EclecticIQ Platform vs. Egnyte

ElecticIQ has an architecture where it usually needs decent computing power within the organisation. The central console along with the ELK servers and PostgreSQL sever needs their own space in a distributed setup. This could be a little too expensive for small-scale organisations. But for the organizations having mid to large-scale networks. EIQ is a decent solution to serve the purpose.

Incentivized

Egynte is best suited for companies that SharePoint is not the best fit for. This includes managers unfamiliar with SharePoint specifically, and those really looking for a replacement for a file server in the more traditional Windows sense. SharePoint has more or less done away with any management that resembles Active Directory or File Explorer. Egnyte's web portal is incredibly straightforward. I would say Egnyte is less suited for companies that have licensing access to SharePoint already and do not have a ton of files or granular sharing and security needs

• Effective correlation of IOCs
• Averaging out the Confidence Score based on different intel sources.
• Serves as an excellent liaison points between the Intels and SIEM/SOAR stack.

Incentivized

• Sharing files externally with passwords, link expiration and granular control of permissions
• File syncing across end-user devices using a client installed onto the computer for seamless integration for end-users as if they had mapped a drive directly to their machine
• Implements 2FA for secure access

• Misses on a global search bar which can directly gives out the result like VirusTotal.
• The GUI could be more friendlier. Too many filters and graphs may overwhlem the user sometimes.
• The ElasticSearch(searching for IOC in the in-house EIQ database) is a little slow compared to its counterparts.

Incentivized

• The main drawback of the system that it is lacking in managing the uploading of large or huge files, even though the large files can be easily downloadable but the upload takes a lot of time.
• While uploading the system sometimes starts lagging and the file after sometimes needs to upload again.
• Egnyte is lacking in syncing multiple platforms at the same time. It gives access to one platform at a time which somehow hinders the work while migrating a large amount of data.

Incentivized

We found that usage of Egnyte in our supported clients, with sufficient bandwidth, provided all the features and stability we required. The billing setup was fair and the support provided was ample for end users and well as our in house admins. There was a concern about high usage clients but this was taken into account during the vetting process.

Incentivized

Really easy to use the interface. The web browser is very intuitive and I have not had any notable issues with this. It's easy to work on documents as a team, and the only issues we have to tend to come with Apple apps and downloading large files to WebEdit. It's very similar to the filing systems that come on Apple and Windows devices so not a steep learning curve.

Incentivized

Egnyte works very well across all platforms and as an add-on to other programs. Load time is close to nothing. Reports can be made in no time as well. All in all no performance issues. We can see that it depends on the local network connection. If you're running with fiber there won't be any issues.

Incentivized

I never had to reach out to customer support for Egnyte. I don't know any coworkers who have had to reach out to Egnyte for support either. As far as I am concerned, the support team is doing a good job since I have not had to reach out to them.

Incentivized

The most important feature of EclecticIQ which gives it an edge compared to other TIPs is that it performs segregation of IOCs based on the relevance of it and the links that IOCs might have which other adversaries. The graphical format mapping where the user can easily figure out how the IOCs have connections to different binaries is another advantage. One can set the half-life time for an IOC which will reduce the confidence score as per one's need.

Incentivized

At the time when this was implemented (over 5 years ago and still in production), there were issues with syncing and reliability that Egnyte did not have, and have continued to impress with. Other providers have improved a lot and Egnyte is fairly costly, but switching costs would be high to move away from it to similar solutions.

Incentivized

• Positive: Effective usage of all the premium Intels in a uniform fashion. No need to log in to each tool time and again.
• Positive: SOC Analysts spends lesser time on the internet and the analysis for the IOCs with graphical format is fulfilled by EclecticIQ.
• Negative: Higher costs over the resource utilization in the initial setup.

Incentivized

• Allows us to easily communicate important data securely with other offices (not just sending via email)
• It allows everyone in our office to be working on the same information at the same time
• It meshes so well with salesforce that I can't really picture what our practice would look like if we didn't have the combination.

Incentivized