Kaspersky EDR Expert vs. Sophos Intercept X

It is a very comprehensive product to learn everything about incidents on the windows hosts. Also EDR can create some incidents during its analyze. But it is pretty useless when we are talking about linux systems. Further it is not so good when algorithms are not described clearly (like it was when we used Traps). So there are some ways to improve the product

Incentivized

Sophos Intercept-X is well suited for any environment big or small. There is even a home version that is free that I highly recommend for anyone at home. If you are looking for endpoint protection that is centrally managed, catches everything, and has many features this is the product for you.

Incentivized

• Detection
• Embedded Sandbox is a really good stuff, I can see detailed activity with visualization of any malicious sample
• Simple interface. Usability.

• Sophos is a little too good at DLP. But it is indeed very good at not allowing our data to leave our endpoints without strict adherence to policy.
• Sophos is very good at protecting endpoints against viruses and other malware.
• Sopho is really good at informing us of what is happening on our endpoints. OOTB reporting is way better than expected.

Incentivized

• It would be nice to have more insight into the kill chain of potential infections and malware.
• Remote interface is a little lacking as to why a file was flagged.

Incentivized

• The migration from on-prem sophos to cloud sophos, could have been a little more seamless
• Would love to get more insight on what was blocked or flagged and what it was trying to do
• Better and more granular feature management from group policies

Incentivized

I believe the Kaspersky EDR Expert systems represent significant cyber risks for government and commercial enterprise customers

Incentivized

We have gotten a great product for the price. Easy to maintain and set up on new devices. Support is great and easy to work with and understand.

Incentivized

The usability has never been a problem. Sophos Intercept X is a program you can install and let protect your company without much intervention. Apart from a few policies, Sophos will keep you protected better than most any product on the market. Sophos Intercept X works quite well when you are looking to "tighten your grip" on user's access to websites, programs, and add-ons.

Most of the support reps are fantastic. There have been a few though that have had to be escalated via Account Manager when they haven't followed up but this is a rare instance, and often followed up by the Support Manager for APAC.

Incentivized

Best thing was the help pushing out via group policy and was able to get instructions for that on sophos site

Incentivized

Kaspersky EDR Expert delivers much better protection and detection rate

I don't feel it's fair to compare Sophos Intercept X with the versions of Symantec and AVG that I have used in the past - as that was such a long time ago. I'm sure those other companies have released far more features than I used all those years ago

Incentivized

• Automating response task on suspicious activity
• Improving IT specialists skills and IS specialists skills
• Increased visibility of what malware really do on endpoint

• Before we had Intercept X, we had several infections of ransomware. Since that time it has stopped at least 10 attempts, saving us thousands of man-hours and hundreds of thousands of dollars.
• By decreasing the time needed for malware remediation, it has saved us the cost of .25 FTE in the IT department.
• Initial setup was cumbersome and cost us .1 FTE in additional costs the first year.

Incentivized