Kaspersky EDR Expert vs. Sophos Intercept X for Server

It is a very comprehensive product to learn everything about incidents on the windows hosts. Also EDR can create some incidents during its analyze. But it is pretty useless when we are talking about linux systems. Further it is not so good when algorithms are not described clearly (like it was when we used Traps). So there are some ways to improve the product

Incentivized

We recently had a malware incident in our organization where we lost some of our files from the system and we were not able to detect the threat. That's when we deployed Sophos. Sophos Intercept X ticks all the boxes. It has helped prevent unauthorized programs from running and provides a managed threat response. The best part is its ability to recover files automatically.

Incentivized

• Detection
• Embedded Sandbox is a really good stuff, I can see detailed activity with visualization of any malicious sample
• Simple interface. Usability.

• Baseline policies
• Central management
• Secure

Incentivized

• It would be nice to have more insight into the kill chain of potential infections and malware.
• Remote interface is a little lacking as to why a file was flagged.

Incentivized

• Reporting isn't as detailed as it could be.
• The wait times for support are very long.
• There is no way to push the installer out.

Incentivized

I believe the Kaspersky EDR Expert systems represent significant cyber risks for government and commercial enterprise customers

Incentivized

Kaspersky EDR Expert delivers much better protection and detection rate

We have been utilizing Sophos Intercept X for Server for many years now, but previously we used Symantec. This was before a push for everything into the cloud - so I feel a fair comparison of the products is not possible. Symantec worked for us at the time, but I'm not fluent in current offerings from them.

Incentivized

• Automating response task on suspicious activity
• Improving IT specialists skills and IS specialists skills
• Increased visibility of what malware really do on endpoint

• Prevented virus/hacker attacks on our servers
• Have blocked applications that we do not allow
• Saved time on tracking virus, ransomware etc.

Incentivized