The primary use case for Symantec Endpoint Security Enterprise for my clients is basic antivirus protection.
Symantec Endpoint Security Enterprise delivers robust security features like firewall management, anti-malware, intrusion prevention, and real-time AI-based analysis. Its flexibility and resource efficiency, alongside cloud integration, make it a reliable choice for endpoint security.
| Product | Mindshare (%) |
|---|---|
| Symantec Endpoint Security Enterprise | 0.6% |
| Microsoft Defender for Endpoint | 6.8% |
| CrowdStrike Falcon | 6.0% |
| Other | 86.6% |
| Type | Title | Date | |
|---|---|---|---|
| Category | Endpoint Protection Platform (EPP) | Jun 23, 2026 | Download |
| Product | Reviews, tips, and advice from real users | Jun 23, 2026 | Download |
| Comparison | Symantec Endpoint Security Enterprise vs CrowdStrike Falcon | Jun 23, 2026 | Download |
| Comparison | Symantec Endpoint Security Enterprise vs Microsoft Defender for Endpoint | Jun 23, 2026 | Download |
| Comparison | Symantec Endpoint Security Enterprise vs SentinelOne Singularity Endpoint | Jun 23, 2026 | Download |
| Title | Rating | Mindshare | Recommending | |
|---|---|---|---|---|
| CrowdStrike Falcon | 4.3 | 6.0% | 97% | 140 interviewsAdd to research |
| Tanium | 3.9 | 2.4% | 80% | 22 interviewsAdd to research |
| Company Size | Count |
|---|---|
| Small Business | 14 |
| Midsize Enterprise | 7 |
| Large Enterprise | 9 |
| Company Size | Count |
|---|---|
| Small Business | 70 |
| Midsize Enterprise | 21 |
| Large Enterprise | 46 |
Offering comprehensive features for proactive protection, Symantec Endpoint Security Enterprise provides automatic remediation, policy configuration, and system monitoring through an efficient management interface. It ensures antivirus and endpoint protection against malware, viruses, and network threats in cloud or on-premises environments. Users benefit from its functionality in access control, EDR, threat detection, and network monitoring. However, there is room for improvement in user-friendliness, threat intelligence, and AI-based detection capabilities to address sophisticated threats. Enhanced browser protection, support, and pricing, along with better integration of cloud security and robust firewall controls, are sought after refinements.
What are Symantec Endpoint Security Enterprise’s key features?Various industries utilize Symantec Endpoint Security Enterprise to secure endpoints with extensive device and network threat prevention. The solution is often deployed to safeguard financial data, healthcare records, and sensitive information in critical infrastructures, ensuring compliance with strict regulatory standards.
| Author info | Rating | Review Summary |
|---|---|---|
| IT Consultant at a tech services company with 11-50 employees | 3.5 | I've found Symantec Endpoint Security Enterprise reliable, lightweight, and easy to manage, though its lack of modern features like MDR and complex support process make ThreatDown a more appealing choice for many of my clients. |
| Information Technology Infrastructure Consultant Associate at a financial services firm with 10,001+ employees | 4.5 | I've used Symantec Endpoint Security Enterprise for 10 months and find it intuitive and stable, with strong endpoint protection and scalability, though threat intelligence and dashboard usability could be improved, especially for beginners. |
| Information security engineer at PricewaterhouseCoopers | 4.0 | Symantec Endpoint Security Enterprise offers flexibility in policy crafting and strong IPS features, making it valuable for comprehensive endpoint protection. While local support could improve, its ease of use and effectiveness make it worth the investment against cyber threats. |
| IT manager at Lab Golf | 4.5 | I use Symantec Endpoint Security Enterprise for our small business's email and network virus scanning needs. The valuable endpoint protection features keep our network secure, although it's a bit resource-intensive. We're considering Symantec Endpoint Security Complete for better fit. |
| Information Technology System Administrator II at a government with 51-200 employees | 3.5 | We primarily use Symantec Endpoint Security for its strong endpoint protection capabilities, including system scans and remediation. It excels in security but faced issues with relicensing and compatibility with some legacy software, while Intune offers better device management. |
| Global Lead IT Security Analyst at Hoerbiger Company | 3.5 | We use Symantec Endpoint Security Enterprise for all endpoint systems due to its effective antivirus scanning with IPS, but it needs enhancements in speed, threat coverage, usability, and integration with AI for better scalability and IoT security. |
| Senior System and cyber security administration at Tankeenhr | 4.0 | Symantec Endpoint Security Enterprise is useful for managing and securing servers and devices against malware and viruses. However, it is not user-friendly, with internal issues and slow scans, and mistakenly identifies my company's in-house applications as threats. |
| Security Consultant at Mahle | 4.5 | Symantec Endpoint Security effectively addresses malware and zero-day attacks with its advanced firewall and real-time visibility, providing a good return on investment and improving over previous solutions. However, its graphical user interface needs improvement. |
| Information Technology Manager at a consultancy with 1-10 employees | 3.5 | I rely on Symantec Endpoint Security for excellent firewall, IPS, and AV, offering a single pane of glass for stability and four years without breaches. However, browser protection issues and customer support are problematic, needing improvement, especially for smaller companies like ours. |
| Scrum Master at Inalpie Enterprise | 5.0 | I use Symantec Endpoint Security Enterprise for securing emails and websites. Its AI tools effectively automate tasks and provide threat detection insights. However, it is expensive and could benefit from better marketing to increase consumer adoption. |
The primary use case for Symantec Endpoint Security Enterprise for my clients is basic antivirus protection.
Symantec Endpoint Security Enterprise is highly compatible and rarely causes disruptions in production. It operates transparently and is easy to maintain.
The automated response feature helps to mitigate breaches effectively.
When comparing with ThreatDown agent, I have noticed that ThreatDown detects behaviors more readily and flags suspicious user activities more clearly. While Symantec Endpoint Security Enterprise remains effective, ThreatDown's user interface is more manageable and provides a clearer system overview.
The management interface is crucial for maintaining Symantec Endpoint Security Enterprise effectively.
A significant advantage of Symantec Endpoint Security Enterprise is its lightweight resource usage. It consumes less memory, CPU, and IO compared to alternatives such as ThreatDown and Bitdefender.
I have not experienced integrated threat intelligence benefits with Symantec Endpoint Security Enterprise. Many customers are seeking modern protection features such as MDR (managed detection and response). As a result, they are exploring ThreatDown as an alternative or using it in combination with Symantec Endpoint Security Enterprise.
The managed detection and response capabilities need to be more clearly defined. Customers are uncertain about the modern protection features compared to competitors such as ThreatDown, CrowdStrike, and SentinelOne. This represents a significant disadvantage for Symantec Endpoint Security Enterprise.
I have been a consultant with Symantec for 25 years.
The solution is exceptionally stable. Once properly configured, it maintains reliable client connections. Unlike ThreatDown, where client connections can be lost requiring manual intervention, Symantec Endpoint Security Enterprise maintains consistent connectivity.
In my experience supporting approximately 10 different companies with up to 100 workstations each, scalability has never been a concern with Symantec Endpoint Security Enterprise.
Support access has become cumbersome, particularly after the Broadcom acquisition. The process requires navigating multiple steps to reach appropriate support. The support site for accessing new software is complicated, despite necessary multi-factor authentication. Compared to ThreatDown's streamlined login process, Broadcom's extensive size makes navigation challenging.
Neutral
The installation of Symantec Endpoint Security Enterprise is straightforward. Client upgrades from the central management console are efficient and user-friendly.
I have limited experience with Bitdefender, another traditional antivirus program. However, I still prefer Symantec Endpoint Security Enterprise.
Several of my customers continue to use Symantec Endpoint Security Enterprise. As a system consultant, I recommend and maintain the solution where appropriate.
The pricing is competitive with other solutions. While the solution is stable, it appears somewhat dated. Unlike other MDR clients that can occasionally make problematic decisions affecting production, Symantec Endpoint Security Enterprise maintains consistent reliability.
My clients currently use on-premise deployments. While cloud integration with Symantec Endpoint Security Enterprise was initially complex, many maintain in-house management capabilities. The trend suggests a gradual shift toward ThreatDown solutions and away from Symantec Endpoint Security Enterprise in the coming years.
On a scale of 1-10, I rate Symantec Endpoint Security Enterprise a 7.
The use case for Symantec Endpoint Security Enterprise is endpoint protection and is intuitive for security.
What I appreciate the most about Symantec Endpoint Security Enterprise is the integration with the workstations and the around-the-clock monitoring. The information flows from the workstations to the cloud, and there are many capabilities with endpoint protection monitoring.
The impact of data breach prevention using Symantec Endpoint Security Enterprise is intuitive; it shows all the machines and workflows on the working machines. There have been no data breaches since all the information received has been clearly resolved. The only serious incident, which wasn't even a data breach, was the zero-day attack that was tested internally, but the system remains secure.
I have a note about the integrated threat intelligence in Symantec Endpoint Security Enterprise, though I am unsure how much it is incorporated into my daily work. We receive occasional letters about threat intelligence, and I check with my working environment about incoming threats, but they are not significantly incorporated into the endpoint protection process.
Regarding the centralized management console, it is intuitive, but the threat intelligence aspect could be more incorporated and developed, especially with AI integration and news directly in the platform. It shouldn't be overwhelming with news but could integrate important threat detection information that becomes visible minutes after Broadcom publishes it.
Since implementation, there haven't been significant improvements. The threat intelligence was incorporated from the beginning, but we subscribed to the platform shortly after starting. The dashboard and system haven't changed substantially, which could be a feature that needs improvement to provide a clear vision of changes and new features in the cloud security platform.
The platform could be improved for beginners as it wasn't intuitive to manage initially. Additional guidance through video environments would be helpful for navigation. The learning curve in the first three months was challenging with limited resources. The six or seven dashboards could be consolidated, as switching between them isn't intuitive when the workflow demands it.
I have about 10 months of experience using Symantec Endpoint Security Enterprise.
I rate the stability of Symantec Endpoint Security Enterprise as excellent, giving it a nine for all the new possibilities and features that can be implemented, and a ten for everything already in the knowledge base.
Regarding scalability, since Symantec Endpoint Security Enterprise is a cloud solution, it is very scalable. I hope to gain experience working with thousands of workstations simultaneously. The scalability deserves a rating of ten.
I rate the technical support from Symantec as eight out of ten because they have comprehensive and clear documentation that can be easily found on search engines if someone knows how to search. Though I haven't used their service, they could develop it to be more user-friendly and offer on-call experienced employees who can quickly answer questions as part of a support plan.
Positive
We recently experienced behavior-based detection, and it performed exceptionally because we tested some zero-day vectors and it responded responsibly, proving to be accurate.
Symantec Endpoint Security Enterprise is deployed in my organization on two sides: cloud and on-premises.
The deployment was completed before I joined the environment, but the integration is intuitive. When we have new working machines, incorporating them into the cloud is straightforward.
The organization I work for has several hundred users working with Symantec Endpoint Security Enterprise in the financial industry.
I would recommend Symantec Endpoint Security Enterprise to other users as it is an intuitive solution, and Broadcom is a leader in the sector. I rate this solution 9 out of 10.
I've handled a number of cases in my previous company throughout my one-and-a-half years of experience. Mostly, I deal with endpoint policies. For example, clients want to block URLs like Facebook within their organization to prevent employees from using it during working hours.
I implement policies to block Facebook on laptops, mobile devices, and computer systems.
Additionally, I've deployed hardware policies to prevent USB usage across an entire organization, stopping anyone from accessing or transmitting data through USB drives.
I work in information security. I'm also involved in vulnerability assessment and penetration testing (VAPT). My duties involve securing the environment as the lead in my department. I handle all aspects of information security, including research and development, and troubleshooting. I'm what you'd call an 'offensive security' person – I conduct penetration testing for clients. So, I work across multiple domains – endpoint security, offensive security, and defensive security. A little bit of everything!
It's fundamentally an upgraded version of antivirus software, which is a basic necessity for any organization operating in a real-world environment. It helps us overcome real-time threats like APTs (Advanced Persistent Threats). This product comes into play. These products, like Symantec or Kaspersky, are designed to counter real threats.
It's a crucial element these days because cybercrime is constantly increasing. All organizations should deploy at least endpoint security, and ideally solutions like EDR, XDR, intrusion prevention systems, firewalls, and SOC teams as well. But the absolute minimum is robust endpoint security within the network environment.
I've handled multiple problems, including policy configuration, R&D issues, troubleshooting system connectivity to the Endpoint Protection Manager, and so on.
Overall, the product is amazing. The best part is the flexibility of the policies. You can craft very specific policies to secure your environment.
The IPS (Intrusion Prevention System) features are also strong, although I haven't explored them fully. Policies are the standout feature – you can exclude, block, quarantine, delete files... there are numerous options to customize your security with Symantec Endpoint Security.
The integrated firewall feature is impactful. It provides the basics of firewall security, but it won't cover all the advanced scenarios that a dedicated firewall would.
It provides a basic bunch of security, but if you need comprehensive firewall protection, you'd likely want a specialized firewall solution. On a scale of one to ten, I'd rate the endpoint firewall features as a seven out of ten – good for basic security.
It is very easy to use. The user interface is friendly. If you spend some time with the SEPM (Symantec Endpoint Protection Manager), you can learn it quickly. I was able to learn it within a month or a month and a half; It's all about research and development – the more you work with it, the easier it gets.
Symantec's main priority should be enhancing their support, especially local support for different regions.
I have been using it for one and a half years. I work on Symantec Endpoint Security Enterprise and Pure Security.
Additionally, I have some experience with Symantec EDR, but my primary focus is on Symantec Endpoint Security Enterprise and Pure Security. It's a good product from Broadcom, providing excellent endpoint protection services.
It's a stable product. Occasionally, there might be issues related to network downtime, but those aren't specific to Symantec Endpoint Security.
When those issues arise, they're on the network side, not with Broadcom or Symantec.
I'd rate the scalability around seven or seven and a half out of ten. Broadcom provides a good environment for scalability, making management easier, especially if you have the ideal network setup. That's the main reason for my rating.
We have more than 20 clients using Symantec. This includes both SMB (Small and Medium Businesses) and MNC clients.
The customer service and support are decent, but could be better.
Positive
Symantec Endpoint Security was the first product I worked with. Since then, I've also gained experience and certifications in Kaspersky Endpoint Security. I have multiple certifications from Broadcom and Symantec, including Endpoint, EDR, SMG (Symantec Messaging Gateway)... It's been a great learning experience.
My experience throughout the Endpoint Security is very good, especially with the deployment.
It's very easy to deploy. Generally, with on-premises solutions, you have to manage the deployment. With the cloud-based Symantec Security, there's nothing to deploy. It's a cloud product that works within the web browser. You just need to download a small Endpoint Security package.
Once deployed, it works easily, and I find it simple to troubleshoot. I learned how to manage it within a month or a month and a half. It's easy to work with, and I'm satisfied with it.
The cloud deployment is simple. You don't need to install anything. It's a portal where users sign in with credentials provided by Broadcom.
For on-premises deployment, it's different.
On-premises, you have to deploy everything from the start – the server, its configuration, the SEPM (Symantec Endpoint Protection Manager), download packages, and push those packages to all endpoint agents to establish connectivity. It's a bit more complex than the cloud option.
It requires setting up the server, installation, and the other configuration elements.
The deployment time varies depending on the network environment. Sometimes, you can finish within a few hours, or it might take a day and a half or even two days – it really depends. With a strong network, the deployment is faster. A weaker network can cause delays.
It's worth the money. With the rise in cybercrime, like APTs (Advanced Persistent Threats), organizations need to find those loopholes and bridge the gaps. Endpoint security is a fundamental layer of protection. It's a worthwhile investment to safeguard your organization's assets, employees, and especially data. As you know, data is incredibly valuable now and in the future. Endpoint security is a crucial baseline of defense, and it's definitely worth it.
I often suggest Symantec Endpoint Security. I've also used Trend Micro, and while it's a good product, I find Symantec's customer support lacking, especially in Pakistan.
Broadcom, the company behind Symantec, doesn't have a direct presence in Pakistan. This means you'll need to generate tickets and wait for responses, which can be a lengthy process. So, the support aspect can take a long time.
Overall, I would rate the solution an eight out of ten.
The solution is used for email and network virus scanning. We use it for a small business. It's a women's clothing store. We have a little network. I can manage it from home, and the tool does a really good job.
The solution has grabbed a few phishing attacks. When people click on the wrong things, I get a little alert. It locks them out of it. People cannot access things after clicking on the wrong links.
The endpoint protection features are valuable. The product ensures nothing malicious is floating around. I can just click on the console, and it tells me what's going on. If something is not working properly, the tool notifies me about it. It does what it’s supposed to do.
The product is a basic endpoint solution. It does not provide XDR. The product is a bit resource-intensive.
The scaling is pretty straightforward. I rate the scalability an eight or nine out of ten. Once we have the console, we can manipulate it the way we wish.
The solution works well. The support has always been good. The support is always available.
Positive
The initial setup was easy. I send out a link to the customers. They can connect to the console easily. I rate the ease of setup eight or nine out of ten. I deployed the solution. The maintenance is almost none.
We are looking into Symantec Endpoint Security Complete. It is going to be a better fit for us. Some of my clients use Malwarebytes. It is more basic than Symantec. Malwarebytes has one console and plugs. Antivirus solutions can just copy what their competitors are doing. All products have similar features. It was the same 30 to 40 years ago with McAfee and Norton. We looked at CrowdStrike, but it was expensive.
We have a bare-bones setup. It is kind of a legacy holdover from something we had 15 years ago. I haven't had to deal with anything too exotic with it. The product works well as it is. It is nothing fancy. The solution will be good if we manage it well. Overall, I rate the product a nine out of ten.
We use the solution for security purposes. We use it for system scans, remediation policies, and deploying SEP policies like USB lockdowns via Symantec rather than using global policies.
It's better to have the solution than not have it. We are going through CMMC 2.0 compliance. Technically, we can use the licensed version of Microsoft Defender for Endpoint for CMMC 2.0. It technically counts as an endpoint protection, but it is not as secure. We've been going through a lot more reconfiguration.
The ability to do system scans and automatic remediation is valuable. Remote policies are nice. However, we're now utilizing Intune, so it is redundant to utilize the policies on both products. We use Symantec mostly for endpoint protection. The tool is very good at preventing many things. If users want to click links and download things, we can prevent downloads via Intune, but some things don't need an admin prompt to download. Those can cause issues. Symantec is a little bit better at remediating or preventing things in general.
When we wanted to relicense the solution, rather than licensing the correct portal for us, the support team blew up our old portal and licensed a new thing. When we asked the support team to relicense the original piece, the team ghosted us. Another time, when we were working with an outdated legacy software like GoTo Meeting that Symantec was not fond of, we had to uninstall Symantec for some users and other software to fix the vendor's issues with Outlook.
I have used the solution within the last 12 months.
When we start moving software sets, things start getting locked down. Expired licenses and things we're no longer using can start creating issues. GoTo Meeting started breaking people’s outlook programs, which is why we originally looked at moving away.
We don't scale past a certain point. We're a small business. We have a use case including 100 to 120 users.
I've dealt with a part of the support team. Other than not getting a response on some things, when we did get responses, it was pretty easy to deal with.
Neutral
The ease of setup depends on what we want to do with the tool. There are default policies that come with them. In our use case, we had to set it up with Intune for remote deployments. It also depends on how we want to configure it. If we just want an added base level for all the default policies, there's not much setup. The more we try to do, the harder it gets. I rate the ease of setup a seven out of ten. It is not terrible.
Symantec and Intune do similar things to different devices. Intune has a lot more leverage on the devices that are being Intune joined and managed and devices that use PowerShell scripts. Symantec is for creating tasks and handling them as a group policy set up for security purposes. It depends on which angle we want to look at. Device management is very similar. Symantec also has more security pieces than Intune.
Other than dealing with some of the quirks of the individuals I've dealt with, it's a fine product. My recommendation will depend on the use cases. Some of the newer product suites would have more things that most consumers would be interested in. However, Symantec is a more solid option for some of the DoD and CMMC compliance cases. Overall, I rate the solution a seven out of ten.

We use the solution for all endpoint systems.
We use it for EDR.
The primary feature of the solution is antivirus scanning with IPS. It blocks viruses and uses a signature database, ensuring robust protection when configured correctly to meet our requirements.
The solution could improve its speed, threat coverage, and the tool's functionality. There are concerns regarding the tool's usability, particularly its dashboard and managing user data such as cache memory. For instance, it encounters difficulties when users switch between different Wi-Fi networks, leading to disruptions in connectivity. These issues need to be addressed to ensure better scalability and user experience. There are performance issues during full or manual scans, which negatively impact system performance.
It should be integrated with AI and machine learning because many threats are becoming increasingly sophisticated, necessitating advanced detection capabilities. Additionally, it should include features for IoT security to safeguard IoT devices. This would enable us to implement security measures tailored to IoT hosts. A setup with agent-based scanning specifically designed for IoT devices would be advantageous for optimal protection.
I have been using Symantec Endpoint Security Enterprise for eight years. We are using V14 of the solution.
The product is stable. Sometimes, the system performance goes down during a full scan.
I rate the solution’s stability a seven out of ten.
The main issue lies in its compatibility with extensions and add-ons. This lack of scalability affects its ability to handle user data, such as cache memory. When a user switches between different Wi-Fi networks, like personal to office Wi-Fi, while travelling, Symantec Endpoint Security Enterprise blocks the MAC address of that access endpoint, causing inconvenience. Improvements are needed to ensure users' smoother cache and directory data utilisation.
5,000 users are using this solution.
I rate the solution’s scalability a seven out of ten.
The initial setup is straightforward and takes around seven days to complete. It involves configuring the policies at the Central Console and deploying the package for each endpoint. Some users have reported encountering problems with add-ons during setup and scanning processes.
Two or three people are required for the solution's deployment and maintenance.
I rate the initial setup a ten out of ten.
The product is expensive.
I rate the product’s pricing an eight out of ten, where one is cheap, and ten is expensive.
Overall, I rate the solution a seven out of ten.

My company uses the backup solution from Symantec, along with ManageEngine, to manage the endpoint protection area.
The solution is useful for endpoint protection. The tool is useful to manage and secure all of the company's servers, devices, and everything else. The product also helps manage users to deal with areas like malware, viruses, and other attacks.
Though the product is good, it is not very easy to use. There are so many internal problems with the tool, and one needs to have time to resolve them. Sometimes, the tool is not fast when you want to scan certain areas. My company has many in-house applications that we need to install manually after the tool completes the scanning process. When our company's in-house application is installed manually, the solution detects such an application as a virus, after which it gets deleted. My company faces the same problem with the product for every machine.
I have been using Symantec Endpoint Security Enterprise for five years. My company is a customer of the product.
Stability-wise, I rate the solution a six and a half out of ten.
After deployment, there have been no issues with the stability of the product. The problem with the product is related to managing the updates manually.
Scalability-wise, I rate the solution a seven out of ten.
The solution's technical support does respond to our company's queries, but it does take time, and it is only possible for me to fix the problems after I get a resolution from the support team. I rate the technical support a seven out of ten.
Neutral
My company has not invested anything into the product since everything related to the tool is available in-house.
The product is neither cheap nor expensive, meaning it is an average-priced solution.
The product has improved my company through its area of threat detection. The other applications use the same engine as Symantec Endpoint Security Enterprise. Symantec Endpoint Security Enterprise does not have a set of 100 percent useful things in the tool. Sometimes, a user may know that a file system does not contain any viruses, but it is labeled as a virus by Symantec Endpoint Security Enterprise, making it an issue for users. The aforementioned problem prompts me to contact the product support team via email so that my company can get some help dealing with such problems.
I would say that my experience with deploying the product across multiple devices in my company is not tough and can be easy, especially if you have domain environments.
The feature of the product that is the most effective for threat prevention stems from the fact that the tool provides updates. The main problem with the solution is that a user has to do the updates manually, so at times, the product is not useful, especially when the machine has to be shut down for updates when new viruses are introduced on the market.
I rate the solution's ease of use and administration a seven and a half out of ten.
I suggest that those who plan to buy the solution periodically update the product, especially in the area of the virus engine.
I rate the tool an eight out of ten.

Symantec Endpoint Security helps us with known malware and zero-day attacks. For example, we can allow or block certain ports using the Symantec console. We can also do an analysis of the devices that are in compliance. Eight admins have access to the Symantec console and use it to manage the devices.
Four of them are auditors who check the details for audits. The other four are Symantec administrators managing policies, checking devices for compliance, and overseeing the KPIs.
We have an on-premise deployment, but Symantec now offers a cloud solution. A better deployment approach would be to go with the cloud because it's easier to implement and operate.
Symantec Endpoint Security Enterprise helps us meet regulatory requirements for payment card industries. We must use next-generation antivirus to comply with PCI regulations. The solution protects our network environment, data, and devices.
Symantec is an innovative solution. They're always upgrading the product, and the signatures are constantly updated on the cloud side, and the signatures update on my machine three or four times. Symantec stays ahead of novel viruses and malware using machine learning and next-generation technology
It helps us adopt a multilayered approach to security that incorporates behavioral analysis to detect threats that a signature-based solution can't protect us against.
I rate Symantec's Endpoint Security Enterprise Single Agent System an eight out of ten for attack surface reduction, attack prevention, and breach prevention. A single breach can impact the company's reputation. The return on investment is always great because we are confident that Symantec will protect our users and data.
Symantec Global Intelligence Network helped us reduce false positives by 20 to 30 percent, so we aren't spending as much time investigating these alerts. This frees up resources to do something else. Two of our people working on Symantec also have other responsibilities.
The best feature is the firewall that lets us allow or block ports. That's a great tool because we can limit specific types of traffic on user devices and apply granular security controls to IPs and ports.
Symantec's real-time visibility is excellent because it uses artificial intelligence and machine learning to detect advanced threats. It doesn't rely on signatures, so we can detect new threats before a signature is available.
Symantec should revamp its graphical user interface.
I've used Symantec Endpoint Security Enterprise for two years.
I rate Symantec a seven out of ten for stability.
I rate Symantec an eight out of ten for scalability.
I rate Symantec's support a nine out of ten. Symantec's technical support always meets expectations. When we have faced critical issues requiring support, Symantec's technical support team always has been knowledgeable and ready to help.
Positive
The company previously used Trend Micro, but we switched because we got a good deal from Symantec. It was also an improvement in threat and signature management. Symantec offered better visibility and detection than Trend Micro.
Setting up Symantec was complex. It took nearly six months to deploy the solution in our environment. We deployed it with an in-house team because we have enough experience in this domain. A five-person team handled the deployment, but eight people are responsible for daily operations.
I have seen a decent return on investment from using Symantec. All our devices and data are secured. The data is valuable and so is our corporate image. We avoid the risk of tarnishing our brand on the market because of an attack. With the help of a watch list, we've measurably reduced our indicators of compromise.
IOCs are an excellent way to monitor for ransomware. We create a watch list with specific conditions and rules. Symantec helps us reduce the associated manual tasks because we don't need to go through each notification and false positive. We can use the IOCs to build customized alerts.
Symantec negotiated with our purchasing team and offered us a good deal on support and licensing. However, I wasn't involved, so I don't know the specifics.
We also looked at McAfee Endpoint Security. McAfee was also an excellent solution that was effortless to operate, but Symantec offered us a better price.
I rate Symantec Endpoint Security Enterprise a nine out of ten. Symantec is the way to go if you want to protect your machines with a next-generation antivirus that doesn't depend on signatures. Symantec is easy to operate. You can manage all your devices and maintain IT security compliance.
All our servers and Windows machines across 15 sites have Symantec Endpoint Security, which we use for malware prevention, antivirus, intrusion prevention, Windows Firewall management, etc. The whole suite is used on Windows infrastructure.
We have other layers of security outside the Symantec solution; we also use the full Meraki security suite for malware and intrusion prevention and a firewall on each side. We use Darktrace too, so Symantec Endpoint Security is one of the components we use to secure our environment.
We don't allow remote connections, such as VPN access, from IP addresses outside Ireland and the UK. Even if we have Cisco VPN with Duo and it was compromised, hackers from China, Russia, the USA, Brazil, etc., would not be able to get in that way. The same goes for any of our mobile or web applications exposed to the internet, and we have Cisco AMP on each of our sites. Our emails are through the cloud, so there are many elements to our security landscape. Symantec isn't a one-stop shop, but it caters to the fundamentals of securing a Windows PC: firewall management, IPS, malware, and app blocking.
Additionally, we block PowerShell on all our machines because 70-80% of the hacks out there use it.
Since I joined the company and implemented Symantec and other products, we've had stability on our network and no security incidents or breaches.
We haven't had a security breach in four years, which is significant. There are only so many companies out there who can say that.
Firewall management and intrusion prevention are excellent; those are the critical differences between Symantec and most other products on the market, as they don't manage Windows Firewall or offer intrusion prevention.
The solution is a single pane of glass; the firewall management, intrusion prevention, malware protection, and updating are all in a single web browser. For a smaller company like ours without a large IT team, it's ideal. We don't need multiple desktop applications to manage this element of our security, and that's handy.
Symantec is still one of the leading vendors for attack and breach prevention. As with any product, the tool must be configured correctly to maximize its potential. There are products better than Endpoint Security in some respects, but it's excellent as an overall solution to cover all the critical fundamentals. We need a firewall, intrusion prevention, and malware antivirus to protect a Windows machine. The firewall and IPS are just as crucial as the AV, which is missing in most other products. Symantec's solution, on the other hand, provides all three.
The solution's browser protection in Chrome needs to be improved, as it's the most troublesome aspect of the tool. I have two devices where the browser protection failed, an issue that has yet to be fixed for two months. When updates occur, the client restarts, and the browser protection for Chrome malfunctions. Broadcom needs to improve its ability to hijack a browser session to filter web traffic because that's important, as well as site blocking. This element is missing in the product; most companies have firewalls with web content filtering to prevent employees from accessing specific sites.
The customer support could be better; Broadcom EU support isn't the best, and they don't seem overly interested in helping smaller companies.
The reseller/partner network is another area for improvement; it was tough for us to find a reseller, as there is only one in Ireland. This may be an issue in other parts of Europe too.
I've used the solution for four years at my current company.
The solution is stable, except for the browser issue, which needs to be fixed. Overall, the product is stable; I rate it six out of ten here.
Symantec is a scalable product, it's easy to manage, and there is no problem there. I would have used this at a previous company with 180,000 clients.
We don't have plans to increase our usage of the solution outside of incorporating mobile endpoint device protection. We are a Builders Merchant company, and our industry is currently in massive turmoil due to supply chain issues from COVID and the war in Ukraine. I can't see how we would be adding staff at this point.
The customer support is lacking; I rate it a four out of ten. The browser issues have been open for weeks, and the correspondence has been poor. European customers can no longer log support directly with Broadcom, we have to go through Arrow, so the support is outsourced. I don't appreciate that European customers aren't significant enough to them to log tickets centrally.
Since COVID, the support from most companies has been generally poor, with Cisco being the exception. Cisco, Check Point, and VMware are industry-leading in terms of support, while Dell and Microsoft are two of the worst. Symantec is better than the last two but far from the leaders. It could be better.
Neutral
The initial setup was straightforward; I built the packages and the rules and configured all the different policies. The policy rollout and deployment are very easy, though overcomplicated somewhat by the sheer number of policies. The solution doesn't need to be as diverse as it is in this regard, but as products grow, unnecessary elements are removed.
The policy configuration took several weeks, and the following deployment took two weeks. However, we have a security team of two responsible for managing the solution over 15 sites and 300 end users. I carried out the initial deployment by myself.
The solution could be more intuitive and requires training or experience to configure correctly, including a basic knowledge of firewalls.
The solution requires some maintenance. After configuring the policies and packages correctly, I still need to log into the portal daily.
Our ROI is significant; one ransomware attack from a relatively small hacker could cost 4000-5000 euros or more, not to mention lost revenue. Thankfully, we haven't had a ransomware attack. As we are a manufacturing company, if our shops or computer systems went down, then our lost revenue would be enormous.
We have Symantec Endpoint Security Enterprise, and it's very competitively priced. However, there is a considerable jump in price for upgrading to the EDR, so that's more compatible with enterprise-level organizations.
We are a small shop with 240 licenses but have different sites and only two IT staff. The tool is easy to manage, though it has flaws such as browser protection, and we would prefer if this were a managed solution, as the associated cost is very high. We want to see a more significant price gap between the enterprise and SME levels, but this isn't the case.
I used Symantec in a previous company, where I implemented it in the first year with them, and then Broadcom took over and said they didn't want to deal with smaller companies. At that point, I evaluated all the other products in this field during COVID, including McAfee, Microsoft, Kaspersky, and CrowdStrike offerings. Some of them were better in specific areas than Symantec, but none could do everything that Symantec does. The other solutions could be better regarding ransomware protection and antivirus, but they didn't have firewall management or intrusion prevention. That was the real benefit we saw as a smaller company, and Broadcom decided to allow smaller companies to continue using the Symantec product. It was a no-brainer decision for us.
I rate the solution seven out of ten.
We have the Symantec Endpoint Security Enterprise license, so we don't use Slack, the threat intelligence generated by its Global Intelligence Network, or prebuilt apps for SIEM orchestration and ticketing systems.
We don't use the solution's mobile protection element, but that's a project we have planned for 2023. I could be more familiar with it as it's been a few years since I looked at it; back then, it didn't have some elements we needed. Our requirements for mobile device protection are a firewall, highlighting and blocking insecure apps, and a web filter to block dubious links.
Regarding the solution's capability to protect against advanced attackers using stealthy techniques, there are better products like Darktrace and CrowdStrike. However, we haven't been exposed to such an attack, and I prefer to remain anonymous to prevent drawing attention to the company.
Symantec is a class-leading product, though the opposition is catching up because of developments during COVID. There are more robust solutions in certain areas, but we prefer having Symantec over three separate apps on a machine to do the same job.
Symantec Endpoint Security reduced the number of solutions our company uses because we would otherwise be using two if not three, different applications depending on the products.
As to the solution saving employees' time, it's hard to tell. There's a whole security suite outside of Symantec that we operate, and it doesn't impact the end user, aside from the browser plugin issue. However, user data hasn't been compromised, and we haven't been hacked. Outside of scheduled maintenance, we haven't had a system outage in the last two years, and a hardware failure and a server caused the only outages during the previous four years. Even though we're a small company, we don't have outages, so we are very lucky or good at what we do.
My advice to potential customers is to determine the requirements for protecting an endpoint, then ask all the providers if they have a single solution that fulfills those requirements. The majority probably don't, but Symantec does. It has a few weaknesses like the cloud, browser protection, and web filtering, plus browser protection and the firewall for the mobile side. If Broadcom can resolve these issues, it's an open-and-shut case. CrowdStrike and Darktrace are much more sophisticated in advanced attacks and tracing what happens, while Malwarebytes is better in ransomware and rollback. However, they don't have firewalls and IPS elements like Symantec. Our alternative would be CrowdSrike with Intune for firewall management, but that's two products instead of one, and we would be without IPS protection.

We use the solution for security purposes, my email, and website.
The solution has integrated some AI tools for the automation of tasks. At times, you don't need to do something. The solution will give you a report of what it has done. The solution's threat detection and response capabilities are quite good. The solution gives you feedback about future threats. That's a great insight because once you get the particular information, you can respond according to the report.
The solution needs to be marketed to more consumers so that they will use it. The solution is expensive, and its pricing could be improved.
I rate the solution a nine out of ten for stability.
Symantec Endpoint Security Enterprise is a scalable solution, and we can scale it. However, the product's license is quite expensive. Around six users are using the solution in our organization.
The solution's technical support is good, and their response time is fast.
It's easy to deploy the solution. The solution is not difficult to use because it comes with some instructions. Even a non-technical person can deploy Symantec Endpoint Security Enterprise.
We implemented the solution through an in-house team. The solution’s deployment takes around 30 to 40 minutes.
We pay a yearly subscription for the solution. The solution's license is very expensive.
The solution's performance in a large-scale enterprise environment is good. Around four people are needed to deploy and maintain the solution. I would recommend the solution to other users because its technical support and threat detection and response are quite good.
Overall, I rate the solution ten out of ten.