There is one significant issue with WithSecure Elements Endpoint Detection and Response. For computers with limited RAM, such as 16 gigabytes, the software is not optimal as it requires between four to six gigabytes of RAM to run. I don't use the Threat Intelligence feature from WithSecure Elements Endpoint Detection and Response as it requires extra activation, which I have not implemented.
Chief Information Security Officer at Saarni Cloud Oy
Real User
Jul 6, 2023
The solution's automated detection functionality could be better. It could be more optimal as it detects a certain number of false positives and some of these detections just keep repeating. Documentation is not very clear on how to avoid these kinds of false detections, although the automated machine learning logic has learned to avoid *some* of them. We have endpoint aliases defined on the endpoint protection side. These aliases are not shown on the EDR detection side, which makes wider investigations more cumbersome.
The monthly reporting feature of WithSecure can be improved. Since we have KPIs in our organization, we have to do a lot of manual work while preparing the monthly reports. Though I can see the installed software, I don't get a consolidated report on them. The solution's software inventory features can be improved to be more actionable. Although they have all the necessary information on the portal, it's not actionable enough.
Head of IT & Telecommunications at VA-Erzberg GmbH
Real User
Apr 11, 2023
The website rules are too complicated. I know it is a complicated system, however, it could be streamlined. Other products manage to simplify their websites. I can't be that hard.
IT Manager at a tech services company with 51-200 employees
Real User
Nov 16, 2021
The only issue that we have today is with false positives. We have too many false positives with the solution. Now they block everything. Not everything has to be blocked, even if we white list some applications, still the endpoint detection will detect that there is something going on. They are working on it apparently, so probably it will be solved. Sometimes good emails got tossed into your spam folder and you have to look for them, which isn't fun.
EDR solutions provide advanced capabilities for detecting and responding to threats on endpoints. These tools enhance security teams' ability to detect, investigate, and remediate incidents.EDR solutions offer enhanced endpoint protection by integrating real-time monitoring and advanced analytics. Designed for modern security teams, they facilitate immediate threat detection and remediation, effectively mitigating risks. User feedback highlights their capability to analyze extensive data...
There is one significant issue with WithSecure Elements Endpoint Detection and Response. For computers with limited RAM, such as 16 gigabytes, the software is not optimal as it requires between four to six gigabytes of RAM to run. I don't use the Threat Intelligence feature from WithSecure Elements Endpoint Detection and Response as it requires extra activation, which I have not implemented.
WithSecure Elements Endpoint Detection and Response need to improve pricing.
The solution's automated detection functionality could be better. It could be more optimal as it detects a certain number of false positives and some of these detections just keep repeating. Documentation is not very clear on how to avoid these kinds of false detections, although the automated machine learning logic has learned to avoid *some* of them. We have endpoint aliases defined on the endpoint protection side. These aliases are not shown on the EDR detection side, which makes wider investigations more cumbersome.
The monthly reporting feature of WithSecure can be improved. Since we have KPIs in our organization, we have to do a lot of manual work while preparing the monthly reports. Though I can see the installed software, I don't get a consolidated report on them. The solution's software inventory features can be improved to be more actionable. Although they have all the necessary information on the portal, it's not actionable enough.
The website rules are too complicated. I know it is a complicated system, however, it could be streamlined. Other products manage to simplify their websites. I can't be that hard.
The only issue that we have today is with false positives. We have too many false positives with the solution. Now they block everything. Not everything has to be blocked, even if we white list some applications, still the endpoint detection will detect that there is something going on. They are working on it apparently, so probably it will be solved. Sometimes good emails got tossed into your spam folder and you have to look for them, which isn't fun.