A switch from Symantec Endpoint

What are the best aspects of this product?

We like the fact that the server is run remotely, one less server to house internally. We like that the software includes Intrusion Detection and that it locks down a device so that if ransomware or virus is installed it can not spread to other machines.

What aspects are problematic or could work better?

Sometimes it is difficult to tell why something isn't working on the network and it has been because SentinelOne found a process that was suspicious and it locked down a server that the process was running on. The device doesn't display that there is an issue - SentinelOne still says everything is fine locally - however when you look at the Server it does say there was something found. Price is still a little high for a small institution.

What features/services would you like to see in future versions of this product?

I would like to see an alert display on the local device when an issue is detected.

What specific problems in your company were solved by this product?

Our auditors were requesting that we implement an IDS system to go along with our IPS system. There are two main options of IDS - Expensive or Free with a high learning curve which ends up being expensive in amount of time spent. SentinelOne helps bridge the gap a little, its still expensive but because it is both an IDS and IPS it can replace Symantec or other Antivirus software and fill the need for the IDS system.

Are you a current user of this product?

Yes