Endpoint Security in the Cloud, providing a strong set of controls and protection
Our primary use case is to provide endpoint security for our AWS EC2 instances, covering features, such as host-based firewall, IDS/IPS, anti-malware, and application control.
How has it helped my organization?
Deep Security has given us strong protection and configuration of our endpoint security and enables us to bridge the gap between patching windows using the Virtual Patching feature. This allows us to make sure full patching is tested properly in our testing environments before roll out. This especially helps when, like this month, a patch is released which can’t be used, due to stability/performance issues.
What is most valuable?
* IDS/IPS
* Host-based firewall
I am also currently looking into the newer integrations with our various other security tools.
What needs improvement?
The training needs improvement. It is expensive (classroom training), and it is often hard to find answers by yourself using the documentation.
I would like them to add EDR features, moving away from traditional signature-based anti-malware.
For how long have I used the solution?
One to three years.
What do I think about the stability of the solution?
The product seems very stable. We have only ever had one incident which caused us concern, and Trend Micro identified a way to mitigate it for future occurrences. They also ensured the issue was patched.
What do I think about the scalability of the solution?
It seems to work at the scale that we are currently using it at: Approximately 65 EC2 instances.
How is customer service and technical support?
Customer service team are fantastic and help provide timely resolution to issues and questions
How was the initial setup?
Configuration in our AWS environment is straightforward and policy-based with inheritance, e.g., making it easy to align with Active Directory. Event-based triggers can automate the correct policy implementation.
What's my experience with pricing, setup cost, and licensing?
It is simple and cost-effective to purchase through the AWS Marketplace, which provides an easy understanding of the scale of the costs. Our organization purchased it through the AWS Marketplace because it is easier to track when added to our AWS bill and convenient purchasing model.
The AWS licensing model is scalable and easy to use, but could do with tiered discounts. I am not sure how well this model will scale when we start to use Auto Scaling with AWS resources.
What other advice do I have?
It provides a comprehensive feature set and a strong security baseline for us with integrations into other security tools.
There are no comments to display