Attivo BOTsink vs. Netskope CASB

Attivo BOTsink is a great network security tool for organizations that may not have a dedicated security team, but need to have threats reported in real time. It seems well suited for medium to large sized organizations that may have several subnets, VLANs, and remote locations.

Incentivized

Well suited for an organization that is either architecting their environment for majority SaaS usage, or presently is a cloud-first organization and wants greater insight into their existing cloud placements. It does provide good first-level DLP and will need to be supplemented with a purpose drive DLP control.

Incentivized

• Identifies devices
• Provides threat details in real time
• Provides network topology with potential threat paths

Incentivized

• Policies against integrated SaaS applications.
• Visibility into cloud applications usage and risk.
• Cloud Confidence Index (research into security confidence of providers).

Incentivized

• More fine tuning of threat detection capabilities needed
• Users should be able to modify AIML configuration
• Improving the display dashboard

Incentivized

• Fine tuning of Web Categories
• UPN and Email attributes mapping should be further simplified as deployment progresses
• Email DLP is at nascent stage, can be further strengthened and matured.

Incentivized

Netskope's CASB can be challenging to deploy. If it is being implemented for the first time and staff do not have prior experience with deployments, then professional services should be utilized. Once configured and deployed, the product provides an easy-to-navigate User Interface and can be managed effectively with training.

There have been some struggles with their infrastructure keeping pace with demand and load. Support can only do so much and has to defer to known problems being escalated.

Incentivized

Attivo BoTsink was selected based on cost price and wide coverage of detection capabilities. Our decision was primarily based on reducing efforts to identify and mitigation of attacks. The ease of deployment was additional factor in decision making. As compared to Zscaler Deception and SentinelOne Singularity I found Attivo BoTsink detects more threats

Incentivized

I find that Netskope CASB provides a larger catalog of SaaS applications and provides additional security controls for each app, allowing granularity to what actions end users can perform on the sites. This goes beyond simple block download/block upload, making it highly effective at enforcing the actions outlined in corporate policies.

• Helped reduce 20% of Security teams time in threat detection
• Reduction of 40% of attacks
• Automated deployment helped in improving efficiency of the team by 30%

Incentivized

• We end up troubleshooting many not existing issues thanks to Netskope.

Incentivized