We use ThreatSync+ NDR for both network monitoring and detection and response.
Has improved threat detection and reduced manual workload through real-time cloud insights
What is our primary use case?
What is most valuable?
ThreatSync+ NDR's most valuable features include its easy setup process, and WatchGuard was available at all times to assist with setup if we encountered any issues.
ThreatSync+ NDR's real-time cloud threat detection in our Azure workloads has been very effective. While we haven't encountered any major threats, it has detected and immediately stopped smaller security concerns.
Implementing ThreatSync+ NDR has influenced our business significantly as it provides enhanced security and saves several hours daily by eliminating manual log reviews.
What needs improvement?
After using ThreatSync+ NDR for about a year, areas for improvement include the ability to pull logs from other vendors using an API.
You can use Netflow which gets around this in some cases.
For how long have I used the solution?
I've been using ThreatSync+ NDR as part of a combined trial and purchase for approximately a year.
What do I think about the stability of the solution?
The stability deserves a perfect rating of 10, as we have experienced no issues thus far.
What do I think about the scalability of the solution?
The scalability merits a rating of 10.
How are customer service and support?
Our experience with our partner has been positive. We primarily used the partner to purchase the product, as most support comes directly from WatchGuard.
The vendor support deserves a rating of nine.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
Prior to ThreatSync+ NDR, we relied entirely on manual work for our security operations.
How was the initial setup?
ThreatSync+ NDR implementation was straightforward, becoming operational within hours. The initial information collection and additional setup required only a few more hours.
The easy setup process and vendor support are the most appreciated aspects.
The solution is simple to maintain due to its cloud-based nature, with most maintenance handled by the vendor.
What was our ROI?
The return on investment is approximately 40% because we monitor more than just the UK office, given our global presence.
Which other solutions did I evaluate?
WatchGuard suits our needs better because we have WatchGuard firewalls. The initial integration was seamless compared to other vendors we considered, such as CrowdStrike, which cannot properly support our firewall logs.
What other advice do I have?
ThreatSync+ NDR has helped identify potential security gaps in my network, and we are currently working on resolving them.
The impact on incident response time varies. During daytime operations, it reacts instantly with a notification delay of 10 to 20 minutes, while nighttime notifications can have up to eight hours delay.
ThreatSync+ NDR has enhanced our ability to proactively manage network risks by enabling us to implement extra measures at a lower level based on its findings.
The compliance reporting tools are comprehensive and meet our requirements. Though we haven't conducted official compliance reporting yet, we anticipate it will save approximately one day of work in report compilation.
Regarding pricing, WatchGuard rates a nine out of ten.
We maintain 1,001 licenses for ThreatSync+ NDR, serving approximately 1,000 users, with about 300 local users in the UK.
ThreatSync+ NDR's effectiveness in identifying weaknesses before exploitation is excellent and very quick.
I recommend ThreatSync+ NDR to other users based on its rapid deployment and immediate value delivery.
I rate ThreatSync+ NDR 9 out of 10.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Other
