ContentProtect vs. Symantec WebFilter / Intelligence Services

If you are looking for something relatively inexpensive to lock down specific computers, it would be a useful tool. If the computers themselves aren't too locked down, implementation and management shouldn't be too difficult.

Incentivized

Having an end to end solution for web / mobile applications in terms of protecting it from online cyber security threats, Symantec WebFilter / Intelligence Services provides great solution. You also get an ability to configure your security profile so that the contents that may be desired for you but not recommended can be allowed on your network

Incentivized

• The client is relatively light weight and doesn't impact other applications.
• The client isn't easily bypassed, so the user's are kept under restrictions.
• The configuration is relatively simple and easy to deploy.

Incentivized

• Almost real time protection from all ongoing threats with their DLA inspection
• Great visibility into web filtering policies using the dashboards and reports
• No patching or downloads needed, immediate protection is provided as clients are always cloud connected

Incentivized

• Our primary policy is a restricted list, so that does as advertised. We had one location that had blocks based on categories (adult, illegal, etc). We continually had issues with sites getting completely blocked due to unrelated content. For example, Yahoo had a beer ad on the page, alcohol was blocked, so Yahoo became blocked for the period of time that ad was displayed. We had this happen multiple times and eventually switched to a different solution at that location.
• I've had issues with their cloud portal not working. I don't have to edit our configuration often, but on numerous occasions, i was unable to get the configuration page to load after login, sometimes for days. The platform just wasn't stable when I needed it to be.
• We run many of our remote rooms as frozen (after logoff they reset to the image). This works fine most times, but when content protect needs a configuration change pushed down, someone needs to go 'thaw' the computers, download the updated configuration, and re-'freeze' the computer. It would be nice if that information was just dynamic from the cloud and didn't need to be pulled down.
• The categorization used for policies is very limited and not flexible or easily customizable.
• I could never get the usage reporting to work.

Incentivized

• The admin interface would be better off not using Java
• Setting up SSL properly can be a bit challenging
• Could really use a better source for training, like a library of how-to videos

Incentivized

I really like the system, it's easy to use and mostly intuitive. I would have gone 10/10, but the management interface uses Java, and that seems to always make things a bit harder to start. Once everything is loaded and running, it's great - but it does require me to maintain a compatible version of Java on the machine I use to access the system, I'd be much happier with some kind of HTML5 interface. I also deducted 1 point for the functionality of the refer filter - it works as expected, but if the site isn't coded with the correct refer header, like Microsoft's site - then some page elements get stripped and pages only render about 98% correctly. I know that's not in Symantec's list of responsibilities, but having a filter that doesn't fully understand CDNs is worth the 1 point ding.

Incentivized

I've had exactly 1 problem in 8 years, I contacted support via the customer portal, less than an hour later I found myself in a screen share with a support tech who not only fixed my configuration error, but also took the time to ask about my usage and offered some great tips on changes. It was just one support incident, but I was impressed by the speed of response to a non-critical issue as well as the depth of product knowledge the support engineer had.

Incentivized

At the time ContentProtect was selected, Forcepoint (Websense at the time) didn't have an inexpensive or cloud type product. The same can be said with Cisco, at that time. Recently, we have reevaluated and are going to be transitioning to Forcepoint's mobile client and removing ContentProtect from our environment. The cost is actually now less and we will be able to get both more dynamic control and also give us more detailed reporting on the traffic from clients.

Incentivized

Symantec WebFilter / Intelligence Services solution was a simple 1U appliance that does everything we need, compared to the Forcepoint solution which required a virtual appliance, a database server, a log server, and a management server - the licensing costs alone make the Symantec WebFilter / Intelligence Services solution a clear winner. The Forcepoint solution is really good, it just requires such a big footprint without delivering much beyond what the Symantec WebFilter / Intelligence Services solution does with a single unit.

Incentivized

• It was a relatively inexpensive and simple solution when we needed one relatively quickly, which is a positive. The inexpensive price has kept it in the environment.
• The lack of reliable reporting has lead to the need for an alternate monitoring solution in a few cases. Network level reporting was used, which is a separate expense, configuration.
• Time has been lost waiting on the portal and then troubleshooting support tickets when sites that shouldn't have been blocked have been blocked. It has resulted in changes for locations that needed dynamic category filtering as opposed to a finite list.
• The blocking of sites based on add traffic or sub-sites (rather than just blocking that content like other solutions) has resulted in downtime during classes when those sites were listed in the lesson plan and had previously worked.

Incentivized

• Helps maintain network security and prevents malicious browsing
• Helps to prevent dangerous internet usage from network servers
• Relatively low cost means fast ROI with drastically reduced security response costs

Incentivized