What is our primary use case?
Our main use case for Dell Trusted Device powered by CrowdStrike Falcon and Intel vPro is general protection for our end user devices. We have approximately 1,000 to 1,200 end user devices, and each one has CrowdStrike installed on it and uses Dell Trusted Device powered by CrowdStrike Falcon and Intel vPro for protection against BIOS attacks or any other attacks that may happen. The primary use case is defense; we need to stay protected.
What is most valuable?
The features of Dell Trusted Device powered by CrowdStrike Falcon and Intel vPro that I appreciate most are the real-time analytics in CrowdStrike and the ability to detect anomalies in the computer at the BIOS level, which is excellent to have. You would not normally see that with standard antivirus or regular security software; it would not integrate with the BIOS, but the fact that it does means that you get an enhanced layer of protection with CrowdStrike, more than you would see with another product.
My perception of chip-level recovery is that it is a beautiful thing. Normally you are dependent on the OS for recovery actions, but in this case, you do not need that because it happens at the chip level. It happens out of band, before the OS is booted; you can make recovery choices, and that is extremely important. You always need an out of band solution, and on end user devices especially, if that is possible, that changes the whole landscape. Normally out of band is only for server-level devices, but this changes that; this adds an extra layer of protection that you would not normally see.
I view the critical feature of Advanced Memory Scanning by CrowdStrike as incredible; the fact that it can actively scan memory without any performance hit on the PC or server devices is remarkable. Previously, in years before 2020, we would see a performance hit from this type of software, but the fact that CrowdStrike integrated with Dell does not cause any performance hit on the end user or the overall performance of the computer is an amazing thing. It is probably the best performing antivirus software I have actually seen.
What needs improvement?
Dell Trusted Device powered by CrowdStrike Falcon and Intel vPro can be improved. Right now it has so many functions because it can go below the OS layer and already has amazing functions. If devices outside of scope could be added, that might be an improvement, but I do not really know what can be improved at this point. That is probably up to the engineers to decide. To be honest, that is the future; I do not have visibility right now, but I am sure they will come up with something really good.
For how long have I used the solution?
We have been using Dell Trusted Device powered by CrowdStrike Falcon and Intel vPro for a long time for all of our devices. With CrowdStrike, we implemented it sometime before 2019 or before COVID at some point. We were not using CrowdStrike initially; we were using a different antivirus or SIM platform. We have probably been using the integration with Dell and CrowdStrike for about six years.
What do I think about the stability of the solution?
I would assess the stability and reliability of Dell Trusted Device powered by CrowdStrike Falcon and Intel vPro as completely stable. With CrowdStrike, we had a major outage where half the world experienced a major outage in 2024, but I will not speak about that. Other than that, everything has been completely stable; we have not seen any issues with DTD and CrowdStrike. The end user effect, end user visibility, or performance hit has been extremely minimal, so we have really seen nothing but positive results in terms of the effect it has had on us.
What do I think about the scalability of the solution?
Dell Trusted Device powered by CrowdStrike Falcon and Intel vPro scales very well with the growing needs of my company. Since I arrived here about four years ago, we have expanded to three additional large clinics. It has been very simple to roll everything out; we get the images on the Dell machines, and CrowdStrike is part of that image, and it is just a simple deployment. Very little hands-on work is needed, and very few complications happen during the install process, so it has been quite straightforward.
How are customer service and support?
I would rate customer service and technical support as great on a scale of one to ten. Dell support for me has always been great. I think they had a negative reputation tied to them several years ago, but in the past few years, they have really improved their game and they provide great support and they are always following up. As a matter of fact, I feel bad sometimes because I will leave tickets open with them and they will keep following up with me. They have always been great and they seem to know exactly where to route those tickets depending on the issue.
Which solution did I use previously and why did I switch?
Prior to adopting Dell Trusted Device powered by CrowdStrike Falcon and Intel vPro, we were using Trend Micro to address similar needs, and it was not the best software. I think we had been using it for maybe ten years or more, but there was not the same level of visibility or the same level of protection. CrowdStrike and Dell were definitely a step up from what we were used to.
How was the initial setup?
We have Advanced Memory Scanning turned on across our entire end user fleet and our virtualization environment, so every machine gets CrowdStrike and most machines are Dell.
What was our ROI?
There is a return on investment with Dell Trusted Device powered by CrowdStrike Falcon and Intel vPro. There have been detections that we would not have previously seen, and it has saved us a lot of time, especially with CrowdStrike's SOC team. The fact that there is reporting up to the cloud and there is a team that is monitoring and can tell us and give us advice on what to do saves us tons of hours that our team would normally spend on investigation.
As for an approximate metric of how many hours have been saved per year, to get the full picture of any attacks that would have been prevented, we have probably saved about eighty hours per year with the investigation that we have not had to perform.
What's my experience with pricing, setup cost, and licensing?
My experience with the pricing, setup cost, and licensing of the platform has been fairly simple. Licensing has been pretty straightforward, especially with CrowdStrike and Dell. It is set it and forget it, and you usually do not have to go back and look at your licenses again and worry about what you are going to lose or if certain things are going to change.
What other advice do I have?
Security agent performance is extremely important as criteria when I buy security software and PCs. I have been using PCs for a while all the way back to the nineteen nineties. What is important is when antivirus software got really popular, it worked, but it slowed everything down to a crawl. The fact that CrowdStrike and Dell have gotten to a point where it has no user effect, or virtually zero user effect, is absolutely game-changing. It is the way of the future and this is how it sets the standard for future products for anyone. This is how it has to be; you cannot have any effect from software running in the background, and this accomplishes that very effectively.
I think that Falcon Data Security's new feature for data protection in AI is extremely important going forward, especially because we are in healthcare. We deal with PII and PHI, and that information cannot get out. The fact that AI right now is essentially unregulated for the most part is very dangerous, and if CrowdStrike is releasing this new feature, which it sounds like they are and it sounds incredible, that is extremely important. If it can flag PHI or PII from escaping the sphere of our company, then that adds so much ability for the end user to do a lot of work without having to worry about the security aspect of things; our data is not getting out there.
A single-console view of below-the-OS security for increasing fleet security posture is extremely important. Normally in the past you would not see that level or that lower level of protection and visibility. The fact that that is there now and you can view it from a centralized console adds definitely a layer of confidence that you did not have previously while working in the field. OS-level detection and reporting is one thing, but the fact that you can go to a lower level than that and get to the BIOS level of things really adds visibility that you would not have before from a security perspective. You can see if there are attacks at a layer that was not previously accessible.
I factor in device health in my zero-trust security architecture from a certain perspective because device health matters. As a device gets older or goes out of date, things happen to it. You tend to see maybe your support staff start to open holes in things to get things working again. It is extremely important that you keep your devices healthy so that you do not accidentally open doors for attackers.
I would rate Dell Trusted Device powered by CrowdStrike Falcon and Intel vPro overall as a solid nine out of ten; I do not think I have experience with a better product, so it is hard to say. This has been a great product.
My advice to other companies considering Dell Trusted Device powered by CrowdStrike Falcon and Intel vPro is to go for it. You have all the features that you will need for a modern enterprise; you have the visibility, the protection, higher-level protection, low-level protection, and everything in between. Go for it; they are both huge name brands and they have really improved, and they are both great companies and they both have good products; they are just great products in general.