LogMeIn Rescue vs. Symantec Content & Malware Analysis

Most of the time it is great. Sometimes with iPads it is not great or too expensive for orgs to pay for an option to allow iPads to be logged into along with computers and windows computer tablets. When needing to view something a client is talking about. It is great to use login to understand the issue and possibly fix any issues we need.

Incentivized

If you have Symantec based environment including Symantec proxy and endpoints, Content and Malware Analysis is the obvious choice. You can't run the CAS-MAS as a standalone deployment, you need proxies or ICAP supported devices capable to send the files/URLS. It's not a network security device where you can flow/direct the traffic to C/MAS. It does not have UBA, NBA or NTR features, it is just working for analyzing files as expected.

• The rescue lens feature has come in handy to save us plenty of times. being able to have eyes on the end users' side to see how things are actually physically connected.
• Having the ability to collaborate with other technicians is a feature that I have not seen in other applications. normally the other person has to connect as well which results in lowered connection speed on the end user's side since 2 connections are running.
• The tools to be able to locate and audit sessions are also very valuable for measuring the performance of my technicians.

Incentivized

• 0 day detection and prevenion
• Flawless integration with Symantec Ecosystem
• Integration with other vendors supporting ICAP is also working
• Custom and golden image support
• High performance on busy environments
• Many threats are already detected and prevented through the CAS, it improves the performance drastically.
• Already builtin virustotal integration
• Reference to updates and updates information where I can see the product/service detecting which APTs
• Multiple Antivirus engines which you can select/subscribe
• Manual submission of file is supported through the gui
• URL manual submission is also supported

• one of the prompt in windows users is not vissible, somethimes users missed it and you must start from scratch
• more documentation for apple users
• never could record a session, all the time was a permissions issue, don't know how to do it

Incentivized

• API support is lacking
• Symantec/Broadcom security vision in general
• Symantec support is not perfect
• You can't run the product as a standalone network device
• No packet capture capabiliy or work in span mode
• You need a dedicated hardware to make it run
• You need to buy

We may continue using Logmein as it is the best remote support application in terms of connection latency and control. However, since several of our client sites have stricter security policies they block this application and we have to switch to other ways which is inconvenient

Incentivized

For user i think it needs improvement as every remote session I need to download the app, find it, open it, and allow access. For Agent it is well suited to provide support and preform any task required on the user workstation

Incentivized

Log me in has never failed me

Incentivized

no complaints

Incentivized

I'd say support for LogMeIn is ideal because I haven't ever been in a situation where additional support was necessary. The program runs so efficiently and simply that nothing was needed beyond initial training that was provided by my company. I am saying this as a user that strictly uses the technician console

Incentivized

Make sure you have your LogMeIn Rescue account sign-in details handy when installing on multiple support systems.

Incentivized

Truth be told, Rescue is the first and so far only solution from LogMeIn I started to use. However since it offers a wide range of tools specifically designed for remote support, it is highly effective for resolving technical issues. Additionally, Rescue provides various connection methods and customizable interfaces, allowing support teams like mine to tailor the experience to specific needs.

Incentivized

We have been using many solutions even tested nearly all available 0day sandbox solutions in the market. We choose Symantec CMA as we have already Symantec endpoint protection/EDR on the client, Symantec proxy for the web access, SCMA fits our environment. We have a big bargain when we puchase lots of equipment from the Symantec. Detection and prevention is very good at SCMA but some constant issues; like the product is not designed for heterogeneous environments, we can not integrate the SCMA with WAFs, it's lacking in api and request/reply calls. There's no file scanning, discover the option. SIEM integration is not smooth. I can not run some of the SOAR playbooks through the SCMA.

it's perfect

Incentivized

• For businesses with small to midsize IT staff, the ability to remotely control devices that are not on-site and occasionally out of state is extremely cost-effective.
• The speedy response time of LogMeIn Rescue has been very helpful in resolving issues for IT staff.
• The administrative process has been made more efficient by the ability to remotely log into servers.

Incentivized

• 0-day and APT risk is covered by the SCMA
• As the SSL is inspected and analyzed at Bluecoat proxy servers, hidden threats, malicous files are passed to SCMA to be analyzed.
• Getting full visibility at file trajectory level
• As it's a full proxy and ICAP integration, we are sure that the files are to analyzed and scanned for malicious activity. This is a big plus compared to NGFW analyze concept, as the NGFWs have special failsafe mechanisms allowing bypass of file analysis. SCMA fully catches the hidden threats.
• Flawless integration with Bluecoat systems is a big plus, customers are getting the same type of messages within their browsers.
• A negative impact is the standardization when I deploy SCAM to one of our locations. Then the auditors demand the same coverage within other areas and it comes with the cost. Especially maintaining these devices on premise environment has a significant cost.