IBM X-Force Exchange vs. Webroot Endpoint Protection

IBM X-Force is well suited for organizations with medium to large SOC's and run IBM Qradar as their SIEM.

Incentivized

The software tends to do a good job of basic protection but is not the best for larger clients and is not as powerful as some others offered on the market today. The support is not the best either, have had a hard time getting assistance in the past trying to resolve issues.

Incentivized

• Ready made security research on threats.
• Security Intel
• Integrate threat intel feeds with SIEMs.

Incentivized

• Webroot Endpoint Protection works very well at blocking threats quickly and can undo changes if a file turns out to be harmful, which has helped us in the past.
• It runs quietly in the background without slowing down endpoints, even during scans, which is great.
• You can manage all your devices from one online dashboard, making it easy to set rules and see security alerts. One pane of glass is always great.

Incentivized

• Pruning of IOC to reduce false positives.
• Add more flexibility to integration on SIEMs to allow users to compare UserAgents, Compromised users/domains like HIBP.
• Only watch vulnerabilities for selected vendors.

Incentivized

• It was missing detections. We found a better product that detects more malware.
• Deploying the endpoint agents was easy, but deploying Web Threat Shield was not and users could disable that functionality.
• When you deactivated old endpoints, they were put in an "inactive" category. You could not then delete the "inactive" endpoints. For someone who likes to keep things clean, this was annoying.
• I found the rollout of endpoint agent updates to be rather slow.

Incentivized

It has proven successful so far in our environment for controlling malware/virus outbreaks.

Incentivized

It does what it needs to do but we have noticed that malware is sort of uncommon and we have started to switch to other solutions of combating malware and suspicious activity such as using products like ThreatLocker and Field Effect, combined with things like malware bytes to perform scans when needed.

Incentivized

Support has been reliable up to this point. A request can easily be generated via the console and support responding in a reasonable time. We have not had any major issues other than the basic agents not communicating with the console and the like.

Incentivized

I had some difficulties with remote users. I ended up needing to open a remote tech support session and finish the process. Other than a few speed bumps, I was impressed with the engineering of the install. Because of time differences, I was done installing in two days. The cost, per license, could be less.

Incentivized

IBM X-force is community-based and crowd strike is not. Community-based will always be best-effort quality.

Incentivized

We would consider Webroot in the top 5 when you factor in ease of use, level of protection, and cost. Probably not as comprehensive as other end-point security solutions but the proper level of functionality and support for our needs. Question what impact the acquisition by OpenText is having on future development and support. OpenText also acquire Carbonite for back-up support.

Incentivized

• Threat Intel - Low Confidence IOC - Overhead.
• Lack of integration with IBM Qradar+Vulnerability via X-Force.

Incentivized

• It saves us time and money in the fact that it runs and we never really have to worry about that part of IT. IT just runs
• Being able to centrally manage the clients is another plus because of being able to reach it virtually anywhere.
• Very simple quick installs. Gives us time to do other things.

Incentivized