SentinelOne vs Intercept X Endpoint Comparison

I like the way you can customize exclusions and alerts. I like the web console for endpoint management and the many options you have from there including taking an endpoint offline.

Navigating the web console is slow when you have many agents installed. Typically an endpoint reboot is required when you make any changes like a new exclusion, enable/disable the agent. This is not convenient of practical. Identifying the actual file or process that is the source of an alert can at times be challenging.

It is really a pro software in finding out the vulnerability within endpoint, stay secure from threats, this can really save you from bad actors trying to put ransomware in your endpoint, your endpoint can easily be restored back to original state. Further we can integrate with SIEM and after observing the pattern we can have different threats use cases.

Nothing I can think of it really worked smooth when I used it, however they can improve the builds in each update, and yes threat actors are thinking out of the box, they also need to think out of the box and build something which can even prevent zero day attacks.

1. Its autonomous endpoint protection, powered by AI, offers unparalleled detection and response capabilities. 2. Reduces the manual working of the organization security team.

1. Sentinel One doesn't have any uninstaller tools, if in case any endpoint is not connected to the portal then you don't have the option to uninstall. In the above case, the only option left is formatting the endpoint if you want to remove it from your endpoint. 2. Send what I want to highlight is that they don't have any knowledgebase available on google, how to configure, manage, etc. 3. The support team will take so long to resolve the issue.

For the past one year am using this product . What i like the most is its ability to find vulnerability in endpoint systems and sudden disconnection form the local network, which makes the other systems in the network safe. It even finds the scripts running in the endpoint and helps us to identify potential security breaches.

Being a cloud service sometimes the web login is not available and also the frequent updation of the User interface makes it really confusing . When ever a system is blocked from network and if there is no internet connection for the system its to much difficult to restore he network , only thing that we can so is to uninstall the software and then connect the network.

Finding a specific end point and the amount of information available is amazing. It's like endpoint protection and asset management all in one.

IT would be great to be able to push software installs or commands to endpoints.

This software is hard to circumvent. I love the quarantine/block options on nefarious files. The notifications work great and there's many options to configure. It's quite simple to manage and makes my job so much easier.

Sometimes the agent won't update on a PC. So it has to be manually uninstalledre-installed with special commands from SAFE MODE on Windows PCs. It's uncommon but it does happen.

The best part about this next gen endpoint protection is that it uses AI and user behavior to protect against threats. No more AV scans to slow down computers.

Linux and Mac support are sorta lacking but Windows is solid.

Sentinel One is a top notch Cyber security product that saved one of our customers from a large wide Malware/virus threat. All machines that had S1 enabled were virus free and the other computers that were in transition were infected.

I the major con that I had issues with the S1 portal was deleting or uninstalling an endpoint or updating endpoints. I had to manually update agents and they weren’t updating on their own.

tons of features but more importantly security. we never had any incident since we deployed sentinelone. rollback feature is awesome, threat hunting is very good and visualization of events with deep diving is something which helps to understand the overall threat landscape

only thing i don't like about them is their support is not locally available and they keep on introducing new features as a module with additional charges

Sentinel One is very simple in deployment all the resources are available easy to understand for even a new user. the built-in architecture is very simple and the rollout agent is easy to deploy or pushing with 3rd party tools. When it comes to its XDR capabilities way ahead of all the traditional products, its Machine learning capabilities, and roll-back features, etc.. special comment for its storyline based on events and any incident that happens. Auto remediation capabilities are exceptional.

as the product has good capabilities but lack's in defining things deeply. building deep level policy fro endpoints or DLP based policy on products are limited. Endpoint-specific policies are not so flexible and also not feasible for some customers because of their price.

SentinelOne delivered on it's promise to completely replace my old AV solution (Sophos). I wasn't looking to supplement Sophos, I was looking to get rid of it, and that's exactly what I was able to do. A lot of next gen endpoint protection solutions say they can replace AV completely, but in my evaluations, they couldn't. Add to this SentinelOne's ability to roll back from ransomware or other infections (if something magically makes it through) in a matter of mins, and you have a real winner.

The product is still relatively new so it's missing some features like ability to temporary disable an agent from the console, set custom uninstall passwords, etc. But none of these things are deal breakers and tons of new features are being added in each release.