


NetWitness NDR and Symantec Endpoint Security Complete are two prominent cybersecurity solutions. Symantec Endpoint Security Complete seems to have the upper hand due to its versatility and user-friendly deployment experience.
Features: NetWitness NDR offers robust network traffic analysis, accurate threat detection, and good integration with security tools. Symantec Endpoint Security Complete provides endpoint protection, threat intelligence, and cross-platform support. Users prefer Symantec for its versatility and suitability for diverse environments.
Room for Improvement: NetWitness NDR needs enhancements in scalability, reporting functions, and could benefit from additional technical refinements. Symantec Endpoint Security Complete requires better performance optimization, reduction in false positives, and improvements in technical aspects.
Ease of Deployment and Customer Service: NetWitness NDR has a complex deployment process needing expert assistance but offers reliable customer support. Symantec Endpoint Security Complete is noted for its straightforward installation and responsive support team, making it more user-friendly.
Pricing and ROI: NetWitness NDR has a higher initial setup cost but is considered cost-effective due to its high ROI. Symantec Endpoint Security Complete is more affordable upfront and provides satisfactory long-term ROI.
They appreciate the rich telemetry data from the solution, as it provides in-depth threat identification.
Cortex XDR by Palo Alto Networks helps to reduce my total cost of ownership significantly.
In Cortex XDR by Palo Alto Networks, most of the remediation is automated and the accuracy is quite good.
The technical support from Palo Alto deserves a mark of ten because they reach out within an hour whenever assistance is needed.
There is no back and forth, and they know what we are asking for and come up with the best resolution for a solution.
If any of these services are missed, it becomes a problem in terms of support tickets, follow-up, or special configuration that needs to be done in the system.
I don't know the current situation with Broadcom, however, it was good when I was involved.
You can onboard 10,000 endpoints in just hours, which demonstrates the excellent scalability of this product.
Activating the newly purchased licenses is instantaneous, allowing installations without adjustments since it's cloud-based.
Cortex XDR by Palo Alto Networks can be expanded anytime by purchasing another license without any issues related to scalability.
Cortex remains fast and responsive, even with increasing data and alerts.
The thresholds we've seen on our firewall boxes at some instances reached 80% to 85%, but even at that level of utilization, we don't observe any latency or any issues reported with respect to accessing the application.
Cortex XDR is stable, offering high quality and reliable performance.
Mac OS upgrades would break them before new versions were available.
Improving reporting and dashboard customization, along with the addition of real-time and exportable reports, would help SOC teams greatly.
The inclusion of this feature would allow the application of DLP policies alongside antivirus policies via a single agent and console, making it more competitive as other OEMs often offer DLP solutions as part of their antivirus products.
If the per GB data could be provided at a certain level free of cost or at the same cost which the customer is taking for the entire bundle, that would be better.
The mobile device management was not unified with the other endpoint management, creating structural issues.
They could improve the user interface.
The pricing on SentinelOne is far more reasonable and cheaper than Cortex XDR by Palo Alto Networks.
I would say it is definitely not a cheap product, considering how mature it is and how scalable all Palo Alto products are together.
Cortex XDR is perceived as expensive by some customers, yet offers dynamic pricing.
It incorporates AI for normal behavior detection, distinguishing unusual operations.
The product provides automation responses in case of a threat attack, severity assessments, centralized manageability, and comprehensive compliance features, resulting in reduced costs.
It includes machine learning to easily analyze data and detect complex threats across endpoints, networks, or clouds.
I have both the antivirus and EDR features constantly, allowing my team's customers to conduct detailed analyses of where attacks have occurred or if any malicious files are present, which devices or files have been targeted.
Fortinet Endpoint Protection provides more features compared to other solutions.
| Product | Mindshare (%) |
|---|---|
| Cortex XDR by Palo Alto Networks | 3.6% |
| Symantec Endpoint Security Complete | 0.7% |
| NetWitness NDR | 0.9% |
| Other | 94.8% |


| Company Size | Count |
|---|---|
| Small Business | 45 |
| Midsize Enterprise | 21 |
| Large Enterprise | 48 |
| Company Size | Count |
|---|---|
| Small Business | 10 |
| Midsize Enterprise | 2 |
| Large Enterprise | 5 |
| Company Size | Count |
|---|---|
| Small Business | 7 |
| Midsize Enterprise | 5 |
| Large Enterprise | 6 |
Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.
Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.
What are the key features of Cortex XDR?Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.
NetWitness NDR provides robust network security features, offering full visibility and effective incident response. Its seamless integration and user-friendly interface support malware detection and real-time threat tracking.
NetWitness NDR stands out for its comprehensive traffic details and compatibility across operating systems. It features a unified dashboard and lightweight installation, making it user-friendly without IT support. The system supports orchestration features and user behavior analytics. While deployment is somewhat modular and complex, it serves well for network security, malware analysis, and digital forensics. NetWitness integrates smoothly with third-party apps using its intuitive API, though improvements could be made in areas like SOAR integration, hunting features, and scalability, alongside addressing pricing and licensing complexities.
What are NetWitness NDR's Key Features?Banks and telecom companies utilize NetWitness NDR for detecting indicators of compromise, analyzing intrusion history, and providing risk scores. It functions as both a SIEM tool and a network forensic instrument, proving essential for sectors focused on network security and threat prevention.
Symantec Endpoint Security Complete offers robust defense capabilities including firewalls, advanced threat protection, and real-time SONAR monitoring to safeguard digital environments. This solution addresses virus outbreaks and reduces attack surfaces with a suite of advanced features.
With focus on comprehensive endpoint protection, Symantec Endpoint Security Complete is designed to detect, prevent, and respond to advanced cyber threats while maintaining minimal performance impact. It integrates various security measures such as sandboxing, threat hunting, EDR, and more, ensuring complete protection. Its deployment across different platforms is customizable, allowing adaptation to evolving security needs, from network security and secure messaging to Active Directory protection. Facilitating easy policy compliance and low administrative effort, this solution enhances cybersecurity readiness effectively.
What are the most important features of Symantec Endpoint Security Complete?In sectors such as finance and healthcare, Symantec Endpoint Security Complete plays a crucial role in safeguarding sensitive data and maintaining compliance. Retailers employ it to secure payment ecosystems, while educational institutions utilize its capabilities to protect against cyber threats in an increasingly digital learning environment. Its flexibility allows it to cater to varied industry requirements, ensuring reliable protection and efficient management of cybersecurity operations.
We monitor all Endpoint Protection Platform (EPP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.