Try our new research platform with insights from 80,000+ expert users

NetWitness NDR vs Symantec Endpoint Security comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 9, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
8.0
Implementing NetWitness NDR enhances security, improves network visibility, reduces costs, and boosts efficiency and productivity for businesses.
Sentiment score
6.2
Symantec Endpoint Security delivers positive ROI by enhancing virus protection, reducing downtime, and improving operational efficiency with minimal disruption.
Symantec Endpoint Security filled gaps in our toolset, particularly with the ability to control network firewall on hosts remotely, which was greatly appreciated.
 

Customer Service

Sentiment score
7.3
NetWitness NDR's customer service is generally efficient and highly regarded, though some users report occasional slow response times.
Sentiment score
6.5
Symantec Endpoint Security's support is praised but varies post-Broadcom, with delays and regional differences affecting effectiveness.
In some cases, it rates as high as ten out of ten, while in others, it can be as low as eight.
There is no support in the German language, which is a problem for many public tenders.
 

Scalability Issues

Sentiment score
7.0
NetWitness NDR is scalable for large enterprises, though some users report issues with scalability and agent migration.
Sentiment score
7.7
Symantec Endpoint Security is scalable, user-friendly, and ideal for large organizations, effortlessly integrating with existing systems.
Symantec Endpoint Security is quite scalable, and it is very important for large clients.
The scalability of the servers is good, as it requires computational powers.
 

Stability Issues

Sentiment score
7.7
NetWitness NDR is generally reliable, providing real-time data and stability, though minor technical issues are occasionally reported.
Sentiment score
7.7
Symantec Endpoint Security is generally reliable, though updates and operating system variations can occasionally disrupt stability and resource usage.
Previously, we used to have multiple servers such as GUP servers and numerous servers for pushing updates, but we reduced it and transitioned almost 30,000 devices to CrowdStrike, which was easy to manage.
I have encountered issues where I had to uninstall and reinstall the product on end users' computers to view the logs again.
 

Room For Improvement

NetWitness NDR requires improvements in UI, scalability, detectability, integration, session times, pricing, training, and features, making it complex and slow.
Symantec Endpoint Security faces performance issues, complex management, insufficient threat detection, and compatibility problems affecting usability and support.
I would like to see improvements in the scanning part of the solution, specifically to enhance the CPU and hard disk usage during scanning and updates to prevent disruption during work hours.
We wanted to add multiple hashes because of numerous new alerts coming, but we could only add them one by one, which is a considerable disadvantage in Symantec.
It is cumbersome to use, particularly in handling firewall management.
 

Setup Cost

Symantec Endpoint Security is valued for its cost-effective pricing, flexible plans, and discounts for long-term or special contracts.
It seems to be half the cost or more affordable than other solutions.
Symantec Endpoint Protection and Symantec Endpoint Security Enterprise are quite affordable, with Symantec Endpoint Security Complete costing about four times the Endpoint Protection price, still comparable to other EDR products.
The pricing is very low compared to other companies like SentinelOne and others.
 

Valuable Features

NetWitness NDR offers high detection rates, real-time malware response, third-party integration, and a user-friendly, interoperable interface with advanced analytics.
Symantec Endpoint Security provides comprehensive protection with device control, intrusion prevention, anti-virus, centralized management, and cross-platform integration.
A valuable feature of Symantec Endpoint Security is the ability to remotely isolate a computer from the network if it's compromised, either physically or digitally.
What I appreciate most about Symantec Endpoint Security is that it's easy to manage compared to other tools I have worked with, such as minimal endpoint security, McAfee, and CrowdStrike.
One important feature is the EDR function, necessary for many public customers due to upcoming laws in Germany, which is available through Symantec Endpoint Security Complete.
 

Categories and Ranking

NetWitness NDR
Ranking in Endpoint Protection Platform (EPP)
59th
Average Rating
8.0
Reviews Sentiment
6.9
Number of Reviews
15
Ranking in other categories
Threat Intelligence Platforms (40th), Endpoint Detection and Response (EDR) (61st), Security Orchestration Automation and Response (SOAR) (25th), Network Detection and Response (NDR) (19th), Extended Detection and Response (XDR) (39th)
Symantec Endpoint Security
Ranking in Endpoint Protection Platform (EPP)
13th
Average Rating
7.6
Reviews Sentiment
7.1
Number of Reviews
145
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of August 2025, in the Endpoint Protection Platform (EPP) category, the mindshare of NetWitness NDR is 0.3%, up from 0.2% compared to the previous year. The mindshare of Symantec Endpoint Security is 3.8%, down from 4.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Protection Platform (EPP)
 

Featured Reviews

SupravatMaji - PeerSpot reviewer
Beneficial single unified dashboard, good native application integration, and high availability
My advice to those wanting to implement RSA NetWitness Network is they have to first do a little due diligence, such as the exact requirement based on their needs. That will give them a direction for their investment because otherwise, the bill of material or bill of quantity (BOQ) may be higher side. It is important to do good due intelligence on the environment, see the exact requirement, and then go ahead with the solution. The solution is perfectly stable. I rate RSA NetWitness Network a nine out of ten.
Kumbesh Rajagopal - PeerSpot reviewer
Management becomes easier with minimal complications, but improvement in support tools needed
Regarding areas of improvement for Symantec Endpoint Security, there are many changes, and the support portal tool is complicated compared to other tools. When trying to get service from Symantec, the process is complex. I'm not sure whether it's because of my project or something else. Though it is easy to manage, easy to get, easy to install, and works efficiently for managing policies, we faced a significant disadvantage. We wanted to add multiple hashes because of numerous new alerts coming, but we could only add them one by one, which is a considerable disadvantage in Symantec.
report
Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.
865,295 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
13%
Computer Software Company
12%
Manufacturing Company
10%
Government
7%
Computer Software Company
14%
Financial Services Firm
11%
Manufacturing Company
10%
Comms Service Provider
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Ask a question
Earn 20 points
Which is better - Cortex XDR or Symantec End-User Endpoint Security?
Aqua Security is easy to use and very manageable. Its main focus is on Kubernetes and Docker. Security is a very valuable feature and their speed of integration is very good. The initial setup was ...
Which offers better endpoint security - Symantec or Microsoft Defender?
We use Symantec because we do not use MS Enterprise products, but in my opinion, Microsoft Defender is a superior solution. Microsoft Defender for Endpoint is a cloud-delivered endpoint security s...
What do you like most about Symantec End-User Endpoint Security?
Symantec have everything – documentation, videos, data sheets.
 

Also Known As

RSA ECAT, NetWitness Network
Symantec EPP, Symantec Endpoint Protection (SEP)
 

Overview

 

Sample Customers

ADP, Ameritas, Partners Healthcare
Audio Visual Dynamics, Red Deer Advocate, Asia Pacific Telecom Co. Ltd., Kibbutz Ein Gedi, and AMETEK, Inc.
Find out what your peers are saying about NetWitness NDR vs. Symantec Endpoint Security and other solutions. Updated: July 2025.
865,295 professionals have used our research since 2012.