Symantec Endpoint Security and NetWitness NDR are prominent products competing in the cybersecurity market. Symantec Endpoint Security has an upper hand in endpoint protection, whereas NetWitness NDR leads in network traffic analysis.
Features: Symantec Endpoint Security offers comprehensive threat detection, efficient prevention features, and robust defense against a wide range of threats. NetWitness NDR provides advanced network traffic analysis, in-depth detection of sophisticated attacks, and detailed monitoring of network activities.
Room for Improvement: Symantec Endpoint Security needs better integration with other security tools, an improved reporting system, and more streamlined updates. NetWitness NDR requires enhancements in scalability, simplification of complex features, and a more intuitive user interface.
Ease of Deployment and Customer Service: Symantec Endpoint Security is recognized for its straightforward deployment process, although initial setup assistance may be required. Its customer service is responsive and supportive. NetWitness NDR's deployment is more challenging due to its complexity but offers robust support once implemented.
Pricing and ROI: Symantec Endpoint Security's pricing is competitive with a favorable ROI, especially for large-scale deployments, though it may be perceived as high for smaller organizations. NetWitness NDR is a premium product with higher initial setup costs, justified by its advanced features, appealing mainly to enterprises focusing on network traffic analysis.
Symantec Endpoint Security filled gaps in our toolset, particularly with the ability to control network firewall on hosts remotely, which was greatly appreciated.
In some cases, it rates as high as ten out of ten, while in others, it can be as low as eight.
There is no support in the German language, which is a problem for many public tenders.
Symantec Endpoint Security is quite scalable, and it is very important for large clients.
The scalability of the servers is good, as it requires computational powers.
I have encountered issues where I had to uninstall and reinstall the product on end users' computers to view the logs again.
Previously, we used to have multiple servers such as GUP servers and numerous servers for pushing updates, but we reduced it and transitioned almost 30,000 devices to CrowdStrike, which was easy to manage.
It is cumbersome to use, particularly in handling firewall management.
We wanted to add multiple hashes because of numerous new alerts coming, but we could only add them one by one, which is a considerable disadvantage in Symantec.
Device management is not very good and I am not enabling it in my organization due to security reasons.
It seems to be half the cost or more affordable than other solutions.
The pricing is very low compared to other companies like SentinelOne and others.
I rate the pricing, setup cost, and licensing around nine out of ten.
Symantec Endpoint Security also provides device control features, which block unauthorized USB devices and allow whitelisting, preventing data exfiltration and phishing scenarios without disrupting workflow.
One important feature is the EDR function, necessary for many public customers due to upcoming laws in Germany, which is available through Symantec Endpoint Security Complete.
A valuable feature of Symantec Endpoint Security is the ability to remotely isolate a computer from the network if it's compromised, either physically or digitally.
| Product | Market Share (%) |
|---|---|
| Symantec Endpoint Security | 3.4% |
| NetWitness NDR | 0.5% |
| Other | 96.1% |
| Company Size | Count |
|---|---|
| Small Business | 10 |
| Midsize Enterprise | 2 |
| Large Enterprise | 5 |
| Company Size | Count |
|---|---|
| Small Business | 69 |
| Midsize Enterprise | 32 |
| Large Enterprise | 63 |
Using a centralized combination of network and endpoint analysis, behavioral analysis, data science techniques and threat intelligence, NetWitness NDR helps analysts detect and resolve known and unknown attacks while automating and orchestrating the incident response lifecycle. With these capabilities on one platform, security teams can collapse disparate tools and data into a powerful, blazingly fast user interface.
Symantec Endpoint Security is a robust and reliable product that provides complete protection against viruses, malware, Trojans, and malicious files. It offers application and device control, ease of use in deploying and updating, a central control console, stability, scalability, auto-discovery capabilities, patch management, endpoint detection and response capabilities, intrusion detection module.
The Symantec Global Intelligence Network (GIN) provides threat intelligence and detection across endpoints, email, and web traffic. It has helped organizations reduce downtime, increase productivity, and improve security posture. Symantec Endpoint Security is easy to use, has a flexible administration, and offers more value than expected.
We monitor all Endpoint Protection Platform (EPP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
