection, however, the product does a whole lot more.

They can do a whole lot more. Since they're dealing with multi-core environments now, the best option would be for them to enhance the product so that the product can automatically do an assessment on the machine.

Usually, when it comes to reliability, McAfee and Norton are at 99 percent. Webroot's percentage is lower. It is 94% reliable in terms of what it catches, but you're trading that percentage for customer satisfaction because your computer isn't being constantly told that it just blocked something, or it just did something.

The solution could improve by providing better ransomware protection.

If Webroot could match up to something similar to what a CrowdStrike or SentinelOne is providing, I would consider Webroot again. For example, there are more advanced features such as EDR and sandboxing. In SentinelOne, when there is a threat it automatically does the analysis and provides you with detailed reports, but Webroot is lacking in the details.

I'm not happy with Webroot Business Endpoint Protection, for only one reason. It seems that it slows down my interface when I'm doing programming in Microsoft Access, tremendously. When I'm just using Access, it seems to work fine. But when I'm doing the Access programming, it slows down substantially. Sometimes I wait maybe five, or six seconds for different screens to come up. It probably costs me 15 to 20 minutes every day. It's aggravating. I am currently looking for a replacement. However, I will say I've never gotten malware with Webroot Business Endpoint Protection.

Areas for improvement would be the reporting system in the admin console. In the next release, I would like them to add features to run comments or take remote control to the admin control and also features to be installed on mobile devices.

Its detection capability for certain attacks should be improved. It should have better and wider detection for certain malware attacks. 

It could also have some sort of RMN.

There should be a Webroot Business Endpoint Protection mobile app.