Symantec Protection Engine for Cloud Services on Linux

I mainly use Symantec Protection Engine for scanning files for malware, protecting emails, and web filtering URL protections.

I use Symantec Protection Engine to scan files uploaded by users and shared across endpoints, and it has helped identify potentially malicious files before they could spread, which makes routine monitoring and investigation much easier for my security team.

One thing that stands out about my main use case for Symantec Protection Engine is how my team uses it as part of daily endpoint monitoring, which helps us quickly validate suspicious files and reduces the time spent on manual analysis, improving overall response efficiency.

For governance and security regarding Symantec Protection Engine, from my experience, my primary use case is malware scanning, so I have limited exposure to its AI-specific features; however, from a security perspective, it has been reliable and provides the controls and visibility needed for day-to-day operations.

The best features Symantec Protection Engine offers are the malware detection engine and automated file scanning, as they help identify suspicious files quickly and reduce the time spent on manual checks.

What I value most about the malware detection engine in Symantec Protection Engine is its detection accuracy, which helps identify suspicious files reliably without generating too many false positives; the automated file scanning is especially useful for files uploaded to shared locations, as it reduces manual checks and helps my team respond to potential threats more quickly.

Symantec Protection Engine has improved my security posture by helping me identify potentially malicious files before they reach users or critical systems, and the automated scanning process has also reduced manual efforts for my team, allowing us to focus on other security tasks and respond to threats more efficiently.

I do not have specific metrics to share about Symantec Protection Engine, but I have seen a noticeable improvement in efficiency as automated scanning helps identify potentially malicious files earlier in the process, reducing the amount of time spent on manual reviews.

Symantec Protection Engine works well overall, but troubleshooting can sometimes take extra time when detailed logs need to be reviewed; other than that, my experience has been positive.

I would like to see improvements in reporting and troubleshooting capabilities for Symantec Protection Engine, as more detailed insights and simplified diagnostics would make day-to-day administration easier.

Better reporting, easier troubleshooting, and more streamlined integration with other security tools would help my team work more efficiently with Symantec Protection Engine.

I chose a rating of 8 out of 10 for Symantec Protection Engine because there needs to be improvement on things like reporting, troubleshooting, and streamlined integration with other security tools.

I have been using Symantec Protection Engine for five years.

Symantec Protection Engine has been a stable and reliable solution, as I have experienced very few operational issues, and it has consistently performed well for my malware scanning requirements.

Symantec Protection Engine has scaled well with my needs, continuing to handle increasing scanning workloads while maintaining reliable performance.

For customer support of Symantec Protection Engine, I have had limited interaction, but the experience has been positive, with professional responses that helped address my questions efficiently; therefore, I cannot provide detailed feedback on the support experience.

I used another solution previously before transitioning to Symantec Protection Engine to improve operational efficiency and simplify malware scanning within my environment.

Based on my experience with Symantec Protection Engine, the detection capability is reliable for day-to-day operations, with generally accurate results that help my team identify suspicious files more efficiently while still following standard validation procedures.

I would recommend evaluating Symantec Protection Engine against your specific security requirements and testing it in your environment, as it has been a reliable solution for malware scanning and file protection in my experience.

My overall review rating for Symantec Protection Engine is 8 out of 10.

I already worked five years with Symantec products. Not in partnership with Symantec, but in my previous companies, I worked almost five years with them, so I have experience with backups, EDR, XDR, and everything.

Symantec Protection Engine is included for both on-premises and cloud deployments. I already have the EDR with the deployment of Symantec Protection Engine.

Symantec Protection Engine is included for both on-premises and cloud deployments. I already have the EDR with the deployment of Symantec Protection Engine.

The tailored policy management capabilities of Symantec Protection Engine are good. The operational efficiency with the high-performance scanning of Symantec Protection Engine is very good. It is not too costly and not too cheap.

The seamless integration of Symantec Protection Engine is very good.

For the improvement of Symantec Protection Engine, the engine did not work with their basic engine when I was working, which was almost three or four years before. In the current world, you have to change with AI and with everything. At that time, I did not find all these things. There could be some issues with Symantec.

I am talking about the engine side. At that time when I was working, they did not work with that engine. They went with a different engine after they sold their company to another company.

The deployment of Symantec Protection Engine took a couple of hours. If you have experience with virtualization and how to install it, it is very easy. There is no issue with installation. The setup, installation, and deployment are very easy. However, they did not change with the market.

At the time when I was working, the real-time content scanning feature was not supported there with Symantec Protection Engine. There could be problems with integration with third-party tools, as they are not 100% flexible.

We were developing an in-house application, and it would create an issue. With the in-house application, when we were building everything, Symantec Protection Engine was already deployed on that server, and it still treated that machine and our application as a virus.

I used Symantec Protection Engine for almost six years continuously, until 2022.

I would rate the support of Symantec Protection Engine from Broadcom at eight. They are quick for technical support. When I create a ticket, it normally depends on the type of ticket and what we pay them. They have their own methodology, and they support me on time. For the in-house application, I opened the ticket multiple times. They gave me a workaround solution to fix it.

I did the deployment of Symantec Protection Engine myself. Currently in our environment, we are using Microsoft Azure, not AWS cloud. Before, I worked 100% with Symantec Protection Engine until 2022. There was no other antivirus for me because I truly liked Symantec—the way it worked, everything, the protection. However, as per the time changes and security increases, we needed to go with AI solutions and everything.

The deployment of Symantec Protection Engine took a couple of hours. If you have experience with virtualization and how to install it, it is very easy. There is no issue with installation. The setup, installation, and deployment are very easy.

I did the deployment of Symantec Protection Engine myself.

It is not too costly and not too cheap.

I am currently using CrowdStrike.

I prefer both on-premises and cloud deployments. I have no issue with either option. The operational efficiency with the high-performance scanning of Symantec Protection Engine is very good. It is not too costly and not too cheap. When I was working with it, I would give Symantec Protection Engine a rating of seven. I purchased this solution through some other vendor, not through AWS Marketplace. They gave me a workaround solution to fix it. I would rate this solution an overall eight.

Clients usually use Symantec Protection Engine primarily for protecting their computers from malware or any kind of attacks, which includes viruses or trojans, as a comprehensive security solution provided by Symantec.

Symantec Protection Engine provides me with the option of both cloud and on-premise solutions, which stands out for both me and my clients. Within one stable environment, I can get multiple products in Symantec, such as Symantec Endpoint Manager, Data Loss Prevention, proxy, and other complete security products. Symantec Protection Engine provides me centralized management, antivirus, anti-malware, firewall, and host-based IPS, as well as device control where I can block USB drives or application control.

The real-time content scanning feature in Symantec Protection Engine is indeed helpful for detection purposes. The benefit from that scanning is that it detects and blocks threats so that files cannot spread viruses or malware into my system. It also detects any suspicious activity, such as when an executable is installed that encrypts my files or during cross website transactions which could indicate a ransomware attack. This helps me to lower the risk of infection spread.

Integration with infrastructure, especially regarding third-party integration, is generally good. Symantec Protection Engine integrates with third-party solutions, such as SIEM; I have integrated it recently with Elastic for forwarding logs. Active Directory and ITSM integrations are also possible, which are basic necessities for many solutions, including Symantec. Additionally, it provides integration with Symantec EDR solution for threat hunting or endpoint isolation.

While I have mentioned many advantages of Symantec Protection Engine, there are areas for improvement, particularly the dashboard features. I find that some features are not available, leading us to rely on third-party solutions like Elastic for dashboard creation. Additionally, the console experience is quite traditional, especially compared to competitors like Carbon Black, which have more visually appealing and informative dashboards. Support from Broadcom is another area needing improvement since it has issues that affect customer experience.

Comparing Symantec Protection Engine to other vendors, the primary difference lies in the dashboards, which lack intuitiveness and the comprehensive information that a CXO would expect on a single page.

Symantec product solutions are indeed stable enough, achieving reliability in operation.

There are minor issues with scalability in Symantec Protection Engine, especially for large-scale deployments, where policy administration can become complex.

My experience with customer service from Broadcom is generally acceptable, though there is room for improvement. As a Broadcom partner implementing their products across the Middle East and Eastern Europe, I currently do not face major issues.

Support from Broadcom could indeed be improved; the quality of support often depends on the region, with varying experiences based on location.

If I were to rate support from zero to ten, I would give it an eight for its overall performance.

The return on investment for deploying Symantec Protection Engine varies depending on whether a customer likes Broadcom. While there are better solutions like Carbon or CrowdStrike, it largely depends on customer budget and the level of support provided by Broadcom. If Broadcom enhances its products and supports customers effectively, it is a good buy.

The performance during scanning totally depends on the client-to-client environment, so I have not seen major issues with high performance regarding the installation of agents occupying excessive RAM or CPU cycles.

Regarding threat protection, Symantec Protection Engine has a robust threat intelligence network because it publishes new signatures for evolving viruses and threats. This capability, often referred to as LiveUpdate, ensures that systems can be kept up to date with the latest definition files.

Policy management does impact my security approach overall because I have used it multiple times and found it easy to create different types of policies. Symantec Endpoint Protection, referred to as SEPM, has components that include antivirus, anti-spyware policies, firewall policies, and intrusion prevention systems. It provides complete security with respect to host-based security and allows configuration of various component policies to ensure that my PC is secure.

The price of Symantec Protection Engine is fair; in fact, I believe it is a very fair price for what is offered and not excessive compared to competitors.

I would rate this review seven out of ten overall.

I use the real-time content scanning feature, and it has helped me with proactive threat detection.

Seamless integration has benefited my existing IT infrastructure.

I have utilized the tailored policy management capabilities, and this impacts my security approach positively.

The high-performance scanning has impacted my efficiency in significant ways.

I have been using this solution for three years.

The best features that I like the most include the threat intelligence network, which is effective in protecting against evolving threats.

Blocking and integration are areas that have room for improvement.

Regarding pricing, I find it to be cost-efficient.

I have been using this solution for three years.

I rate the stability at eight out of ten.

I have concerns about scalability.

I rate the technical support at five out of ten.

Symantec Protection Engine is deployed on-premises.

The deployment is not overly complex.

The deployment takes one or two months for policy configuration.

I would recommend Symantec Protection Engine to others looking to implement this product, and they should consider doing a proof of concept.

I give this product an overall rating of nine out of ten.